source: mod_gnutls

Revision Log Mode:


Legend:

Added
Modified
Copied or renamed
Graph Diff Rev Age Author Log Message
(edit) @6e41fcb   3 weeks fiona.klute Release version 0.10.0 mod_gnutls/0.10.0
(edit) @c4a6889   3 weeks fiona.klute CI: Add a Debian Sid (unstable) build
(edit) @bfef00c   3 weeks fiona.klute Show the right GnuTLS version when using ./configure --with-gnutls-dev …
(edit) @1a6eeae   3 weeks fiona.klute Allow overriding the default HTTPD mutex via configure The custom …
(edit) @2794787   3 weeks fiona.klute Pass TEST_IP and TEST_HOST to "make distcheck" This should allow …
(edit) @bfb0168   3 weeks fiona.klute CI: Don't run Valgrind tests on Markdown-only changes outside doc/
(edit) @883efd2   3 weeks fiona.klute Document how to override which Valgrind suppressions to use
(edit) @221e6b9   3 weeks fiona.klute Valgrind: Remove suppression for local SoftHSM build
(edit) @451ca3e   3 weeks fiona.klute Valgrind: Suppression for leak from p11_kit_module_load in child processes
(edit) @931da2d   3 weeks fiona.klute Get deeper stack traces from Valgrind
(edit) @10100a2   3 weeks fiona.klute Remove keyEncipherment flag from test certificates The days of plain …
(edit) @9071889   3 weeks fiona.klute Remove pointless set-once process pool userdata I know some modules …
(edit) @4b1687d   3 weeks fiona.klute Changelog: Note libmsv/libcurl memory issue as known
(edit) @38bf158   3 weeks fiona.klute Documentation for testing with Valgrind
(edit) @0fc654d   3 weeks fiona.klute Update README * Include "make check" in build instructions * Fix …
(edit) @8b14b13   3 weeks fiona.klute Small .gitignore cleanup
(edit) @ee6351d   3 weeks fiona.klute Test suite: Use mod_mpm_event by default The "event" MPM module is …
(edit) @57dec86   3 weeks fiona.klute CI: Use matrix instead of container-specific jobs
(edit) @8c63a1c   4 weeks fiona.klute Another round of the getaddrinfo Valgrind suppression
(edit) @4482da4   4 weeks fiona.klute Test suite: Set global ServerName? This gets rid of the annoying …
(edit) @c756f08   4 weeks fiona.klute Make apr_getaddrinfo_leak Valgrind suppression more generic This …
(edit) @4f81704   4 weeks fiona.klute CI: Use "pthread" mutex for non-Valgrind builds, too I've switched …
(edit) @732cdb11   4 weeks fiona.klute CI: Run Valgrind tests
(edit) @1d778ce   4 weeks fiona.klute Run Valgrind with "--gen-suppressions=all" This makes it easier to …
(edit) @cfb43fc   4 weeks fiona.klute Use Valgrind "-v" instead of "-s" for compatibility with Debian Buster …
(edit) @7c89e8a   4 weeks fiona.klute Make Valgrind suppressions work without Apache and GnuTLS debug …
(edit) @fe3564a   4 weeks fiona.klute configure.as: Use AS_IF instead of shell if-blocks around macros Some …
(edit) @d1d1e3a   4 weeks fiona.klute Valgrind tests: Use --keep-debuginfo=yes By default Valgrind drops …
(edit) @f73eeb7   4 weeks fiona.klute Valgrind tests: More suppressions for issues outside mod_gnutls
(edit) @005b185   4 weeks fiona.klute Fail tests running with Valgrind if Valgrind reports errors
(edit) @e46d203   4 weeks fiona.klute Update forgotten license headers
(edit) @99c61f9   4 weeks fiona.klute Add configure option --enable-valgrind-test to run tests with Valgrind …
(edit) @c5f8e85   4 weeks fiona.klute Manual: Fix circular reference in GnuTLSOCSPCache section Thanks to …
(edit) @c4ba2b60   4 weeks fiona.klute Test suite: Automatically detect required modules Which modules are …
(edit) @c05b8c5   4 weeks fiona.klute TestService?: Preserve the child process' return code
(edit) @422eade   4 weeks fiona.klute Support optional timeout for TestService?.wait()
(edit) @264ab17   4 weeks fiona.klute mgstest.services: Remove code for handling forking services No longer …
(edit) @e2200db   4 weeks fiona.klute Test suite: Always run Apache with "-DFOREGROUND" This simplifies …
(edit) @72ebe64   4 weeks fiona.klute runtest.py: Support for running Apache with Valgrind Not used by …
(edit) @f042405   4 weeks fiona.klute Update changelog and version for 0.10.0
(edit) @47c2384   4 weeks fiona.klute Documentation: OCSP multi-stapling works only for consecutive certificates
(edit) @8daef10   4 weeks fiona.klute Update documentation on client authentication
(edit) @f51d359   4 weeks fiona.klute Remove obsolete restrictions on HTTP/2 from documentation GnuTLS …
(edit) @e819f13   4 weeks fiona.klute Unconditionally enable early SNI parsing All supported GnuTLS …
(edit) @f4f837a   4 weeks fiona.klute CI: Ignore packaging branches for simple build If anything they …
(edit) @07fc5d3   4 weeks fiona.klute CI: Use job-specific names for debug artifacts
(edit) @c33b0ea   4 weeks fiona.klute Test per-directory "GnuTLSClientVerify request" The request must …
(edit) @0be2505   4 weeks fiona.klute Nice names for log storage actions
(edit) @2cc53cb   4 weeks fiona.klute Add Fedora CI build
(edit) @f4ac390e   4 weeks fiona.klute Simple CI build
(edit) @442c6a6   4 weeks fiona.klute Test suite: Detect Apache shutdown by PID file Wait for the PID file …
(edit) @7543db4   4 weeks fiona.klute Remove debug output of raw test connection config
(edit) @44188aa   4 weeks fiona.klute Test post-handshake authentication with an untrusted certificate
(edit) @4f2c988   4 weeks fiona.klute Send 403 if required client post-handshake authentication fails This …
(edit) @4fe52e6   4 weeks fiona.klute Use gnutls-cli inline command to test TLS session resumption This …
(edit) @f94938c   4 weeks fiona.klute Nicer logging for post-handshake authentication
(edit) @fcad37b   5 weeks fiona.klute Retry gnutls_reauth() on transport interruptions
(edit) @9db4dcd   5 weeks fiona.klute Handle GNUTLS_E_GOT_APPLICATION_DATA on gnutls_reauth() Pending …
(edit) @4a22ee6   5 weeks fiona.klute Fix speculative reads using cached data The rollback buffer …
(edit) @1c76ea7   5 weeks fiona.klute mgstest.tests: Encode request body as utf-8 HTTPConnection.request() …
(edit) @6fa6095   5 weeks fiona.klute Partial post-handshake auth support Needs proper error handling, …
(edit) @e24e3bf9   5 weeks fiona.klute Rewrite authz hook Using the effective mode simplifies the code a …
(edit) @3b2edd6   5 weeks fiona.klute Use GnuTLS' certificate status text instead of hard-coded cases …
(edit) @ee2854b   5 weeks fiona.klute Remove a forgotten "return OK" in mgs_cert_verify See …
(edit) @99196d9   5 weeks fiona.klute Reauthentication: Much simpler check for HTTP/2 Integer comparison …
(edit) @a9e0738   5 weeks fiona.klute Test 28_HTTP2_support: Log curl output regardless of failure
(edit) @0dc1a31   5 weeks fiona.klute Always return DECLINED instead of OK from mgs_cert_verify The return …
(edit) @346c03b   6 weeks fiona.klute Prohibit TLS renegotiation for HTTP/2 connections (RFC 7540, section 9.2.1)
(edit) @407ca6e   6 weeks fiona.klute TestRequest? and TestReq10: Support request body This will allow …
(edit) @b22def6   6 weeks fiona.klute Remove SIGPIPE signal block There's no discernible reason to keep …
(edit) @05e2d9e   6 weeks fiona.klute Move function declarations for gnutls_io.c into a separate header
(edit) @cc748329   6 weeks fiona.klute Update Changelog
(edit) @adcd021   6 weeks fiona.klute Small documentation updates
(edit) @546bf35   6 weeks fiona.klute Update documentation on OCSP stapling
(edit) @9bc842e   6 weeks fiona.klute Update documentation for GnuTLSOCSPResponseFile
(edit) @33fa7d5   6 weeks fiona.klute Ensure stapling is active for server certificates with "must-staple" …
(edit) @5c9ca6b   6 weeks fiona.klute Ensure sc->ocsp and sc->ocsp_num are always initialized They should …
(edit) @a3e0f7b   6 weeks fiona.klute Support a list of files for the GnuTLSOCSPResponseFile option This …
(edit) @845c112   6 weeks fiona.klute Async OCSP updates for multi-stapling There's now one mod_watchdog …
(edit) @587642d   6 weeks fiona.klute OCSP test: Prevent single-second refresh intervals With the default …
(edit) @c446ca5   6 weeks fiona.klute Small cleanups (use mgs_ocsp_data_t, update copyright header)
(edit) @ce987dc   6 weeks fiona.klute Log number of certificates in chain that OCSP stapling is enabled for
(edit) @1aad1d7   6 weeks fiona.klute Consider stapling configured if it's configured for one certificate …
(edit) @1c3853a   6 weeks fiona.klute Minimal multi-staple implementation Works, but has limitations: * …
(edit) @08ba205   6 weeks fiona.klute Turn per-vhost OCSP data into an array Size 1 for now, but it's a …
(edit) @4e60dd8   6 weeks fiona.klute Handle initialization of the OCSP data structure in one place This …
(edit) @de9b100   6 weeks fiona.klute OCSP config: Check if cache is available before processing certificate …
(edit) @cf6f974   6 weeks fiona.klute mgs_get_ocsp_response: Accept request information from …
(edit) @98b37a1   6 weeks fiona.klute mgs_get_ocsp_response: Consistently use "sc" variable The "sc = …
(edit) @9418c1e   6 weeks fiona.klute mgs_cache_ocsp_failure: Require explicit struct mgs_ocsp_data
(edit) @06dcf89   6 weeks fiona.klute mgs_cache_ocsp_response: Require explicit struct mgs_ocsp_data
(edit) @75f2d96   6 weeks fiona.klute check_ocsp_response: Require explicit struct mgs_ocsp_data The …
(edit) @e798149   6 weeks fiona.klute do_ocsp_request: Require responder URI This method just handles a …
(edit) @bdd10be   6 weeks fiona.klute mgs_create_ocsp_request: Require explicit struct mgs_ocsp_data This …
(edit) @a8374f7   6 weeks fiona.klute Keep a reference to the certificate with OCSP data When implementing …
(edit) @20a3915   6 weeks fiona.klute mgstest.softhsm: Remove unnecessary import
(edit) @b2546f0   6 weeks fiona.klute mgstest.softhsm: Include type when searching object URLs The p11tool …
(edit) @221ffe5   6 weeks fiona.klute Test 28_HTTP2_support: Fix skip message in case of missing curl
(edit) @0da2c5d   6 weeks fiona.klute Test suite: Update README and newtest script
(edit) @478767a   6 weeks fiona.klute Generate test scripts instead of carrying static files
Note: See TracRevisionLog for help on using the revision log.