From c18514225db2835dfe22843100307c4bc8a59576 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Mon, 5 Aug 2024 12:00:11 +0200 Subject: Merging upstream version 2.4.62. Signed-off-by: Daniel Baumann --- docs/manual/mod/core.html.de | 2 +- docs/manual/mod/core.html.en | 20 ++++++++++---- docs/manual/mod/core.html.es | 2 +- docs/manual/mod/core.html.fr.utf8 | 36 ++++++++++++++++++++------ docs/manual/mod/core.html.ja.utf8 | 2 +- docs/manual/mod/core.html.tr.utf8 | 2 +- docs/manual/mod/mod_rewrite.html.en | 6 +++++ docs/manual/mod/mod_rewrite.html.fr.utf8 | 15 +++++++++++ docs/manual/mod/mod_ssl.html.en | 13 ++++++++-- docs/manual/mod/mod_ssl.html.fr.utf8 | 15 +++++++++-- docs/manual/mod/quickreference.html.de | 2 +- docs/manual/mod/quickreference.html.en | 2 +- docs/manual/mod/quickreference.html.es | 2 +- docs/manual/mod/quickreference.html.fr.utf8 | 2 +- docs/manual/mod/quickreference.html.ja.utf8 | 2 +- docs/manual/mod/quickreference.html.ko.euc-kr | 2 +- docs/manual/mod/quickreference.html.tr.utf8 | 2 +- docs/manual/mod/quickreference.html.zh-cn.utf8 | 2 +- 18 files changed, 100 insertions(+), 29 deletions(-) (limited to 'docs/manual/mod') diff --git a/docs/manual/mod/core.html.de b/docs/manual/mod/core.html.de index a025992..06368d2 100644 --- a/docs/manual/mod/core.html.de +++ b/docs/manual/mod/core.html.de @@ -3624,7 +3624,7 @@ bevor er die Anfrage abbricht - + diff --git a/docs/manual/mod/core.html.en b/docs/manual/mod/core.html.en index ba049f3..f5efca3 100644 --- a/docs/manual/mod/core.html.en +++ b/docs/manual/mod/core.html.en @@ -5000,7 +5000,7 @@ certain events before failing a request
Beschreibung:Controls what UNC host names can be accessed by the server
Syntax:UNCListhostname ...
Syntax:UNCList hostname [hostname...]
Voreinstellung:unset
Kontext:Serverkonfiguration
Status:Core
- + @@ -5012,10 +5012,20 @@ certain events before failing a request has been specified by this directive. The intent is to limit access to paths derived from untrusted inputs.

-

Security

-

UNC paths accessed outside of request processing, such as during startup, -are not checked against the hosts configured with this directive.

-
+

+ UNCList example.com other.example.com +

+ +

Security

+

UNC paths accessed outside of request processing, such as during startup, + are not necessarily checked against the hosts configured with this directive.

+
+ +

Directive Ordering

+

This directive should be placed before UNC paths used in httpd.conf. + Multiple occurrences of the directive reset the list.

+
+
top
diff --git a/docs/manual/mod/core.html.es b/docs/manual/mod/core.html.es index a563573..5efc11d 100644 --- a/docs/manual/mod/core.html.es +++ b/docs/manual/mod/core.html.es @@ -4323,7 +4323,7 @@ certain events before failing a request
Description:Controls what UNC host names can be accessed by the server
Syntax:UNCListhostname ...
Syntax:UNCList hostname [hostname...]
Default:unset
Context:server config
Status:Core
- + diff --git a/docs/manual/mod/core.html.fr.utf8 b/docs/manual/mod/core.html.fr.utf8 index 4ca5ec6..cc7a612 100644 --- a/docs/manual/mod/core.html.fr.utf8 +++ b/docs/manual/mod/core.html.fr.utf8 @@ -33,8 +33,6 @@  ja  |  tr 

-
Cette traduction peut être périmée. Vérifiez la version - anglaise pour les changements récents.
Descripción:Controls what UNC host names can be accessed by the server
Sintaxis:UNCListhostname ...
Sintaxis:UNCList hostname [hostname...]
Valor por defecto:unset
Contexto:server config
Estado:Core
Description:Fonctionnalités de base du serveur HTTP Apache toujours disponibles
Statut:Noyau httpd
@@ -5358,17 +5356,39 @@ dernière.
top

Directive UNCList

- - + - -
Description:Controls what UNC host names can be accessed by the server +
Description:Définit quels sont les noms d’hôte UNC auxquels le serveur peut accéder
Syntaxe:UNCListhostname ...
Syntaxe:UNCList hostname [hostname...]
Défaut:unset
Contexte:configuration globale
Statut:Noyau httpd
Module:core
Compatibilité:Added in 2.4.60, Windows only.

La documentation de cette directive - n'a pas encore t traduite. Veuillez vous reporter la version - en langue anglaise.

+Compatibilité:Windows seulement. Disponible à partir de la version 2.4.60 du +serveur HTTP Apache. + +

Au cours de leur traitement, les requêtes pour accéder à un chemin du + système de fichiers qui aboutissent à un chemin UNC échoueront si le nom + d’hôte dans le chemin UNC n’a pas été spécifié par cette directive. Le but + est de limiter l’accès aux chemins dérivés d’entrées non fiables.

+ +

+ UNCList example.com other.example.com +

+ +

Sécurité

+

Les chemins UNC accédés en dehors du traitement d’une requête, par + exemple au cours du démarrage, ne font pas nécessairement l’objet d’une + vérification par rapport aux noms d’hôte configurés avec cette directive.

+
+ +

Ordre des directives

+

Cette directive doit être placée avant les chemins UNC utilisés dans le + fichier httpd.conf. Plusieurs occurences de la directive redéfinissent la + liste.

+
+ + +
top

Directive UnDefine

diff --git a/docs/manual/mod/core.html.ja.utf8 b/docs/manual/mod/core.html.ja.utf8 index e807744..96d4454 100644 --- a/docs/manual/mod/core.html.ja.utf8 +++ b/docs/manual/mod/core.html.ja.utf8 @@ -3552,7 +3552,7 @@ of a request or the last 63, assuming the request itself is greater than
- + diff --git a/docs/manual/mod/core.html.tr.utf8 b/docs/manual/mod/core.html.tr.utf8 index c3743b8..cbe05ac 100644 --- a/docs/manual/mod/core.html.tr.utf8 +++ b/docs/manual/mod/core.html.tr.utf8 @@ -4971,7 +4971,7 @@ gerçekleşmesi için sunucunun geçmesini bekleyeceği süre.
説明:Controls what UNC host names can be accessed by the server
構文:UNCListhostname ...
構文:UNCList hostname [hostname...]
デフォルト:unset
コンテキスト:サーバ設定ファイル
ステータス:Core
- + diff --git a/docs/manual/mod/mod_rewrite.html.en b/docs/manual/mod/mod_rewrite.html.en index 83bce1b..5728d8f 100644 --- a/docs/manual/mod/mod_rewrite.html.en +++ b/docs/manual/mod/mod_rewrite.html.en @@ -1463,6 +1463,12 @@ cannot use $N in the substitution string! details ... + + + +
Açıklama:Controls what UNC host names can be accessed by the server
Sözdizimi:UNCListhostname ...
Sözdizimi:UNCList hostname [hostname...]
Öntanımlı:unset
Bağlam:sunucu geneli
Durum:Çekirdek
UNCPrevents the merging of multiple leading slashes, as used by Windows UNC paths. + details ... +

Home directory expansion

diff --git a/docs/manual/mod/mod_rewrite.html.fr.utf8 b/docs/manual/mod/mod_rewrite.html.fr.utf8 index 621d369..41867ce 100644 --- a/docs/manual/mod/mod_rewrite.html.fr.utf8 +++ b/docs/manual/mod/mod_rewrite.html.fr.utf8 @@ -1564,6 +1564,21 @@ substitution ! Force l'attribution du Type-MIME spécifié au fichier cible. détails ... + + UnsafeAllow3F + Autorise les substitutions à partir d’URL potentiellement non + fiables. + détails ... + + + + UnsafePrefixStat + Autorise les substitutions potentiellement non fiables à partir + d’une variable de tête ou d’une référence arrière vers un chemin du + système de fichiers. + détails ... + +

Développement du répertoire home

diff --git a/docs/manual/mod/mod_ssl.html.en b/docs/manual/mod/mod_ssl.html.en index ee92ffb..3fc8a48 100644 --- a/docs/manual/mod/mod_ssl.html.en +++ b/docs/manual/mod/mod_ssl.html.en @@ -661,7 +661,7 @@ key is encrypted, the pass phrase dialog is forced at startup time. files, a certificate identifier can be used to identify a certificate stored in a token. Currently, only PKCS#11 URIs are recognized as certificate identifiers, and can be used in conjunction -with the OpenSSL pkcs11 engine. If SSLCertificateKeyFile is omitted, the +with the OpenSSL pkcs11 engine or provider. If SSLCertificateKeyFile is omitted, the certificate and private key can be loaded through the single identifier specified with SSLCertificateFile.

@@ -749,7 +749,7 @@ key file.

identifier can be used to identify a private key stored in a token. Currently, only PKCS#11 URIs are recognized as private key identifiers, and can be used in conjunction with the OpenSSL -pkcs11 engine.

+pkcs11 engine or provider.

Example

# To use a private key from a PEM-encoded file:
 SSLCertificateKeyFile "/usr/local/apache2/conf/ssl.key/server.key"
@@ -983,6 +983,15 @@ separate "-engine" releases of OpenSSL 0.9.6 must be used.

 SSLCryptoDevice ubsec
+

+With OpenSSL 3.0 or later, if no engine is specified but the key or certificate +is specified using a PKCS#11 URIs +then it is tried to load the key and certificate from an OpenSSL provider. +The OpenSSL provider to use must be defined and configured in the OpenSSL config file, +and it must support the STORE method +for PKCS#11 URIs. +

+
top

SSLEngine Directive

diff --git a/docs/manual/mod/mod_ssl.html.fr.utf8 b/docs/manual/mod/mod_ssl.html.fr.utf8 index 8f3a9b6..3889746 100644 --- a/docs/manual/mod/mod_ssl.html.fr.utf8 +++ b/docs/manual/mod/mod_ssl.html.fr.utf8 @@ -749,7 +749,7 @@ passe de la clé s'ouvre au démarrage du serveur. on peut utiliser un identificateur de certificat pour identifier un certificat stocké dans un jeton. Actuellement, seuls les URIs PKCS#11 sont reconnus comme identificateurs de certificats et peuvent être utilisés en conjonction avec le -moteur OpenSSL pkcs11. Si la directive SSLCertificateKeyFile est absente, le certificat et +moteur ou le fournisseur OpenSSL pkcs11. Si la directive SSLCertificateKeyFile est absente, le certificat et la clé privée peuvent être chargés avec l'identificateur spécifié via la directive SSLCertificateFile.

@@ -844,7 +844,8 @@ certificats qui utilisent un fichier de clé séparé.

d'identifier une clé privée via un identifiant stocké dans un jeton. Actuellement, seuls les PKCS#11 URIs sont reconnus comme identifiants de clés privées et peuvent être -utilisés en conjonction avec le moteur OpenSSL pkcs11.

+utilisés en conjonction avec le moteur ou le fournisseur OpenSSL +pkcs11.

Exemple

# Pour utiliser une clé privée stockée dans fichier encodé PEM :
 SSLCertificateKeyFile "/usr/local/apache2/conf/ssl.key/server.key"
@@ -1125,6 +1126,16 @@ qu'avec la version 0.9.6, il faut utiliser les distributions séparées
 SSLCryptoDevice ubsec
+

+À partir de la version 3.0 d'OpenSSL, si aucun moteur n'est spécifié alors +que la clé ou le certificat sont spécifiés à l'aide d'URIs PKCS#11, le chargement de la +clé et du certificat est tenté à partir d'un fournisseur OpenSSL. Le fournisseur +OpenSSL à utiliser doit être défini et configuré dans le fichier de +configuration d'OpenSSL et il doit prendre en charge la méthode +STORE pour les URIs PKCS#11. +

+ +
top

Directive SSLEngine

diff --git a/docs/manual/mod/quickreference.html.de b/docs/manual/mod/quickreference.html.de index eb417c0..fbd90a9 100644 --- a/docs/manual/mod/quickreference.html.de +++ b/docs/manual/mod/quickreference.html.de @@ -1197,7 +1197,7 @@ bevor er die Anfrage abbricht TraceEnable [on|off|extended] on sCLegt das Verhalten von TRACE-Anfragen fest TransferLog file|pipesvBSpecify location of a log file TypesConfig file-path conf/mime.types sBThe location of the mime.types file -UNCListhostname ...sCControls what UNC host names can be accessed by the server +UNCList hostname [hostname...]sCControls what UNC host names can be accessed by the server UnDefine parameter-namesCUndefine the existence of a variable UndefMacro namesvdBUndefine a macro diff --git a/docs/manual/mod/quickreference.html.en b/docs/manual/mod/quickreference.html.en index 9da6b32..0c81760 100644 --- a/docs/manual/mod/quickreference.html.en +++ b/docs/manual/mod/quickreference.html.en @@ -1183,7 +1183,7 @@ certain events before failing a request TraceEnable [on|off|extended] on svCDetermines the behavior on TRACE requests TransferLog file|pipesvBSpecify location of a log file TypesConfig file-path conf/mime.types sBThe location of the mime.types file -UNCListhostname ...sCControls what UNC host names can be accessed by the server +UNCList hostname [hostname...]sCControls what UNC host names can be accessed by the server UnDefine parameter-namesCUndefine the existence of a variable UndefMacro namesvdBUndefine a macro diff --git a/docs/manual/mod/quickreference.html.es b/docs/manual/mod/quickreference.html.es index 84d952f..4773df5 100644 --- a/docs/manual/mod/quickreference.html.es +++ b/docs/manual/mod/quickreference.html.es @@ -1186,7 +1186,7 @@ certain events before failing a request TraceEnable [on|off|extended] on sCDetermines the behaviour on TRACE requests TransferLog file|pipesvBSpecify location of a log file TypesConfig file-path conf/mime.types sBThe location of the mime.types file -UNCListhostname ...sCControls what UNC host names can be accessed by the server +UNCList hostname [hostname...]sCControls what UNC host names can be accessed by the server UnDefine parameter-namesCUndefine the existence of a variable UndefMacro namesvdBUndefine a macro diff --git a/docs/manual/mod/quickreference.html.fr.utf8 b/docs/manual/mod/quickreference.html.fr.utf8 index 4b795fa..ba0870f 100644 --- a/docs/manual/mod/quickreference.html.fr.utf8 +++ b/docs/manual/mod/quickreference.html.fr.utf8 @@ -1516,7 +1516,7 @@ traitent les connexions clients TRACE TransferLog fichier|pipesvBSpécifie l'emplacement d'un fichier journal TypesConfig chemin-fichier conf/mime.types sBLe chemin du fichier mime.types -UNCListhostname ...sCControls what UNC host names can be accessed by the server +UNCList hostname [hostname...]sCDéfinit quels sont les noms d’hôte UNC auxquels le serveur peut accéder UnDefine nom-variablesCInvalide la définition d'une variable UndefMacro nomsvdBSupprime une macro diff --git a/docs/manual/mod/quickreference.html.ja.utf8 b/docs/manual/mod/quickreference.html.ja.utf8 index fa80388..74e84a6 100644 --- a/docs/manual/mod/quickreference.html.ja.utf8 +++ b/docs/manual/mod/quickreference.html.ja.utf8 @@ -1114,7 +1114,7 @@ Certificate verification TransferLog file|pipesvBログファイルの位置を指定 TypesConfig file-path conf/mime.types smime.types ファイルの位置 -UNCListhostname ...sCControls what UNC host names can be accessed by the server +UNCList hostname [hostname...]sCControls what UNC host names can be accessed by the server UnDefine parameter-namesCUndefine the existence of a variable UndefMacro namesvdBUndefine a macro diff --git a/docs/manual/mod/quickreference.html.ko.euc-kr b/docs/manual/mod/quickreference.html.ko.euc-kr index 60a7ae2..e409637 100644 --- a/docs/manual/mod/quickreference.html.ko.euc-kr +++ b/docs/manual/mod/quickreference.html.ko.euc-kr @@ -1142,7 +1142,7 @@ certain events before failing a request TraceEnable [on|off|extended] on svCDetermines the behavior on TRACE requests TransferLog file|pipesvBα ġ Ѵ TypesConfig file-path conf/mime.types sBThe location of the mime.types file -UNCListhostname ...sCControls what UNC host names can be accessed by the server +UNCList hostname [hostname...]sCControls what UNC host names can be accessed by the server UnDefine parameter-namesCUndefine the existence of a variable UndefMacro namesvdBUndefine a macro diff --git a/docs/manual/mod/quickreference.html.tr.utf8 b/docs/manual/mod/quickreference.html.tr.utf8 index 2c5261e..9dc9099 100644 --- a/docs/manual/mod/quickreference.html.tr.utf8 +++ b/docs/manual/mod/quickreference.html.tr.utf8 @@ -1181,7 +1181,7 @@ gerçekleşmesi için sunucunun geçmesini bekleyeceği süre. TransferLog dosya|borulu-süreç [takma-ad]skTBir günlük dosyasının yerini belirtir. TypesConfig file-path conf/mime.types sTThe location of the mime.types file -UNCListhostname ...sÇControls what UNC host names can be accessed by the server +UNCList hostname [hostname...]sÇControls what UNC host names can be accessed by the server UnDefine değişken-ismisÇBir değişkeni tanımsız yapar UndefMacro nameskdTUndefine a macro diff --git a/docs/manual/mod/quickreference.html.zh-cn.utf8 b/docs/manual/mod/quickreference.html.zh-cn.utf8 index a358a1a..22748a6 100644 --- a/docs/manual/mod/quickreference.html.zh-cn.utf8 +++ b/docs/manual/mod/quickreference.html.zh-cn.utf8 @@ -1178,7 +1178,7 @@ certain events before failing a request TraceEnable [on|off|extended] on svCDetermines the behavior on TRACE requests TransferLog file|pipesvBSpecify location of a log file TypesConfig file-path conf/mime.types sBThe location of the mime.types file -UNCListhostname ...sCControls what UNC host names can be accessed by the server +UNCList hostname [hostname...]sCControls what UNC host names can be accessed by the server UnDefine parameter-namesCUndefine the existence of a variable UndefMacro namesvdBUndefine a macro -- cgit v1.2.3