Changeset f548f15 in mod_gnutls

Timestamp:

Jan 24, 2008, 1:39:20 AM (15 years ago)

Author:

Nokis Mavrogiannopoulos <nmav@…>

Branches:

asyncio, debian/master, debian/stretch-backports, jessie-backports, main, master, msva, proxy-ticket, upstream

Children:

2cdc264

Parents:

e6f648a

git-author:

Nikos Mavrogiannopoulos <nmav@…> (01/24/08 01:39:20)

git-committer:

Nokis Mavrogiannopoulos <nmav@…> (01/24/08 01:39:20)

Message:

prepare for an alpha release

Files:

• NEWS (modified) (1 diff)
• README (modified) (2 diffs)
• configure.ac (modified) (2 diffs)
• src/gnutls_hooks.c (modified) (1 diff)

NEWS

@@ -1 @@
-** Version 0.5.0
+** Version 0.5.0-alpha (2008-01-24)
 
-- Added support for OpenPGP keys.
+- Added support for OpenPGP keys. The new directives are:
+  GnuTLSPGPKeyringFile, GnuTLSPGPCertificateFile, GnuTLSPGPKeyFile
 
 ** Version 0.4.2 (2007-12-10)

README

@@ -61 +61 @@
 </VirtualHost>
 
-
 # a more advanced configuration
 GnuTLSCache dbm "/var/cache/www-tls-cache/cache"
@@ -88 +87 @@
         ...
 </VirtualHost>
+
+# A setup for OpenPGP and X.509 authentication
+<VirtualHost 1.2.3.4:443>
+        Servername crystal.lan:443
+        GnuTLSEnable on
+        GnuTLSPriorities NORMAL:+COMP-NULL
+
+# setup the openpgp keys
+        GnuTLSPGPCertificateFile /etc/apache2/test.pub.asc
+        GnuTLSPGPKeyFile /etc/apache2/test.sec.asc
+
+# and the X.509 keys
+        GnuTLSCertificateFile /etc/apache2/server-cert.pem
+        GnuTLSKeyFile /etc/apache2/server-key.pem
+        GnuTLSClientVerify ignore
+
+# To avoid using the default DH params
+        GnuTLSDHFile /etc/apache2/dh.pem
+
+# these are only needed if GnuTLSClientVerify != ignore
+        GnuTLSClientCAFile ca.pem
+        GnuTLSPGPKeyringFile /etc/apache2/ring.asc
+</VirtualHost>

configure.ac

@@ -1 +1 @@
 dnl 
-AC_INIT(mod_gnutls, 0.5.0)
+AC_INIT(mod_gnutls, 0.5.0-alpha)
 OOO_CONFIG_NICE(config.nice)
 MOD_GNUTLS_VERSION=AC_PACKAGE_VERSION
@@ -29 +29 @@
 dnl AC_SUBST(LIBTOOL)
 
-MIN_TLS_VERSION=2.1.7
+MIN_TLS_VERSION=2.2.1
 AM_PATH_LIBGNUTLS_EXTRA($MIN_TLS_VERSION,,
         AC_MSG_ERROR([[

src/gnutls_hooks.c

@@ -159 +159 @@
         gnutls_certificate_type_set_priority( session, cprio);
     }
-
-
 
     return 0;