Changeset f030883 in mod_gnutls for test/tests

Timestamp:

Apr 9, 2015, 1:02:39 PM (4 years ago)

Author:

Thomas Klute <thomas2.klute@…>

Branches:

debian/master, debian/stretch-backports, jessie-backports, master, upstream

Children:

73f6f12

Parents:

8b472af

Message:

Set GnuTLS priorities for proxy connections separately

Until now, proxy connections were configured with the same priorities as
the server side. This commit introduces the new configuration option
"GnuTLSProxyPriorities" to set the priorities for proxy connections
separately. Note that GnuTLSProxyPriorities MUST be set when
SSLProxyEngine is enabled.

Since the parameters to GnuTLSPriorities and GnuTLSProxyPriorities need
the same processing, mgs_set_priorities has been rewritten to select the
priority cache to write to based on the option name, rather than adding
a new function to handle GnuTLSProxyPriorities.

Location:

test/tests

Files:

• 19_TLS_reverse_proxy/apache.conf (modified) (1 diff)
• 20_TLS_reverse_proxy_client_auth/apache.conf (modified) (1 diff)
• 21_TLS_reverse_proxy_wrong_cert/apache.conf (modified) (1 diff)
• 22_TLS_reverse_proxy_crl_revoke/apache.conf (modified) (1 diff)
• 23_TLS_reverse_proxy_mismatched_priorities/apache.conf (added)
• 23_TLS_reverse_proxy_mismatched_priorities/backend.conf (added)
• 23_TLS_reverse_proxy_mismatched_priorities/gnutls-cli.args (added)
• 23_TLS_reverse_proxy_mismatched_priorities/input (added)
• 23_TLS_reverse_proxy_mismatched_priorities/output (added)

test/tests/19_TLS_reverse_proxy/apache.conf

@@ -15 +15 @@
  SSLProxyEngine On
  GnuTLSProxyCAFile      authority/x509.pem
+ GnuTLSProxyPriorities          NORMAL
  ProxyPass /proxy/ https://${BACKEND_HOST}:${BACKEND_PORT}/
  ProxyPassReverse /proxy/ https://${BACKEND_HOST}:${BACKEND_PORT}/

test/tests/20_TLS_reverse_proxy_client_auth/apache.conf

@@ -17 +17 @@
  GnuTLSProxyCertificateFile     client/x509.pem
  GnuTLSProxyCAFile              authority/x509.pem
+ GnuTLSProxyPriorities          NORMAL
  ProxyPass /proxy/ https://${BACKEND_HOST}:${BACKEND_PORT}/
  ProxyPassReverse /proxy/ https://${BACKEND_HOST}:${BACKEND_PORT}/

test/tests/21_TLS_reverse_proxy_wrong_cert/apache.conf

@@ -15 +15 @@
  SSLProxyEngine On
  GnuTLSProxyCAFile      authority/x509.pem
+ GnuTLSProxyPriorities  NORMAL
  ProxyPass /proxy/ https://${BACKEND_HOST}:${BACKEND_PORT}/
  ProxyPassReverse /proxy/ https://${BACKEND_HOST}:${BACKEND_PORT}/

test/tests/22_TLS_reverse_proxy_crl_revoke/apache.conf

@@ -16 +16 @@
  GnuTLSProxyCAFile      authority/x509.pem
  GnuTLSProxyCRLFile     ${PWD}/crl.pem
+ GnuTLSProxyPriorities  NORMAL
  ProxyPass /proxy/ https://${BACKEND_HOST}:${BACKEND_PORT}/
  ProxyPassReverse /proxy/ https://${BACKEND_HOST}:${BACKEND_PORT}/