# # ChangeLog for / in mod_gnutls # # Generated by Trac 1.2 # Mar 7, 2021, 1:46:15 PM Fri, 29 Nov 2019 21:30:08 GMT Fiona Klute [e376ed8] * README (modified) * configure.ac (modified) * src/gnutls_cache.c (modified) * src/gnutls_cache.h (modified) * src/gnutls_hooks.c (modified) * src/gnutls_ocsp.c (modified) * test/Makefile.am (modified) * test/authority/subca/ocsp-responder/template (added) * test/authority/subca/server/template.in (added) * test/authority/subca/template.in (added) * test/ocsp_server.conf.in (modified) * test/test_ca.mk (modified) * test/tests/00_basic/apache.conf (modified) * test/tests/27_OCSP_server/apache.conf (modified) Merge branch 'subca' Fri, 29 Nov 2019 17:49:56 GMT Fiona Klute [d4c9331] * CHANGELOG (modified) * configure.ac (modified) Release version 0.9.1 Thu, 28 Nov 2019 11:22:08 GMT Fiona Klute [dcec209] * src/mod_gnutls.c (modified) Fix possible segfault (NULL pointer dereference) on failed TLS ... Sun, 24 Nov 2019 19:08:13 GMT Fiona Klute [f064d74] * doc/mod_gnutls_manual.mdwn (modified) Handbook: Add a section about module dependencies on socache Wed, 20 Nov 2019 20:49:00 GMT Fiona Klute [829490c] * doc/Makefile.am (modified) * doc/mod_gnutls.whatis (added) man page: Include whatis info and remove "_manual" suffix Wed, 20 Nov 2019 20:01:51 GMT Fiona Klute [27ca1e9] * doc/Makefile.am (modified) * doc/mod_gnutls_manual.mdwn (modified) * doc/mod_gnutls_manual.yaml.in (modified) Manual: Use YAML metadata instead of embedded title for all formats Wed, 20 Nov 2019 18:18:06 GMT Fiona Klute [0a4bcca] * doc/.gitignore (modified) * doc/Makefile.am (modified) * doc/mod_gnutls_manual.yaml.in (modified) Use section number as filename extension for manual page This is ... Wed, 20 Nov 2019 18:04:53 GMT Fiona Klute [c6987c6] * doc/Makefile.am (modified) Move manual page to section 5 (config files) The manual describes ... Fri, 01 Nov 2019 21:21:04 GMT Krista Karppinen [20a20df] * test/runtests (modified) * test/tests/00_basic/output (modified) * test/tests/01_serverwide_priorities/output (modified) * test/tests/03_cachetimeout_in_vhost/output (modified) * test/tests/04_basic_nosni/output (modified) * test/tests/06_verify_sni_a/output (modified) * test/tests/07_verify_sni_b/output (modified) * test/tests/08_verify_no_sni_fallback_to_first_vhost/output (modified) * test/tests/10_basic_client_verification/output (modified) * test/tests/14_resume_session/output (modified) * test/tests/15_basic_msva/output (modified) * test/tests/19_TLS_reverse_proxy/output (modified) * test/tests/20_TLS_reverse_proxy_client_auth/output (modified) * test/tests/21_TLS_reverse_proxy_wrong_cert/output (modified) * test/tests/22_TLS_reverse_proxy_crl_revoke/output (modified) * test/tests/23_TLS_reverse_proxy_mismatched_priorities/output (modified) * test/tests/24_pkcs11_cert/output (modified) * test/tests/27_OCSP_server/output (modified) * test/tests/29_force_handshake_vhost/output (modified) * test/tests/30_ip_based_vhosts/output (modified) * test/tests/31_vhost_SNI_serveralias_match/output (modified) * test/tests/32_vhost_SNI_serveralias_mismatch/output (modified) * test/tests/33_vhost_SNI_serveralias_missinghost/output (modified) * test/tests/34_TLS_reverse_proxy_h2/output (modified) Test suite: ignore "Content-Length" header Do not check the ... Fri, 01 Nov 2019 18:17:57 GMT Fiona Klute [a55742a] * test/tests/18_client_verification_wrong_cert/output (modified) * test/tests/21_TLS_reverse_proxy_wrong_cert/output (modified) * test/tests/22_TLS_reverse_proxy_crl_revoke/output (modified) * test/tests/23_TLS_reverse_proxy_mismatched_priorities/output (modified) Test suite: Remove URLs from expected error responses Apache HTTPD ... Wed, 24 Jul 2019 06:29:40 GMT Fiona Klute [556783e] * src/gnutls_cache.c (modified) * src/gnutls_cache.h (modified) * src/gnutls_hooks.c (modified) * src/gnutls_ocsp.c (modified) Provide OCSP response via gnutls_certificate_retrieve_function3 ... Tue, 23 Jul 2019 06:33:41 GMT Fiona Klute [81018a4] * configure.ac (modified) * src/gnutls_cache.c (modified) * src/gnutls_hooks.c (modified) Remove compatibility code for GnuTLS version before 3.6.3 Tue, 23 Jul 2019 06:25:59 GMT Fiona Klute [65c84e5] * README (modified) * configure.ac (modified) * src/gnutls_hooks.c (modified) Set certificates via gnutls_certificate_set_retrieve_function3() ... Tue, 16 Jul 2019 17:24:18 GMT Fiona Klute [7cfc02b] * test/Makefile.am (modified) * test/authority/subca/ocsp-responder/template (added) * test/ocsp_server.conf.in (modified) * test/test_ca.mk (modified) * test/tests/27_OCSP_server/apache.conf (modified) Test suite: Add an OCSP responder for the sub CA All CAs use the ... Mon, 15 Jul 2019 19:26:28 GMT Fiona Klute [f828974] * test/Makefile.am (modified) * test/test_ca.mk (modified) * test/tests/00_basic/apache.conf (modified) Test suite: Build & use certificate chain for the ... Mon, 15 Jul 2019 19:26:20 GMT Fiona Klute [c3aebe5] * test/Makefile.am (modified) * test/authority/subca/server/template.in (added) * test/authority/subca/template.in (added) * test/test_ca.mk (modified) Test suite: Add a sub CA to the test environment Mon, 15 Jul 2019 17:17:22 GMT Fiona Klute [fbef621] * test/.gitignore (modified) Reorganize and narrow test/.gitignore Mon, 15 Jul 2019 17:02:42 GMT Fiona Klute [6dab61d] * test/Makefile.am (modified) * test/rogueca/rogueclient/template.in (moved) * test/test_ca.mk (modified) * test/tests/18_client_verification_wrong_cert/gnutls-cli.args (modified) Test suite: Move rogueclient ID into rogueca dir, share recipe with ... Mon, 15 Jul 2019 06:45:30 GMT Fiona Klute [b712429] * test/test_ca.mk (modified) Test suite: Unify rules for X.509 root certificate generation Wed, 03 Jul 2019 06:11:01 GMT Fiona Klute [e8498bf] * test/Makefile.am (modified) * test/authority/ocsp-responder/template (moved) * test/ocsp_server.conf.in (modified) Test suite: Move directory for ocsp-responder identity into authority ... Wed, 03 Jul 2019 06:06:40 GMT Fiona Klute [59afe51] * test/Makefile.am (modified) * test/authority/imposter/template.in (moved) * test/authority/imposter/uid.in (moved) * test/tests/06_verify_sni_a/apache.conf (modified) * test/tests/07_verify_sni_b/apache.conf (modified) * test/tests/08_verify_no_sni_fallback_to_first_vhost/apache.conf (modified) * test/tests/09_verify_no_sni_fails_with_wrong_order/apache.conf (modified) * test/tests/21_TLS_reverse_proxy_wrong_cert/backend.conf (modified) Test suite: Move directory for imposter identity into authority directory Wed, 03 Jul 2019 05:52:50 GMT Fiona Klute [c825c3a] * test/Makefile.am (modified) * test/authority/server/crl.template (moved) * test/authority/server/template.in (moved) * test/authority/server/uid.in (moved) * test/runtests (modified) * test/test-24_pkcs11_cert.bash (modified) * test/tests/00_basic/apache.conf (modified) * test/tests/01_serverwide_priorities/apache.conf (modified) * test/tests/02_cache_in_vhost/apache.conf (modified) * test/tests/03_cachetimeout_in_vhost/apache.conf (modified) * test/tests/04_basic_nosni/apache.conf (modified) * test/tests/05_mismatched-priorities/apache.conf (modified) * test/tests/06_verify_sni_a/apache.conf (modified) * test/tests/07_verify_sni_b/apache.conf (modified) * test/tests/08_verify_no_sni_fallback_to_first_vhost/apache.conf (modified) * test/tests/09_verify_no_sni_fails_with_wrong_order/apache.conf (modified) * test/tests/10_basic_client_verification/apache.conf (modified) * test/tests/11_basic_client_verification_fail/apache.conf (modified) * test/tests/12_cgi_variables/apache.conf (modified) * test/tests/13_cgi_variables_no_client_cert/apache.conf (modified) * test/tests/14_resume_session/apache.conf (modified) * test/tests/15_basic_msva/apache.conf (modified) * test/tests/16_view-status/apache.conf (modified) * test/tests/17_cgi_vars_large_cert/apache.conf (modified) * test/tests/18_client_verification_wrong_cert/apache.conf (modified) * test/tests/19_TLS_reverse_proxy/apache.conf (modified) * test/tests/19_TLS_reverse_proxy/backend.conf (modified) * test/tests/20_TLS_reverse_proxy_client_auth/apache.conf (modified) * test/tests/20_TLS_reverse_proxy_client_auth/backend.conf (modified) * test/tests/21_TLS_reverse_proxy_wrong_cert/apache.conf (modified) * test/tests/22_TLS_reverse_proxy_crl_revoke/apache.conf (modified) * test/tests/22_TLS_reverse_proxy_crl_revoke/backend.conf (modified) * test/tests/23_TLS_reverse_proxy_mismatched_priorities/apache.conf (modified) * test/tests/23_TLS_reverse_proxy_mismatched_priorities/backend.conf (modified) * test/tests/25_Disable_TLS_1.0/apache.conf (modified) * test/tests/26_redirect_HTTP_to_HTTPS/apache.conf (modified) * test/tests/27_OCSP_server/apache.conf (modified) * test/tests/28_HTTP2_support/apache.conf (modified) * test/tests/29_force_handshake_vhost/apache.conf (modified) * test/tests/30_ip_based_vhosts/apache.conf (modified) * test/tests/31_vhost_SNI_serveralias_match/apache.conf (modified) * test/tests/32_vhost_SNI_serveralias_mismatch/apache.conf (modified) * test/tests/33_vhost_SNI_serveralias_missinghost/apache.conf (modified) * test/tests/34_TLS_reverse_proxy_h2/apache.conf (modified) * test/tests/34_TLS_reverse_proxy_h2/backend.conf (modified) Test suite: Move directory for server identity into authority directory Mon, 01 Jul 2019 20:16:01 GMT Fiona Klute [e5546be] * test/Makefile.am (modified) * test/authority/client/template.in (moved) * test/authority/client/uid.in (moved) * test/runtests (modified) * test/tests/10_basic_client_verification/gnutls-cli.args (modified) * test/tests/12_cgi_variables/gnutls-cli.args (modified) * test/tests/15_basic_msva/gnutls-cli.args (modified) * test/tests/17_cgi_vars_large_cert/gnutls-cli.args (modified) * test/tests/20_TLS_reverse_proxy_client_auth/apache.conf (modified) Test suite: Move directory for client identity into authority ... Tue, 25 Jun 2019 06:12:09 GMT Fiona Klute [f205c5f] * test/test_ca.mk (modified) Cleanup in test/test_ca.mk * Always use $(srcdir) as Make variable, ... Mon, 24 Jun 2019 18:46:11 GMT Fiona Klute [a819501] * test/Makefile.am (modified) * test/authority/template.in (moved) * test/client/template.in (moved) * test/imposter/template.in (moved) * test/ocsp-responder/template (moved) * test/rogueca/template (moved) * test/rogueclient/template.in (moved) * test/server/crl.template (moved) * test/server/template.in (moved) * test/test_ca.mk (modified) Test suite: Move template files into per-identity directories Also ... Thu, 06 Jun 2019 06:38:35 GMT Fiona Klute [c91382d] * test/Makefile.am (modified) * test/authority/uid.in (moved) * test/client/uid.in (moved) * test/imposter/uid.in (moved) * test/rogueca/uid.in (moved) * test/runtests (modified) * test/server/uid.in (moved) * test/test_ca.mk (modified) Test suite: Move UID files into per-identity directories Wed, 22 May 2019 06:44:48 GMT Fiona Klute [143bd98] * test/test_ca.mk (modified) Build test certificates without intermediate certificate request files Wed, 23 Jan 2019 17:44:51 GMT Fiona Klute [510764a] * CHANGELOG (modified) * configure.ac (modified) Release version 0.9.0 Tue, 22 Jan 2019 18:06:53 GMT Fiona Klute [8adfa57] * configure.ac (modified) * doc/mod_gnutls_manual.mdwn (modified) Remove "experimental" note from Early SNI status in ./configure output Tue, 22 Jan 2019 07:27:36 GMT Fiona Klute [6200f6f] * src/gnutls_hooks.c (modified) Switch server based on early SNI only if a name was found Sun, 20 Jan 2019 21:21:04 GMT Fiona Klute [39a27cf] * CHANGELOG (modified) * test/Makefile.am (modified) Require pem2openpgp for tests only when building with MSVA support ... Thu, 03 Jan 2019 15:17:55 GMT Fiona Klute [b6c7866] * src/gnutls_hooks.c (modified) * src/gnutls_io.c (modified) * src/gnutls_proxy.c (modified) * src/gnutls_util.c (modified) * src/gnutls_util.h (modified) Update copyright headers of files changed this year Thu, 03 Jan 2019 14:40:17 GMT Fiona Klute [a900948] * CHANGELOG (modified) * src/gnutls_proxy.c (modified) Support multiple ALPN proposals for proxy TLS connections The note ... Thu, 03 Jan 2019 12:24:47 GMT Fiona Klute [4d38cbd] * src/gnutls_io.c (modified) Return EOS/success for failed proxy TLS connections only on handshake ... Wed, 02 Jan 2019 20:22:48 GMT Fiona Klute [08c48d7] * src/gnutls_hooks.c (modified) * src/gnutls_util.c (modified) * src/gnutls_util.h (modified) Extract code for turning APR array of strings into gnutls_datum_t ... Wed, 19 Dec 2018 18:09:13 GMT Fiona Klute [c7710cf] * src/gnutls_proxy.c (modified) Immediately return from proxy_conn_set_alpn() if there is no proxy ... Mon, 17 Dec 2018 21:39:50 GMT Fiona Klute [564f33f] * src/gnutls_io.c (modified) * src/gnutls_proxy.c (modified) * src/gnutls_proxy.h (modified) Move SNI and ALPN setup for proxy connections to gnutls_proxy.c Mon, 17 Dec 2018 18:19:48 GMT Fiona Klute [0378c22] * include/mod_gnutls.h.in (modified) * src/gnutls_io.c (modified) * src/gnutls_proxy.h (modified) Move mod_proxy note name definitions to gnutls_proxy.h Mon, 17 Dec 2018 18:12:17 GMT Fiona Klute [68b5156] * src/Makefile.am (modified) * src/gnutls_hooks.c (modified) * src/gnutls_proxy.c (added) * src/gnutls_proxy.h (added) Move proxy-only functions from gnutls_hooks.c to a dedicated file Mon, 17 Dec 2018 18:05:51 GMT Fiona Klute [0fcba60] * src/gnutls_hooks.c (modified) * src/gnutls_util.c (modified) * src/gnutls_util.h (modified) Move compiled default priorities to gnutls_util.[hc] Wed, 12 Dec 2018 21:57:14 GMT Fiona Klute [f674424] * src/gnutls_io.c (modified) * test/Makefile.am (modified) * test/test-34_TLS_reverse_proxy_h2.bash (added) * test/tests/34_TLS_reverse_proxy_h2/apache.conf (added) * test/tests/34_TLS_reverse_proxy_h2/backend.conf (added) * test/tests/34_TLS_reverse_proxy_h2/gnutls-cli.args (added) * test/tests/34_TLS_reverse_proxy_h2/input (added) * test/tests/34_TLS_reverse_proxy_h2/output (added) * test/tests/Makefile.am (modified) First prototype of proxy ALPN support The current code assumes that ... Wed, 12 Dec 2018 21:24:36 GMT Fiona Klute [2038b76] * src/gnutls_io.c (modified) Ensure nonblocking reads pass EAGAIN or EINTR status to caller Wed, 12 Dec 2018 21:15:40 GMT Fiona Klute [92cb0cc] * src/gnutls_io.c (modified) Handle APR_TIMEUP return value from blocking ap_get_brigade() call ... Thu, 29 Nov 2018 21:05:07 GMT Fiona Klute [5c56e5b] * Makefile.am (modified) Pass SOFTHSM_LIB setting to distcheck build Wed, 28 Nov 2018 15:23:49 GMT Fiona Klute [9a834cc] * test/common.bash (modified) * test/test-31_vhost_SNI_serveralias_match.bash (modified) * test/test-32_vhost_SNI_serveralias_mismatch.bash (modified) * test/test-33_vhost_SNI_serveralias_missinghost.bash (modified) Merge gnutls-cli version check Thanks Krista! Wed, 28 Nov 2018 15:21:41 GMT Fiona Klute [6519eb9] * test/test_ca.mk (modified) Test suite: Clear softhsm2.db before rebuilding This avoids token ... Tue, 27 Nov 2018 23:26:04 GMT Krista Karppinen [afebb9b] * test/common.bash (modified) * test/test-31_vhost_SNI_serveralias_match.bash (modified) * test/test-32_vhost_SNI_serveralias_mismatch.bash (modified) * test/test-33_vhost_SNI_serveralias_missinghost.bash (modified) Add gnutls-cli version requirement to SNI tests Since the ... Fri, 23 Nov 2018 18:30:58 GMT Fiona Klute [847c0be] * doc/Makefile.am (modified) * doc/mod_gnutls_manual.yaml.in (modified) Remove build date from manual page to support reproducible builds Fri, 23 Nov 2018 17:49:58 GMT Fiona Klute [0e55076] * test/Makefile.am (modified) * test/test-31_vhost_SNI_serveralias_match.bash (added) * test/test-32_vhost_SNI_serveralias_mismatch.bash (added) * test/test-33_vhost_SNI_serveralias_missinghost.bash (added) * test/tests/31_vhost_SNI_serveralias_match/apache.conf (added) * test/tests/31_vhost_SNI_serveralias_match/gnutls-cli.args (added) * test/tests/31_vhost_SNI_serveralias_match/input (added) * test/tests/31_vhost_SNI_serveralias_match/output (added) * test/tests/32_vhost_SNI_serveralias_mismatch/apache.conf (added) * test/tests/32_vhost_SNI_serveralias_mismatch/gnutls-cli.args (added) * test/tests/32_vhost_SNI_serveralias_mismatch/input (added) * test/tests/32_vhost_SNI_serveralias_mismatch/output (added) * test/tests/33_vhost_SNI_serveralias_missinghost/apache.conf (added) * test/tests/33_vhost_SNI_serveralias_missinghost/gnutls-cli.args (added) * test/tests/33_vhost_SNI_serveralias_missinghost/input (added) * test/tests/33_vhost_SNI_serveralias_missinghost/output (added) * test/tests/Makefile.am (modified) Merge additional tests for vhost checks Thanks Krista! Fri, 23 Nov 2018 17:07:39 GMT Krista Karppinen [dcc053e] * test/Makefile.am (modified) * test/test-33_vhost_SNI_serveralias_missinghost.bash (added) * test/tests/33_vhost_SNI_serveralias_missinghost/apache.conf (added) * test/tests/33_vhost_SNI_serveralias_missinghost/gnutls-cli.args (added) * test/tests/33_vhost_SNI_serveralias_missinghost/input (added) * test/tests/33_vhost_SNI_serveralias_missinghost/output (added) * test/tests/Makefile.am (modified) Add test for missing Host header, SNI matching server alias Test ... Fri, 23 Nov 2018 16:48:05 GMT Krista Karppinen [5cf8e99] * test/Makefile.am (modified) * test/test-31_vhost_SNI_serveralias_match.bash (added) * test/test-32_vhost_SNI_serveralias_mismatch.bash (added) * test/tests/31_vhost_SNI_serveralias_match/apache.conf (added) * test/tests/31_vhost_SNI_serveralias_match/gnutls-cli.args (added) * test/tests/31_vhost_SNI_serveralias_match/input (added) * test/tests/31_vhost_SNI_serveralias_match/output (added) * test/tests/32_vhost_SNI_serveralias_mismatch/apache.conf (added) * test/tests/32_vhost_SNI_serveralias_mismatch/gnutls-cli.args (added) * test/tests/32_vhost_SNI_serveralias_mismatch/input (added) * test/tests/32_vhost_SNI_serveralias_mismatch/output (added) * test/tests/Makefile.am (modified) Add tests for virtual host server aliases Test matching and ... Wed, 21 Nov 2018 20:21:59 GMT Fiona Klute [2ead314] * doc/doxygen.conf.in (modified) Hide __attribute__(x) annotations from Doxygen Doxygen confuses ... Wed, 21 Nov 2018 19:38:58 GMT Fiona Klute [0da10eb] * src/gnutls_hooks.c (modified) * src/gnutls_sni.c (modified) Document Early SNI related functions and rename the post client hello ... Tue, 20 Nov 2018 18:33:08 GMT Fiona Klute [0020874] * configure.ac (modified) * doc/doxygen.conf.in (modified) Doxygen doc: Include Early SNI functions, disable PDF output Mon, 19 Nov 2018 07:37:26 GMT Fiona Klute [dcaba46] * test/newtest (modified) Fix newtest script The generated test script now calls ./runtests ... Wed, 07 Nov 2018 17:55:41 GMT Fiona Klute [0bed0a0] * CHANGELOG (modified) * doc/mod_gnutls_manual.mdwn (modified) Update documentation on ALPN and HTTP/2 Tue, 06 Nov 2018 19:58:56 GMT Fiona Klute [a939015] * configure.ac (modified) * include/mod_gnutls.h.in (modified) * test/apache-conf/.gitignore (modified) * test/apache-conf/early_sni.conf.in (added) * test/tests/28_HTTP2_support/apache.conf (modified) Test early SNI in HTTP/2 test (if enabled) Tue, 06 Nov 2018 17:50:05 GMT Fiona Klute [64470ce] * src/gnutls_hooks.c (modified) Load credentials and prepare ALPN in pre client hello hook This ... Tue, 06 Nov 2018 17:28:02 GMT Fiona Klute [79fc46b] * src/gnutls_hooks.c (modified) Don't cancel virtual host lookup after successful default SNI fallback Tue, 06 Nov 2018 06:55:59 GMT Fiona Klute [a26d3f6] * src/gnutls_hooks.c (modified) Protect early_sni_hook() against being called in the wrong context Tue, 06 Nov 2018 06:36:22 GMT Fiona Klute [4963516] * src/gnutls_hooks.c (modified) Use server back reference for ALPN handling Necessary because ... Mon, 05 Nov 2018 21:13:10 GMT Fiona Klute [d4c1a4e] * include/mod_gnutls.h.in (modified) * src/gnutls_hooks.c (modified) Add a reference from mod_gnutls server settings back to the ... Mon, 05 Nov 2018 07:20:54 GMT Fiona Klute [c0fc11e] * include/mod_gnutls.h.in (modified) * src/gnutls_hooks.c (modified) * src/gnutls_sni.c (modified) * src/gnutls_sni.h (modified) Separate functions for default SNI and loading virtual host ... Sun, 04 Nov 2018 21:55:35 GMT Fiona Klute [7ff6c6c] * configure.ac (modified) * src/Makefile.am (modified) * src/gnutls_hooks.c (modified) * src/gnutls_sni.c (added) * src/gnutls_sni.h (added) Add proof-of-concept SNI parser in a pre client hello hook The SNI ... Sun, 04 Nov 2018 14:42:51 GMT Fiona Klute [99eb567] * test/tests/30_ip_based_vhosts/apache.conf (modified) * test/tests/30_ip_based_vhosts/input (modified) * test/tests/30_ip_based_vhosts/output (modified) Test suite: Use static output instead of CGI for test ... Fri, 02 Nov 2018 18:38:09 GMT Fiona Klute [7f2fd55] * configure.ac (modified) Mention manual page documentation in ./configure output Fri, 02 Nov 2018 18:24:00 GMT Fiona Klute [4e388b0] * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) Consistently use strcasecmp() instead of mixing in apr_strnatcasecmp() Fri, 02 Nov 2018 17:30:33 GMT Fiona Klute [f06c148] * include/mod_gnutls.h.in (modified) * src/gnutls_hooks.c (modified) Simplify wildcard match for virtual host aliases Fri, 02 Nov 2018 17:12:40 GMT Fiona Klute [6d8c00c] * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) * src/gnutls_config.c (modified) * src/mod_gnutls.c (modified) Include apr_strings.h only where needed Fri, 02 Nov 2018 11:57:02 GMT Fiona Klute [3c6645b] * src/gnutls_hooks.c (modified) gnutls_hooks.c: Fix spaces in check_server_aliases() Fri, 02 Nov 2018 11:19:15 GMT Fiona Klute [96e2ea8] * CHANGELOG (modified) Update changelog Fri, 02 Nov 2018 11:13:50 GMT Fiona Klute [a997449] * doc/mod_gnutls_manual.mdwn (modified) Document ALPN issue Fri, 02 Nov 2018 06:38:36 GMT Fiona Klute [5b0dd3d] * test/test_ca.mk (modified) Test CA: Keep private keys after certificate by default This does ... Wed, 31 Oct 2018 22:40:51 GMT Fiona Klute [3493a80] * doc/.gitignore (modified) * doc/Makefile.am (modified) * doc/mod_gnutls_manual.yaml.in (added) Include version and build date in the manual page Wed, 31 Oct 2018 21:18:27 GMT Fiona Klute [af9e3a5] * doc/Makefile.am (modified) Build a manual page (requires pandoc) Wed, 31 Oct 2018 20:46:15 GMT Fiona Klute [b47dc70] * test/Makefile.am (modified) * test/server.template.in (modified) * test/test_ca.mk (modified) Test suite: Simplify certificate template creation Wed, 31 Oct 2018 07:20:28 GMT Fiona Klute [3aff94d] * src/gnutls_cache.c (modified) * src/gnutls_cache.h (modified) * src/gnutls_hooks.c (modified) Include cache status in mod_status reports Tue, 30 Oct 2018 20:22:55 GMT Fiona Klute [267a27a] * configure.ac (modified) * test/common.bash (modified) Test suite: Use separate IPC namespaces when enabled Minimal change ... Tue, 30 Oct 2018 19:59:56 GMT Fiona Klute [0062ede] * test/Makefile.am (modified) * test/test-30_ip_based_vhosts.bash (added) * test/tests/30_ip_based_vhosts/apache.conf (added) * test/tests/30_ip_based_vhosts/gnutls-cli.args (added) * test/tests/30_ip_based_vhosts/input (added) * test/tests/30_ip_based_vhosts/output (added) * test/tests/Makefile.am (modified) Test for IP-based virtual hosts Mostly to make sure the new "same ... Tue, 30 Oct 2018 19:35:21 GMT Fiona Klute [849b87e] * configure.ac (modified) * test/Makefile.am (modified) * test/runtests (modified) * test/server.template.in (modified) * test/test_ca.mk (modified) Test suite: Add support for IP-based virtual hosts * Pass TEST_IP ... Fri, 26 Oct 2018 19:02:54 GMT Fiona Klute [04753db8] * src/gnutls_hooks.c (modified) Require Host header to match SNI hostname (if any) This is a ... Fri, 26 Oct 2018 18:37:35 GMT Fiona Klute [a14cf5c] * include/mod_gnutls.h.in (modified) * src/gnutls_hooks.c (modified) * src/gnutls_util.c (modified) Store SNI hostname in mod_gnutls' connection context Wed, 24 Oct 2018 17:15:58 GMT Fiona Klute [20c3f7b] * test/Makefile.am (modified) * test/tests/29_force_handshake_vhost/apache.conf (modified) * test/tests/29_force_handshake_vhost/output (modified) Expect test for vhost check to pass Wed, 24 Oct 2018 16:56:08 GMT Fiona Klute [de3fad3] * include/mod_gnutls.h.in (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) Require handshake and request to use the same server The new check ... Wed, 24 Oct 2018 06:16:36 GMT Fiona Klute [15368a4] * src/gnutls_hooks.c (modified) Improve log messages for PKCS #11 provider loading Wed, 24 Oct 2018 06:05:36 GMT Fiona Klute [359f009] * test/Makefile.am (modified) * test/test-29_force_handshake_vhost.bash (added) * test/tests/29_force_handshake_vhost/apache.conf (added) * test/tests/29_force_handshake_vhost/gnutls-cli.args (added) * test/tests/29_force_handshake_vhost/input (added) * test/tests/29_force_handshake_vhost/output (added) * test/tests/Makefile.am (modified) Add test for vhost check Expected to fail right now. The test ... Tue, 23 Oct 2018 06:31:48 GMT Fiona Klute [8273683] * src/gnutls_hooks.c (modified) Fix port numbers for vhosts in post_config log messages Tue, 02 Oct 2018 16:57:20 GMT Fiona Klute [469861a] * src/gnutls_hooks.c (modified) Enable session tickets in the post client hello hook With this ... Tue, 02 Oct 2018 16:40:20 GMT Fiona Klute [5f15295] * doc/mod_gnutls_manual.mdwn (modified) Update configuration examples Mon, 01 Oct 2018 17:03:16 GMT Fiona Klute [1a3068c] * doc/mod_gnutls_manual.mdwn (modified) Update documentation on OCSP stapling and the certificate file Sun, 30 Sep 2018 18:10:42 GMT Fiona Klute [bac1a32] * src/gnutls_hooks.c (modified) * src/gnutls_io.c (modified) * src/gnutls_ocsp.c (modified) Order, log message, and style fixes Sun, 30 Sep 2018 17:36:26 GMT Fiona Klute [fdd3bf0] * doc/mod_gnutls_manual.mdwn (modified) * src/gnutls_hooks.c (modified) Enable session tickets by default if GnuTLS version >= 3.6.4 GnuTLS ... Sun, 30 Sep 2018 17:20:53 GMT Fiona Klute [bd2b48b] * src/gnutls_io.c (modified) Immediately retry on EINTR or EAGAIN for blocking receive Proxy TLS ... Sun, 30 Sep 2018 16:55:08 GMT Fiona Klute [78d75ac] * src/gnutls_cache.c (modified) Use the right cache config string in cache trace logs Sun, 30 Sep 2018 16:54:17 GMT Fiona Klute [0d7660d] * src/gnutls_cache.c (modified) Provide a default path for the default OCSP cache Sun, 30 Sep 2018 10:04:48 GMT Fiona Klute [60868d2] * doc/mod_gnutls_manual.mdwn (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * test/tests/00_basic/apache.conf (modified) * test/tests/19_TLS_reverse_proxy/apache.conf (modified) * test/tests/19_TLS_reverse_proxy/backend.conf (modified) Default to NORMAL for the GnuTLS priority settings This simplifies ... Sun, 30 Sep 2018 09:12:02 GMT Fiona Klute [bd1d8d3] * test/base_apache.conf (modified) Test suite: Stop proxy backend servers from writing to proxy access ... Sun, 30 Sep 2018 07:09:38 GMT Fiona Klute [e796121] * doc/mod_gnutls_manual.mdwn (modified) Remove documentation on OpenPGP authentication Sun, 30 Sep 2018 07:00:40 GMT Fiona Klute [ed5d2b8] * doc/mod_gnutls_manual.mdwn (modified) Update GnuTLSCacheTimeout documentation: No longer used for OCSP Sat, 29 Sep 2018 21:47:04 GMT Fiona Klute [7105869] * doc/mod_gnutls_manual.mdwn (modified) Update GnuTLSCache documentation