Re: httpd(8): fastcgi & Content-Length: 0

2021-05-20 Thread Matthias Pressfreund
usr.sbin/httpd/server_fcgi.c   Thu May 20 05:57:23 2021 > |+++ usr.sbin/httpd/server_fcgi.c   Thu May 20 06:03:40 2021 > -- > Patching file server_fcgi.c using Plan A... > Hunk #1 succeeded at 620. > Hunk #2 succeeded at 642. > done > > On

Re: httpd(8): fastcgi & Content-Length: 0

2021-05-19 Thread Matthias Pressfreund
My previous statement was not entirely correct as the Content-Length header is not set for ALL traffic, but just in case Content-Length is not set already. However, I'd still suggest to move the fix to where it belongs (in my opinion). On 2021-05-20 06:43, Matthias Pressfreund wrote: > F

Re: httpd(8): fastcgi & Content-Length: 0

2021-05-19 Thread Matthias Pressfreund
h header if upstream > doesn't give us one. (We'd need to slurp in all the data ugh). > > Now turns out that if we disable chunked encoding for zero sized bodies > some browsers are picky and want a Content-Length: 0 (Firefox, Safari) > or they'll just sit there and

Re: Regarding May 17 patch

2021-05-19 Thread Matthias Pressfreund
While trying to figure out why the May 17 patch in my case does not behave as expected, I was adding some extra debug output to server_fcgi_read, server_fcgi_header and server_fcgi_writechunk and started a httpd debug session during which I was signing in and out of a WordPress site's admin interfa

httpd(8): login/logout delay on WordPress sites after May 17 patch

2021-05-17 Thread Matthias Pressfreund
After the May 17 httpd(8) patch, logging in and logging out of the admin interface of WordPress sites is delayed by 1 minute. The site itself appears normally and there are no entries in the error log.

Re: ftpd(8): add pledge(2)

2021-05-13 Thread Matthias Pressfreund
Interesting. How do I figure the correct order of keywords? So far I thought it didn't matter. On 2021-05-13 18:40, Theo de Raadt wrote: > + if (pledge("stdio rpath inet recvfd sendfd " > + "wpath cpath proc tty getpw", NULL) == -1)

Re: httpd: Allow overriding global "no index"

2021-03-25 Thread Matthias Pressfreund
I've also noticed this some time ago. My suggestion was to simply permit auto-index locations inside no-index servers. https://marc.info/?l=openbsd-tech&m=160302351622195&w=2 On 2021-03-24 22:37, Quentin Rameau wrote: > Hello, > > It's been noted that the "directory no index" configuration > al

Re: patch: adding httpd implicit file extensions

2021-02-27 Thread Matthias Pressfreund
On 2021-02-27 00:38, Bruce Hill wrote: > Hello, this is my first time contributing to openbsd and this mailing > list, so please excuse any newbie blunders. I recently switched my > personal website to use httpd with statically generated HTML files, but > was unhappy to find that my HTML files co

httpd(8): fix location access test with empty server root

2020-11-06 Thread Matthias Pressfreund
Given the following httpd(8) configuration: server "example.com" { ... location found "/htdocs*" { root "" directory auto index } ... } Instead of showing the directory index, accessing http://example.com/htdocs fails with status cod

Re: acme-client(1): replace httpd(8) location block in manpage by better match

2020-11-03 Thread Matthias Pressfreund
On 2020-11-03 09:56, Florian Obser wrote: > On Mon, Nov 02, 2020 at 02:35:48PM +0100, Matthias Pressfreund wrote: >> The patch below updates the acme-client(1) manpage by providing a >> closer match for the httpd(8) location block accepting acme challenge >> responses. &g

acme-client(1): replace httpd(8) location block in manpage by better match

2020-11-02 Thread Matthias Pressfreund
The patch below updates the acme-client(1) manpage by providing a closer match for the httpd(8) location block accepting acme challenge responses. Index: usr.sbin/acme-client/acme-client.1 === RCS file: /cvs/src/usr.sbin/acme-client/

Re: httpd(8): add location access tests

2020-10-27 Thread Matthias Pressfreund
True. Updated patch below. On 2020-10-27 11:29, Denis Fondras wrote: > Thanks Matthias, > > comment below. > > On Tue, Oct 27, 2020 at 08:37:39AM +0100, Matthias Pressfreund wrote: >> Index: usr.sb

httpd(8): add location access tests

2020-10-27 Thread Matthias Pressfreund
p -u -p -r1.113 httpd.conf.5 --- usr.sbin/httpd/httpd.conf.5 5 Sep 2020 11:49:38 - 1.113 +++ usr.sbin/httpd/httpd.conf.5 27 Oct 2020 05:59:05 - @@ -1,5 +1,6 @@ .\"$OpenBSD: httpd.conf.5,v 1.113 2020/09/05 11:49:38 tb Exp $ .\" +.\" Copyright (c) 2020