summaryrefslogtreecommitdiff
path: root/libexec/httpd/bozohttpd.8
AgeCommit message (Collapse)Author
2023-06-07add a note about how to setup http -> https redirection.mrg
bump documented version.
2022-09-12Document the -q option.martin
2022-05-18call this bozohttpd 20220517.mrg
2022-01-04bozohttpd: remove obsolete .bzdirect handlingkim
OK mrg@
2021-08-24implement tls minimum version setting.mrg
mostly from sunil@nimmagadda.net in PR#55830, though i moved the member into the main http structure, so that it doesn't trigger sslinfo being allocated via command line without the rest of the ssl being setup (which then leads to crashes.)
2021-02-28update version, dates, add emily to list of contributors. sort list.mrg
2020-10-15New sentence, new line. Fix xref.wiz
2020-10-15various updates from <henrik@gulbra.net> / freebsd. the list from Henrik:mrg
bozohttpd.8: o Added -d flag to the man page o Moved -E flag in man page to keep alphabetic order o Grammar fix for description of -E flag in man page o Moved a word in the man description for the -f flag o Made -f imply -b as a backwards-compatible shortcut o Updated man description of -n to mention Lua scripts o Moved -z below -Z to keep the uppercase options first bozohttpd.c: o Removed obsolete comment about ~user missing cgi-bin support o Removed "/* ARGSUSED */" lines; was that a macro or a reminder? o Added USE_ARG macro call for sig, which was otherwise not used o Added USE_ARG macro call for msg (only used if debug is enabled) bozohttpd.h: o Fixed typo in the include guard (BOZOHTTOPD_H_ -> BOZOHTTPD_H_) o Renamed have_all to have_core; it didn't mean "all" options content-bozo.c: o Added USE_ARG macro call for signo, which was otherwise not used o Made -f imply -b as a backwards-compatible shortcut main.c: o Simplified -b text to be symmetric with that for the -f option o Updated -C text to make "suffix" explicit; it's better than "arg" o Changed to only show the -E description if have_user is true o Always show the -e option, which incorrectly used the -E logic o Renamed have_all to have_core; it didn't mean "all" options o Added three missing tabs for the description of the -G option o Updated -L text to make "prefix" explicit; it's better than "arg" o Updated -M text to make "suffix" explicit; it's slightly better o Added a previously missing description for the -n option o Documented the otherwise obscure valid types for the -T option o Shortened "username" to "user" to match the actual help text o Moved handling of -c below that for -C to standardize the order o Broke the enabling test for -C into two lines for consistency o Inverted the enabling test for -E; this is what was meant, right? o Removed the enabling test for -e, which should always be enabled ssl-bozo.c: o Added USE_ARG for httpd, which is not used if SSL has been excluded
2020-10-15set -D_GNU_SOURCE in Makefile.boot. from hadrien.lacour@posteo.net.mrg
also match %2F as well as %2f. from leah@vuxu.org. introduce defines for "80" and "443". copyright maint.
2020-08-20update for recent changes.mrg
2020-07-13Use Nx.wiz
2020-07-13Do not report status code 500 to blocklistd(8) Add -DNO_BLOCKLIST_SUPPORTjruoho
to Makefile.boot.
2020-07-11Add blocklistd(8) support.jruoho
2020-07-06Add -R flag to specify a README file to add at the bottom of directoryjmcneill
autoindex listings.
2019-02-28add ssl specific timeout value (30s). if SSL_accept() doesn'tmrg
work with in this timeout value, ssl setup now fails. mostly different from, but inspired from the patch in PR 50655
2019-01-17- call this 20190116mrg
- adjust the directory indexing again: - don't include "index.html" in html headers - additional escaping of names - re-add top/bottom borders - adds an aquamarine table header - Zebra-stripes table rows using CSS instead of code all from "Rajeev V. Pillai" <rajeev_v_pillai@yahoo.com>
2019-01-08remove reference to deleted -r option. fixes PR#53840 from J. Lewis Muir.mrg
2018-12-19minor rewording. fix alphabeta ordering of contributors.mrg
2018-12-04use html tables for directory index.mrg
from "Rajeev V. Pillai" <rajeev_v_pillai@yahoo.com> call this bozohttpd 20181204.
2018-11-23minor style fixes. simplify bozo_match_content_map().mrg
2018-11-20from CHANGES:mrg
o reduce default timeouts, and add expand timeouts to handle the initial line, each header, and the total time spent o add -T option to expose new timeout settings o minor RFC fixes related to timeout handling responses old timeouts: 60 seconds for initial request like, 60 seconds per header line, and no whole timeout (though the recent total header size changes do introduce one that would be about 11 hours.) new timeouts: 30 seconds for initial request like, 10 seconds per header line, and a total request time of 600 seconds. the new global timeout is implemented using CLOCK_MONOTONIC, with a fallback to CLOCK_REALTIME if monotonic time is unavailable. reject multiple Host: headers. besides being protocol standard, this closes one additional memory leak found by JP. add a simple test to check this. clean up option and usage handling some.
2018-11-19note the changes present in bozohttpd 20181118:mrg
o add url remap support via .bzremap file, from martin@netbsd.org o handle redirections for any protocol, not just http: o fix a denial of service attack against header contents, which is now bounded at 16KiB. reported by JP.
2018-08-24Remove trailing whitespace.wiz
2018-08-24Bump datemartin
2018-08-24Add support for remapping requested paths via a .bzredirect file.martin
Fixes PR 52772. Ok: mrg@
2017-11-28Document script handler issues with httpd(8).wiz
From martin@, addressing PR 52194. While here, use American spelling consistently and upper-case some abbreviations. Bump date.
2017-07-07fix ordering of a couple of words. from Edgar Pettijohn in PR#52375.mrg
thanks!
2017-07-03Remove workaround for ancient HTML generation code.wiz
2017-01-31call this bozohttpd 20170201.mrg
2017-01-20Fix typo: s/suport/supportabhinav
2016-12-21Fix sentences at a couple of places.abhinav
2016-12-11there was a bug fix in july. call this 20160720.mrg
2016-10-04update the -V documentation to be more clear about what it does.mrg
inspired by Swift Griggs on netbsd-users.
2016-05-24As proposed in:agc
http://mail-index.netbsd.org/tech-userlevel/2016/05/18/msg009999.html and https://www.netbsd.org/~agc/bozo-20160517.diff add a patch to httpd to return the version string of httpd itself, and use the -G option on the command line to enable this. This gives httpd the ability to show, from the command line, what version is running. % /usr/build/obj/x86_64/usr/src/libexec/httpd/bozohttpd -G bozohttpd version bozohttpd/20160415 %
2016-04-15updates and bozohttpd 20160415:mrg
o add search-word support for CGI o fix a security issue in CGI suffix handler support which would allow remote code execution, from shm@netbsd.org o -C option supports now CGI scripts only
2015-12-27several clean ups:mrg
- bozostrdup() gains a request parameter, and uses it to determine what sort of error handling is required - bozo_strdup() dies - size_arrays() reduced slightly, pushing error handling into the caller - convert to size_t for some array indices - bozo_set_pref() and bozo_init_prefs() gain httpd parameters - apply a bunch of manual CSE to vastly reduce the number of times the string "request->hr_httpd" appears. - CGI parse_header() takes a request not httpd now XXX: lua glue updated to call bozo_init_prefs() with htttpd parameter, but i'm only guessing here.
2015-12-12- restrict the default list of ciphers to something more securechristos
- restrict ssl options From Travis Paul
2015-11-29Bump date for previouskamil
2015-11-29Synchronize SYNOPSIS with realitykamil
2015-10-28* add CGI support for ~user translation (-E switch)shm
* add redirects to ~user translation * fix bugs around ~user translation * add schema detection for absolute redirects * fixed few memory leaks * bunch of minor tweaks * removed -r support * smarter redirects OK mrg@
2015-08-13Remove trailing space in boast.wiz
2015-08-13Extend AUTHORS section. Nobody likes a braggart.shm
OK mrg@
2015-05-02fix content type handling to not hard code (wrong) values for length,mrg
but just call strlen() as needed. call this 20150501. reported by Jan Danielsson for ".svg".
2015-04-16install as bozohttpd/bozohttpd.8 as well as httpd.mrg
2015-03-20copyright maintenance, note shm@ in the manual and update the CHANGESmrg
for recent changes. call this 20150320.
2014-12-25Bring this man page back to this decade.wiz
2014-12-25call this 20141225.mrg
2014-02-09- bump man page datemrg
- strip :80 off virtual host names as they're the default
2014-02-09some fixes for virtual hosting support from Rajeev V. Pillai:mrg
- memory leaks in virtual host plugged - ensure hr_host is only the host/port part when the request contains the hostname in the URI not Host: header. also update the references to the old http/1.1 draft rev 06 to RFC 2616 (fortunately, most sections hadn't moved.)
2014-02-02update for 2014-02-01.mrg