source: mod_gnutls

Revision Log Mode:


Legend:

Added
Modified
Copied or renamed
Graph Diff Rev Age Author Log Message
(edit) @a2e3c33   4 years thomas2.klute Rename option SSLProxyEngine to GnuTLSProxyEngine This matches the … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @af7da2d   5 years thomas2.klute Test suite: Start Apache directly again, search for httpd Fedora … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @c5d5942   5 years thomas2.klute README: Update installation instructions * Most users won't need … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @b27cce7   5 years thomas2.klute Fix MSVA conditional Disabling the MSVA test if the user disabled … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @f71e6ce   5 years thomas2.klute Check if available GnuTLS library supports SRP SRP is enabled by … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @7813802   5 years thomas2.klute Test suite: Use AP_LIBEXECDIR to find Apache modules Distributions … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @52c3f68   5 years thomas2.klute Detect apache(2?)ctl and use it instead of starting Apache directly … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @03295a9   5 years thomas2.klute Test suite: Prevent race over error log for server fail cases In some … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @70509f8   5 years thomas2.klute configure: Try apr-util if apr_memcache library was not found Fedora … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @e765670   5 years thomas2.klute Fix signature of mgs_cache_child_init when building without … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @28f3f4f   5 years thomas2.klute Mention pandoc in README and ./configure output This should help … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @6e1d45d   5 years thomas2.klute Build documentation through automake The handwritten Makefile used … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @47a3f49   5 years thomas2.klute Update test/.gitignore with files that are generated now debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @31caead   5 years thomas2.klute Rename documentation directory to "doc" It's a more commonly used … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @33af2b7   5 years thomas2.klute Test suite: Add tests to "dist" target and support VPATH builds … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @e24eed6   5 years thomas2.klute Remove nonexistent files from EXTRA_DIST, add CHANGELOG Some of these … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @349fd6e   5 years thomas2.klute Test suite: Unify calls from Makefile.am to TestMakefile? where possible debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @d92899e   5 years thomas2.klute Test suite: Add lock file for the shared GnuPG keyring Key import and … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @3f00958   5 years thomas2.klute New test case: PKCS #11 URLs for server key and certificate The new … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @1708045   5 years thomas2.klute Test suite: Clean Apache logs, cache, and test outputs on make … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @8f90bf4   5 years thomas2.klute Use Automake variable check_SCRIPTS for test scripts Just a little … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @87f1ed2   5 years thomas2.klute Allow loading of an additional PKCS #11 provider library When using … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @39bd695   5 years thomas2.klute Test suite: Avoid race conditions during key generation Test cases … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @4133f2d   5 years thomas2.klute Unify argument handling in mgs_set_priorities Just store the argument … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @2cde026d   5 years thomas2.klute Merge branch 'new-gnutls-api' Merge my TLS proxy implementation with … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @73f6f12   5 years thomas2.klute Check handshake result before logging "TLS connection opened" Without … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @f030883   5 years thomas2.klute Set GnuTLS priorities for proxy connections separately Until now, … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @d04f7da   5 years thomas2.klute Version guards for gnutls_privkey_import_openpgp_raw workaround The … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @8b472af   5 years thomas2.klute Use server root for file paths in TLS proxy config This is what users … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @2cde8111   5 years thomas2.klute Workarounds for OpenPGP key handling Commit … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @351b51f   5 years thomas2.klute Speed up tests with background sleep Until now, a significant part of … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @01b5d85   5 years thomas2.klute Merge branch 'client-verify-fix' into new-gnutls-api Merge the fix … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @c4a015b   5 years thomas2.klute Merge branch 'split-testsuite' into new-gnutls-api OpenPGP support is … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @259e835   5 years thomas2.klute Merge branch 'master' into new-gnutls-api Branch 'master' at this … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @1d9cfaf   5 years thomas2.klute gnutls_config.c: Backport function signature changes from master … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @49d25a9   5 years thomas2.klute Test suite: Unset sleep_pidfile before checking output If the … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @907ae8f   5 years thomas2.klute New test case: Proxy server detects revoked back end cert using CRL … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @bfcff28   5 years thomas2.klute Test suite: Ensure test certificates have unique serial numbers … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @809c422   5 years thomas2.klute TLS proxy: Add support for CRLs to back end server verification When … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @bd24203   5 years thomas2.klute Explicitly build trust list for proxy connections This change … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @36db6c9   5 years thomas2.klute Test suite: Add CRL signing capability to test CAs This is required … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @1b57c56   5 years thomas2.klute Test suite: Clean lock files debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @232fb60   5 years thomas2.klute runtests: Stop background sleep after gnutls-cli is done The PID of … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @a213967   5 years thomas2.klute Test suite: Filter "Server" header when checking output Like "Date", … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @ed82a6a   5 years thomas2.klute Two more test cases for TLS reverse proxy and test locking fix New … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @54aa269   5 years thomas2.klute Test suite: Exclude "Date" header when comparing actual and expected … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @f84890d   5 years thomas2.klute Shared bash file for proxy back end management code Futher test cases … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @6e6a4e4   5 years thomas2.klute Test case for TLS reverse proxy This commit adds a simple test for a … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @7d2123d   5 years thomas2.klute Log errors while loading proxy certificate trust list The way the … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @dda3acf   5 years thomas2.klute Speed up tests with background sleep Until now, a significant part of … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @6bbc00a   5 years thomas2.klute Check hostname of proxy back end server against certificate … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @d8ae2a0   5 years thomas2.klute Documentation for proxy TLS configuration directives Add … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @91ccb87   5 years thomas2.klute Merge branch 'doc' into tls-proxy debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @0de1839   5 years thomas2.klute Support X.509 auth for TLS proxy connections This commit adds support … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @10b3370   5 years thomas2.klute Merge branch 'client-verify-fix' into tls-proxy Fix Apache start for … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @9e35c48   5 years thomas2.klute runtests: Fix flock/Apache call when running with MSVA The … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @7314438   5 years thomas2.klute Fix whitespace problems detected by git debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @b324906   5 years thomas2.klute Merge branch 'client-verify-fix' into tls-proxy Most importantly, … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @eea8a16   5 years thomas2.klute New test case: TLS client auth with invalid certificate Commit … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @8731286   5 years thomas2.klute Merge branch 'split-testsuite' into client-verify-fix This merge will … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @5a8a32b   5 years thomas2.klute TLS Client auth: Check server verify mode if unset for dir The … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @9a06bbd   5 years thomas2.klute Use flock instead of delays to protect Apache The "sleep" call before … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @302965e   5 years thomas2.klute Run monkeysphere-validation-agent only for the test case using it … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @eebc960   5 years thomas2.klute Fix documentation for GnuTLSKeyFile option The first two lines … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @b429e4c   5 years thomas2.klute Cleanup handler for proxy TLS connections When handling client … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @d7a8286   5 years thomas2.klute Remove debug log messages for allocating connection config memory … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @265eafc   5 years thomas2.klute gnutls_io.c: Log connection start/end and unusual input filter events … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @4261999   5 years thomas2.klute gnutls_io_input_read: Retry gnutls_record_recv if necessary While … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @398d1a0   5 years thomas2.klute Improved logging for gnutls_io_input_read * Log if something tried to … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @4fefa39   5 years thomas2.klute src/gnutls_io.c: Reformat gnutls_io_filter_error for readability No … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @beb14d9   5 years thomas2.klute Proof of concept: Support for proxy back end connections using TLS … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @c1ef069   5 years thomas2.klute Record if a connection is a proxy connection When handling a proxy … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @5342265   5 years thomas2.klute Close last for loop in mgs_find_sni_server The closing brace for the … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @07d548d   5 years thomas2.klute Properly use SSLProxyEngine option ssl_proxy_enable now checks if … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @e78bc78   5 years thomas2.klute Adjust test tools and documentation to split tests and moved test dir … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @87208b5   5 years thomas2.klute Completely clean test identities A few artifacts were left over … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @65c18ce   5 years thomas2.klute Run Monkeysphere based test case only when compiled with --enable-msva … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @5951102   5 years thomas2.klute Clean test environment on "make clean" debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @8dcf888   5 years thomas2.klute Rename test suite directory from t/ to test/ This is the same name … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @c51e33a   5 years thomas2.klute Run tests from separate scripts Replace the run_tests.sh script with … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @859667d   5 years thomas2.klute t/.gitignore: Ignore test suite output debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @0f5c9e1   5 years thomas2.klute Let Automake handle the test directory Instead of running the test … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @accbb83   5 years thomas2.klute mod_gnutls.c: Whitespace and line break fixes debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @c4ba972   5 years thomas2.klute Add myself to list of contributors debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @c782c1f   5 years thomas2.klute Don't do global deinit when disabling TLS for a proxy back end … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @e8acf05   5 years thomas2.klute Enable/disable TLS per connection in ssl_engine_disable Previously, … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @e4b58b6   5 years thomas2.klute Check error codes during GnuTLS connection init These calls shouldn't … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @3d361b8   5 years thomas2.klute Check if filters exist before removing them in ssl_engine_disable … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @64dadf8   5 years thomas2.klute Use proper GNUTLS_ENABLED_* macros in SSL proxy functions debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @c32240f   5 years dkg switch from --long-arg=foo to --long-arg foo for certtool in test … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @031acac   5 years nmav Use the new (3.1.3+) GnuTLS APIs to obtain private keys. This allows … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @fd82e59   6 years dkg use strict compiler arguments by default (-Wall -Werror -Wextra) … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @8a30d35   6 years dkg avoid deprecated form of AM_INIT_AUTOMAKE without this change, we … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @765cac2   6 years dkg clean up MGS_SIDE abuse of apr_pstrcat We were allocating twice as … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @2aaf4f5   6 years dkg implement GnuTLSExportCertificates control over max exported cert size … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @999cdec   6 years dkg GnuTLSExportCertificates should control maximum size of exported certs … debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @04f48a2   6 years dkg trim down the readme so that we have one place for documentation. debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @8232c8b   6 years dkg removing dia ORM renderings; avoiding synchronization issues debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @a8df590   6 years dkg clean up testing directory properly debian/masterdebian/stretch-backportsjessie-backportsupstream
(edit) @55dc3f0   6 years dkg Make Apache 2.4 display the correct module in error logs debian/masterdebian/stretch-backportsjessie-backportsupstream
Note: See TracRevisionLog for help on using the revision log.