Parent Directory
| 
Revision Log
| Links to HEAD: | (view) (annotate) |
| Sticky Revision: |
Fix brown-paper-bag bug.
Verify that password has been truncated before printing a warning.
Print a warning if a password is truncated by crypt.
htpasswd: Improve out of disk space handling PR: 30877
Change the default algorithm for htpasswd to MD5 on all platforms. Crypt with its 8 character limit is not useful anymore.
remove TPF support
* support/htpasswd.c (seed_rand): Fix compiler warning.
Fix printing of error message.
Improve generation of the seed to rand, by using apr_generate_random_bytes, rather than the current time as a seed. PR: 31440
Improve salt string generation. PR: 31440 Submited by: Andreas Krennmair <ak synflood.at>
Make the hardcoded checks for platforms-without-crypt consistent. This apparently fixes some oddities on TPF. Submitted by: David Jones <oscaremma gmail.com> Reviewed by: wrowe, trawick
update license header text
Update the copyright year in all .c, .h and .xml files
If we don't have a prototype for crypt() we shouldn't be calling it. Casting to the desired pointer return type hides the truncation of the return value when sizeof(ptr) > sizeof(int) and no prototype was included.
No functional Change: Removing trailing whitespace. This also means that "blank" lines consisting of just spaces or tabs are now really blank lines
- Use the correct newline in htpasswd, instead of always using \n. PR: 25090
Update copyright year to 2005 and standardize on current copyright owner line.
general property cleanup
Use standardized names for ISO-8859-1, see http://www.iana.org/assignments/character-sets (Using the name iso8859-1 may still work, because it is aliased in apr-iconv/ccs/charset.aliases)
no longer refuse to process files that contain empty lines
htpasswd.c: various cleanups and move to using apr_temp_dir_get() Submitted by: Guenter Knauf Reviewed by: Thom May
fix name of The Apache Software Foundation
fix copyright dates according the first cehck in
apply Apache License, Version 2.0
update license to 2004.
Add a delete flag to htpasswd.
(grabbed from archive)
Check the processed file on validity. If a line is not empty
and not a comment, it must contain at least one colon. Otherwise exit
with error code 7.
Submitted by: Thom May <thom@planetarytramp.net> (on 2002-07-02)
Kris Verbeeck <Kris.Verbeeck@ubizen.com> (on 2002-10-22)
finished that boring job: update license to 2003. Happy New Year! ;-))
template parameter passed to apr_file_mktemp() must be modifiable
We can't just create the temporary file in the current directory. If that directory isn't writable, htpasswd won't work. This adds a function whose responsibility it is to find a valid directory for temporary files.
Revert r1.57 and r1.58 per Will Rowe's veto.
(I intend to add this back in if/when mod_authn_file can support the
{algo} password semantics, but we can't do a release with this code in
place.)
truncate existing file if "-c" is used
Move another non-exists test into the non-existing tests block, and clean up the comments a bit more.
More code cleanup: added some error checks and removed unused functions
remove single-byte file reads
cleaned up the file access checking
1. Eliminate perror(), it's not portable. 2. Restructure bit tests, ! is a logical, not a bitwise negation. 3. Clean up just a bit of other ! syntax fooness and excess parens.
Avoid a compiler error on NetWare Submitted by: Jean-Jacques Clar (jjclar@novell.com)
Add ability to htpasswd (via -5) to produce non-obfuscated MD5 hashes. mod_auth_digest's passwords can not be obfuscated by the APR magic sequence (as we don't call apr_password_validate on them), therefore we need a tool to produce true MD5 hex hashes.
Style fixes. (long lines) (Justin tweaked one character in this patch.) Submitted by: Thom May <thom@planetarytramp.net> Reviewed by: Justin Erenkrantz
Continue the Bill Rowe apr_size_t crusade.
We obviously have no idea if this code is right. We can't close unopened files.
Remove unused variable 'str'.
Use the apr_file_copy function rather than doing a system call to copy the file. Submitted by: Thom May <thom@planetarytramp.net> Reviewed by: Justin Erenkrantz
found wasn't getting incremented when we update an exisiting record, thus an additional new record was getting created. Submitted by: Thom May <thom@planetarytramp.net> Reviewed by: Justin Erenkrantz
htpasswd needs to add a newline at the end of each record. PR: 10422 Submitted by: Thom May [thom@planetarytramp.net]
Grrrr. Fix the htpasswd -c -n logic bug *the right way* this time. :( PR: 9989
* clear up a warning that NOFILE was redefined on HP/UX. * fix a logic bug ... a binary and that should have been a binary or. (that one was just reporting a commandline args error, noncritical)
squash warnings
Get this to work on win32 :(
Finish the htpasswd port to APR. This brings the file checking code to APR.
First pass at cleaning up htpasswd. This removes the tmpnam call in favor of apr_file_mktemp. This also APR-izes most of the code. The file access code is still not using APR, but that will be fixed next. I also re-organized some of the code to make it a little cleaner, and to use functions where I could. PR: 7764
Prepare for Thom's real patch... this is a detabify only [passes cvs diff -w with no changes.] Submitted by: Thom May <thom@planetarytramp.net>
avoid colliding with getline() as defined by glibc (it breaks if you need to turn on _GNU_SOURCE)
Correct const'ness of argv in all support apps, and use the new apr_app_initialize over apr_initialize for win32, and other platforms that may wish to tweak 'apr-ized' application support (e.g. Netware?)
Update our copyright for this year.
Updates to allow the utilities to run on NetWare
APR_FINFO_TYPE is all we really needed here.
A pool is a REQUIRED ARGUMENT, never optional (NULL). This is why Mladen observed that htpasswd was still broken.
Use a better format type for sizeof. This stops a few compiler warnings.
Update copyright to 2001
Still lots to apr'ize here.
renaming various functions for consistency sake see: http://apr.apache.org/~dougm/apr_rename.pl PR: Obtained from: Submitted by: Reviewed by:
The changes required for the APR_FINFO_wanted argument to apr_stat/lstat/getfileinfo. These are -NOT- optimal, they are simply the required changes to get the server working. The size of the patch is a warning about how we need to really look at what we are trying to accomplish with all of these stat/lstat calls.
The big change. This is part 3 of the apr-util symbols rename, please see the first commit of srclib/apr-util/include (cvs apr-util/include) for the quick glance at symbols changed.
Cleanups so that the support programs build cleanly. The Win32 values need to be sanity checked. Submitted by: Cliff Woolley <cliffwoolley@yahoo.com> Reviewed by: Ryan Bloom
All the supports now build on APR (+APRUTIL), no reliance on httpd.
This should build entirely with apr/aprutil support
Switch to the APR-provided APR_CHARSET_EBCDIC feature test macro.
Force all Apache functions to be linked into the executable, whether they are used or not. This uses the same mechanism that is used for APR and APR-util. This may not be the correct solution, but it works, and that is what I really care about. This also renames CHARSET_EBCDIC to AP_CHARSET_EBCDIC. This is for namespace correctness, but it also makes the exports script a bit easier.
Get htpasswd.c to build on EBCDIC machines again.
*) Compensate for recent changes in the APR headers. Specifically, some files need to specifically include stdio.h, or a particular apr_*.h header. *) Adjust callers of apr_create_process() to deal with the extra "const" *) Add "const" to args of ap_os_create_privileged_process()
Fix compile break in Win32
Completed review for new tests:
APR_STATUS_IS_EACCES(s)
APR_STATUS_IS_EEXIST(s)
APR_STATUS_IS_ENAMETOOLONG(s)
APR_STATUS_IS_ENOENT(s)
Where the old EACCES et. al. still exist, we have a problem (not yet
using APR at all)
More to come...
Fix some problems with the apr conversion so that APACHE_XLATE builds work again.
prefix libapr functions and types with apr_
Move all APR functions related to strings to their own directory, and create a new header for those functions. This is the first step to removing the apr/lib directory completely, and moving those files/functions to descriptive directories.
Include strings.h for strcasecmp(), strncasecmp(), and bzero(). Include time.h for time(). This removes a bunch of compiler warnings with gcc -Wall on AIX. Submitted by: Jeff Trawick, Victor Orlikowski
Fix another compiler warning. Forgot to commit this one along with the earlier patch. Sorry... Submitted by: Victor Orlikowski Reviewed by: Bill Stoddard
Remove the final vestiges of stat.h from Apache 2.0. All calls are now to ap_stat. This also adds the new function ap_lstat(). This function is analogous to lstat.
Add '-n' option to make htpasswd send user:pw result to stdout instead of fiddling with a text file. Reviewed by: Greg Stein
APR-ize the CHARSET_EBCDIC support in the SHA1 routines. The app (e.g., Apache, htpasswd) must call a function to set up translation.
EBCDIC bug fix: do the required translation handle initialization so that ap_MD5Encode() can translate properly
Get rid of warning by including crypt.h when available. Make tmpnam stuff less complex.
Use our own buffer for tmpnam() if the platform seems to know about it. Avoids threading and reentrancy problems.
Be more expliciti in our error messages if the tmpnam() call fails, or we have trouble opening the filename it returns. PR: Not a solution, but will help debug several
PR: Obtained from: Submitted by: Reviewed by: Sorry I missed one. I -really- believe now that ap.h can now be safely swept out to the attic, but I will leave for someone in unix to test and confirm.
Some Windows tweaks from William Rowe... Submitted by: William Rowe
Include apr_md5.h rather than the deprecated ap_md5.h. Fixes compile break.
Update to Apache Software License version 1.1
Get htpasswd compiling under Windows Submitted by: William Rowe Reviewed by: Bill Stoddard
Fix all the License issues. Including: s/Apache Group/Apache Software Foundation/ s/1999/2000/ s/Sascha's license/ASF license
Add a status value to ap_log_error and ap_log_rerror. This allows us to use apr_status codes in our error logs. The main advantage of this, is portable error codes. Now, Windows will finally be able to use errno!
Make the support stuff finitely working again. BTW, how can it be that nowadays it can happen that the Apache Group has a source tree which doesn't compile under Unix for more than two weeks (I was busy with exams and it didn't compile src/support/ already there)? In the past this was definitely not possible. Seems like the source-centered hacker focus drifts away... sorry, for me this seems like a horrifying evolution, friends. Please let us always make sure that the source at least compiles. I don't want to say it should also run, but hell, it should at least compile and if not it should be fixed within a few days...
Apache 1.3.9 baseline for the Apache 2.0 repository. Obtained from: Apache 1.3.9 (minus unused files), tag APACHE_1_3_9 Submitted by: Apache Group
This form allows you to request diffs between any two revisions of this file. For each of the two "sides" of the diff, enter a numeric revision.
| apache@apache.org | ViewVC Help |
| Powered by ViewVC 1.1.2 |