wayland/mango: update to re-tagged 0.15.5
Upstream reacted unexpectedly soon to my report on a noisy debug message
left over in the release, and moved the 0.15.5 tag to the fix.
httpd: don't send the fastcgi param struct over imsg
Send one imsg per param with a small fixed header (fastcgi_param_imsg)
followed by the name and value bytes, and read it back with imsg_get_ibuf()
and ibuf_get_string(). The struct now uses dynamic buffer instead of fixed,
and the value limit is raised to 8192. Parse order is now preserved end-to-end
instead of being reversed twice. This follows the config order.
Feedback and OK kirill@
Unlock CRYPTO_LOCK_UI on ui_open_session() failure
Both ui_open_session() implementations, open_console() in ui_openssl.c
in base, and the one in ui_openssl_win.c in portable, grab the lock of
type CRYPTO_LOCK_UI before doing anything else.
The only internal (and, as far as I can tell, the only existing) caller,
UI_process(), returns immediately on failure. The calling thread thus
keeps holding the lock and the next call to UI_process() will block
indefinitely. Fix this by using the common exit path, which calls
ui_close_session() aka close_console(), both implementations of which
release the lock.
Thanks to Kartik (@sage-mode-hunter) who proposed an alternative fix for
ui_openssl_win.c, which we would have to apply to ui_openssl.c as well.
Matches OpenSSL behavior since PR #2037
Closes https://github.com/libressl/portable/pull/1334
ok kenjiro
relayd: correct edh relayd.conf.5
The previous wording implied that omitting "params" defaulted to auto.
"edh" alone enables EDH in auto mode, while leaving the directive out
keeps EDH disabled (equivalent to no edh / edh params none).
httpd: add custom HTTP header support
Allow httpd.conf to set/add/remove custom HTTP response headers or Suppress
existing ones. This enables httpd to add security headers, custom metadata,
or remove unwanted headers without modifying app/fastcgi code.
Three new directives are added:
header option
Manipulate HTTP response headers. Multiple header statements may
be specified. Valid options are:
set name value [always]
Set a custom HTTP response header with the specified name
and value. If a header with the same name is already
present in the response, its value will be replaced. The
header is added to successful responses (2xx and 3xx
status codes) by default.
[57 lines not shown]
