Commit Graph

18 Commits

Author SHA256 Message Date
26634a3d77 Accepting request 949462 from home:pgajdos
- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf

OBS-URL: https://build.opensuse.org/request/show/949462
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=666
2022-01-31 10:50:24 +00:00
41e048c7d1 - add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf

OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=593
2019-12-18 16:37:29 +00:00
66fc0a512c Accepting request 666416 from home:adkorte:branches:openSUSE:Factory
- SSLProtocol use TLSv1.2 or higher

OBS-URL: https://build.opensuse.org/request/show/666416
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=575
2019-01-16 10:16:44 +00:00
bf4d7cec8d Accepting request 663183 from home:dirkmueller:branches:Apache
- use secure http sites by default in configs
- Switch to DEFAULT_SUSE Cipher suite

READ https://httpd.apache.org/docs/2.4/upgrading.html
  at https://httpd.apache.org/docs/2.4/new_features_2_4.html

OBS-URL: https://build.opensuse.org/request/show/663183
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=573
2019-01-07 08:22:38 +00:00
e86bea8079 Accepting request 644712 from home:adkorte:branches:Apache
- the "event" MPM is fully supported since 2.4
- configure an OCSP stapling cache by default (still requires enabling
  SSLUseStapling in vhost)

OBS-URL: https://build.opensuse.org/request/show/644712
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=572
2018-11-01 14:07:47 +00:00
ce2b1ccf73 Accepting request 591690 from home:k_mikhail:branches:Apache
- Updated description for SSLProtocol option. [bsc#1086854]
- Updated description (PCI DSS) for SSLProtocol option. [bsc#1086854]

OBS-URL: https://build.opensuse.org/request/show/591690
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=560
2018-03-27 15:27:01 +00:00
515530ab20 - SSLProtocol TLSv1.2 [bsc#1086854]
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=559
2018-03-26 14:17:25 +00:00
f969280a56 Accepting request 321967 from home:kstreitova:branches:Apache
- fix Logjam vulnerability (follows the https://weakdh.org/sysadmin.html guide)
  Change SSLCipherSuite cipherstring to disable export cipher suites
  and deploy Ephemeral Elliptic-Curve Diffie-Hellman (ECDHE) ciphers.
  Adjust 'gensslcert' script to generate a strong and unique Diffie
  Hellman Group and append it to the server certificate file
  [bnc#931723], [CVE-2015-4000]

OBS-URL: https://build.opensuse.org/request/show/321967
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=458
2015-08-12 07:21:37 +00:00
924136ec0d Accepting request 314699 from home:pgajdos
- allow to run multiple instances of Apache on one system
  [fate#317786] (internal)
  * distributed httpd.conf no longer includes sysconfig.d, nor this 
    directory is shipped. httpd.conf includes loadmodule.conf and 
    global.conf which are former sysconfig.d/loadmodule.conf and 
    sysconfig.d/global.conf for default /etc/sysconfig/apache2
    global.conf and loadmodule.conf are not included when
    sysconfig variables could have been read by start_apache2
    startup script (run with systemd services). Therefore, when
    starting server via /usr/sbin/httpd, sysconfig variables
    are not taken into account.
  * some not-maintained scripts are moved from
    /usr/share/apache2 to /usr/share/apache2/deprecated-scripts
  * all modules comment in sysconfig file is not generated 
    anymore
  * added README-instances.txt
  * removed Sources:
    load_configuration
    find_mpm
    get_module_list
    get_includes
    find_httpd_includes
    apache-find-directives
  * added Sources:
    deprecated-scripts.tar.xz
    apache2-README-instances.txt
    apache2-loadmodule.conf
    apache2-global.conf
    apache2-find-directives
    apache2@.service

OBS-URL: https://build.opensuse.org/request/show/314699
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=452
2015-07-13 08:18:58 +00:00
Roman Drahtmueller
3cd0bfc911 Accepting request 280312 from home:AndreasSchwab:f
- Fix URL syntax in various files

OBS-URL: https://build.opensuse.org/request/show/280312
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=427
2015-01-08 14:49:10 +00:00
fefabf0a4d Accepting request 266793 from home:pgajdos
- fix IfModule directive around SSLSessionCache [bnc#842377c#11]

OBS-URL: https://build.opensuse.org/request/show/266793
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=426
2014-12-30 13:15:12 +00:00
163b7694ca Accepting request 252743 from home:lnussel:branches:Apache
- move most ssl options to ssl-global.conf. There is usually no need
  for every vhost to re-define the ciphers for example (bnc#865582).
  Drop some commented entries that only lead to confusion.

OBS-URL: https://build.opensuse.org/request/show/252743
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=407
2014-09-29 08:10:08 +00:00
4b31aea044 Accepting request 252506 from home:pgajdos
- more 2.2 -> 2.4 [bnc#862058]

OBS-URL: https://build.opensuse.org/request/show/252506
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=406
2014-09-26 15:16:44 +00:00
Roman Drahtmueller
c5bb63f9e2 - /etc/sysconfig/apache2: add socache_shmcb to the list of modules
that are enabled.
  /etc/apache2/ssl-global.conf: make SSLSessionCache shmcb...
  conditional on IfModule socache_shmcb.
  The same applies to SSLSessionCache dmb:* via module socache_dbm
  in commented section of same file. [bnc#864185]
- /etc/sysconfig/apache2: remove reference to non-existing script
  /usr/share/doc/packages/apache2/certificate.sh, which was only a
  wrapper to mkcert.sh anyways. [bnc#864185]

OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=401
2014-02-17 17:32:05 +00:00
Cristian Rodríguez
148df8527a Accepting request 184902 from home:elvigia:branches:Apache
- provide and obsolete mod_macro 
- upgrade: some people complain that log_config module 
 is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here 
  as kernel bugs have to be fixed at their source, not worked around
  in applications.

OBS-URL: https://build.opensuse.org/request/show/184902
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=384
2013-07-29 23:51:31 +00:00
Peter Poeml
8877af9243 - fix installation of (moved) man pages
- adjusted SSL template/default config for upstream changes, and added
  MaxRanges example to apache2-server-tuning.conf

OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=359
2012-02-18 21:19:08 +00:00
Roman Drahtmueller
f247c8cfd7 Accepting request 81909 from home:fcrozat:systemd
- Add apache2-systemd-ask-pass / apache2.service / start_apache2
  and modify apache2-ssl-global.conf for systemd support
  (bnc#697137).

OBS-URL: https://build.opensuse.org/request/show/81909
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=335
2011-09-12 12:20:52 +00:00
OBS User unknown
692583743f OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apache2?expand=0&rev=1 2006-12-20 17:01:15 +00:00