|
|
|
@732cdb11
|
3 years |
fiona.klute |
CI: Run Valgrind tests
asynciomainproxy-ticket
|
|
|
@1d778ce
|
3 years |
fiona.klute |
Run Valgrind with "--gen-suppressions=all"
This makes it easier to …
asynciomainproxy-ticket
|
|
|
@cfb43fc
|
3 years |
fiona.klute |
Use Valgrind "-v" instead of "-s" for compatibility with Debian Buster …
asynciomainproxy-ticket
|
|
|
@7c89e8a
|
3 years |
fiona.klute |
Make Valgrind suppressions work without Apache and GnuTLS debug …
asynciomainproxy-ticket
|
|
|
@fe3564a
|
3 years |
fiona.klute |
configure.as: Use AS_IF instead of shell if-blocks around macros
Some …
asynciomainproxy-ticket
|
|
|
@d1d1e3a
|
3 years |
fiona.klute |
Valgrind tests: Use --keep-debuginfo=yes
By default Valgrind drops …
asynciomainproxy-ticket
|
|
|
@f73eeb7
|
3 years |
fiona.klute |
Valgrind tests: More suppressions for issues outside mod_gnutls
asynciomainproxy-ticket
|
|
|
@005b185
|
3 years |
fiona.klute |
Fail tests running with Valgrind if Valgrind reports errors
asynciomainproxy-ticket
|
|
|
@e46d203
|
3 years |
fiona.klute |
Update forgotten license headers
asynciomainproxy-ticket
|
|
|
@99c61f9
|
3 years |
fiona.klute |
Add configure option --enable-valgrind-test to run tests with Valgrind …
asynciomainproxy-ticket
|
|
|
@c5f8e85
|
3 years |
fiona.klute |
Manual: Fix circular reference in GnuTLSOCSPCache section
Thanks to …
asynciomainproxy-ticket
|
|
|
@c4ba2b60
|
3 years |
fiona.klute |
Test suite: Automatically detect required modules
Which modules are …
asynciomainproxy-ticket
|
|
|
@c05b8c5
|
3 years |
fiona.klute |
TestService?: Preserve the child process' return code
asynciomainproxy-ticket
|
|
|
@422eade
|
3 years |
fiona.klute |
Support optional timeout for TestService?.wait()
asynciomainproxy-ticket
|
|
|
@264ab17
|
3 years |
fiona.klute |
mgstest.services: Remove code for handling forking services
No longer …
asynciomainproxy-ticket
|
|
|
@e2200db
|
3 years |
fiona.klute |
Test suite: Always run Apache with "-DFOREGROUND"
This simplifies …
asynciomainproxy-ticket
|
|
|
@72ebe64
|
3 years |
fiona.klute |
runtest.py: Support for running Apache with Valgrind
Not used by …
asynciomainproxy-ticket
|
|
|
@f042405
|
3 years |
fiona.klute |
Update changelog and version for 0.10.0
asynciomainproxy-ticket
|
|
|
@47c2384
|
3 years |
fiona.klute |
Documentation: OCSP multi-stapling works only for consecutive certificates
asynciomainproxy-ticket
|
|
|
@8daef10
|
3 years |
fiona.klute |
Update documentation on client authentication
asynciomainproxy-ticket
|
|
|
@f51d359
|
3 years |
fiona.klute |
Remove obsolete restrictions on HTTP/2 from documentation
GnuTLS …
asynciomainproxy-ticket
|
|
|
@e819f13
|
3 years |
fiona.klute |
Unconditionally enable early SNI parsing
All supported GnuTLS …
asynciomainproxy-ticket
|
|
|
@f4f837a
|
3 years |
fiona.klute |
CI: Ignore packaging branches for simple build
If anything they …
asynciomainproxy-ticket
|
|
|
@07fc5d3
|
3 years |
fiona.klute |
CI: Use job-specific names for debug artifacts
asynciomainproxy-ticket
|
|
|
@c33b0ea
|
3 years |
fiona.klute |
Test per-directory "GnuTLSClientVerify request"
The request must …
asynciomainproxy-ticket
|
|
|
@0be2505
|
3 years |
fiona.klute |
Nice names for log storage actions
asynciomainproxy-ticket
|
|
|
@2cc53cb
|
3 years |
fiona.klute |
Add Fedora CI build
asynciomainproxy-ticket
|
|
|
@f4ac390e
|
3 years |
fiona.klute |
Simple CI build
asynciomainproxy-ticket
|
|
|
@442c6a6
|
3 years |
fiona.klute |
Test suite: Detect Apache shutdown by PID file
Wait for the PID file …
asynciomainproxy-ticket
|
|
|
@7543db4
|
3 years |
fiona.klute |
Remove debug output of raw test connection config
asynciomainproxy-ticket
|
|
|
@44188aa
|
3 years |
fiona.klute |
Test post-handshake authentication with an untrusted certificate
asynciomainproxy-ticket
|
|
|
@4f2c988
|
3 years |
fiona.klute |
Send 403 if required client post-handshake authentication fails
This …
asynciomainproxy-ticket
|
|
|
@4fe52e6
|
3 years |
fiona.klute |
Use gnutls-cli inline command to test TLS session resumption
This …
asynciomainproxy-ticket
|
|
|
@f94938c
|
3 years |
fiona.klute |
Nicer logging for post-handshake authentication
asynciomainproxy-ticket
|
|
|
@fcad37b
|
3 years |
fiona.klute |
Retry gnutls_reauth() on transport interruptions
asynciomainproxy-ticket
|
|
|
@9db4dcd
|
3 years |
fiona.klute |
Handle GNUTLS_E_GOT_APPLICATION_DATA on gnutls_reauth()
Pending …
asynciomainproxy-ticket
|
|
|
@4a22ee6
|
3 years |
fiona.klute |
Fix speculative reads using cached data
The rollback buffer …
asynciomainproxy-ticket
|
|
|
@1c76ea7
|
3 years |
fiona.klute |
mgstest.tests: Encode request body as utf-8
HTTPConnection.request() …
asynciomainproxy-ticket
|
|
|
@6fa6095
|
3 years |
fiona.klute |
Partial post-handshake auth support
Needs proper error handling, …
asynciomainproxy-ticket
|
|
|
@e24e3bf9
|
3 years |
fiona.klute |
Rewrite authz hook
Using the effective mode simplifies the code a …
asynciomainproxy-ticket
|
|
|
@3b2edd6
|
3 years |
fiona.klute |
Use GnuTLS' certificate status text instead of hard-coded cases
…
asynciomainproxy-ticket
|
|
|
@ee2854b
|
3 years |
fiona.klute |
Remove a forgotten "return OK" in mgs_cert_verify
See …
asynciomainproxy-ticket
|
|
|
@99196d9
|
3 years |
fiona.klute |
Reauthentication: Much simpler check for HTTP/2
Integer comparison …
asynciomainproxy-ticket
|
|
|
@a9e0738
|
3 years |
fiona.klute |
Test 28_HTTP2_support: Log curl output regardless of failure
asynciomainproxy-ticket
|
|
|
@0dc1a31
|
3 years |
fiona.klute |
Always return DECLINED instead of OK from mgs_cert_verify
The return …
asynciomainproxy-ticket
|
|
|
@346c03b
|
3 years |
fiona.klute |
Prohibit TLS renegotiation for HTTP/2 connections (RFC 7540, section 9.2.1)
asynciomainproxy-ticket
|
|
|
@407ca6e
|
3 years |
fiona.klute |
TestRequest? and TestReq10: Support request body
This will allow …
asynciomainproxy-ticket
|
|
|
@b22def6
|
3 years |
fiona.klute |
Remove SIGPIPE signal block
There's no discernible reason to keep …
asynciomainproxy-ticket
|
|
|
@05e2d9e
|
3 years |
fiona.klute |
Move function declarations for gnutls_io.c into a separate header
asynciomainproxy-ticket
|
|
|
@cc748329
|
3 years |
fiona.klute |
Update Changelog
asynciomainproxy-ticket
|
|
|
@adcd021
|
3 years |
fiona.klute |
Small documentation updates
asynciomainproxy-ticket
|
|
|
@546bf35
|
3 years |
fiona.klute |
Update documentation on OCSP stapling
asynciomainproxy-ticket
|
|
|
@9bc842e
|
3 years |
fiona.klute |
Update documentation for GnuTLSOCSPResponseFile
asynciomainproxy-ticket
|
|
|
@33fa7d5
|
3 years |
fiona.klute |
Ensure stapling is active for server certificates with "must-staple"
…
asynciomainproxy-ticket
|
|
|
@5c9ca6b
|
3 years |
fiona.klute |
Ensure sc->ocsp and sc->ocsp_num are always initialized
They should …
asynciomainproxy-ticket
|
|
|
@a3e0f7b
|
3 years |
fiona.klute |
Support a list of files for the GnuTLSOCSPResponseFile option
This …
asynciomainproxy-ticket
|
|
|
@845c112
|
3 years |
fiona.klute |
Async OCSP updates for multi-stapling
There's now one mod_watchdog …
asynciomainproxy-ticket
|
|
|
@587642d
|
3 years |
fiona.klute |
OCSP test: Prevent single-second refresh intervals
With the default …
asynciomainproxy-ticket
|
|
|
@c446ca5
|
3 years |
fiona.klute |
Small cleanups (use mgs_ocsp_data_t, update copyright header)
asynciomainproxy-ticket
|
|
|
@ce987dc
|
3 years |
fiona.klute |
Log number of certificates in chain that OCSP stapling is enabled for
asynciomainproxy-ticket
|
|
|
@1aad1d7
|
3 years |
fiona.klute |
Consider stapling configured if it's configured for one certificate
…
asynciomainproxy-ticket
|
|
|
@1c3853a
|
3 years |
fiona.klute |
Minimal multi-staple implementation
Works, but has limitations:
* …
asynciomainproxy-ticket
|
|
|
@08ba205
|
3 years |
fiona.klute |
Turn per-vhost OCSP data into an array
Size 1 for now, but it's a …
asynciomainproxy-ticket
|
|
|
@4e60dd8
|
3 years |
fiona.klute |
Handle initialization of the OCSP data structure in one place
This …
asynciomainproxy-ticket
|
|
|
@de9b100
|
3 years |
fiona.klute |
OCSP config: Check if cache is available before processing certificate …
asynciomainproxy-ticket
|
|
|
@cf6f974
|
3 years |
fiona.klute |
mgs_get_ocsp_response: Accept request information from …
asynciomainproxy-ticket
|
|
|
@98b37a1
|
3 years |
fiona.klute |
mgs_get_ocsp_response: Consistently use "sc" variable
The "sc = …
asynciomainproxy-ticket
|
|
|
@9418c1e
|
3 years |
fiona.klute |
mgs_cache_ocsp_failure: Require explicit struct mgs_ocsp_data
asynciomainproxy-ticket
|
|
|
@06dcf89
|
3 years |
fiona.klute |
mgs_cache_ocsp_response: Require explicit struct mgs_ocsp_data
asynciomainproxy-ticket
|
|
|
@75f2d96
|
3 years |
fiona.klute |
check_ocsp_response: Require explicit struct mgs_ocsp_data
The …
asynciomainproxy-ticket
|
|
|
@e798149
|
3 years |
fiona.klute |
do_ocsp_request: Require responder URI
This method just handles a …
asynciomainproxy-ticket
|
|
|
@bdd10be
|
3 years |
fiona.klute |
mgs_create_ocsp_request: Require explicit struct mgs_ocsp_data
This …
asynciomainproxy-ticket
|
|
|
@a8374f7
|
3 years |
fiona.klute |
Keep a reference to the certificate with OCSP data
When implementing …
asynciomainproxy-ticket
|
|
|
@20a3915
|
3 years |
fiona.klute |
mgstest.softhsm: Remove unnecessary import
asynciomainproxy-ticket
|
|
|
@b2546f0
|
3 years |
fiona.klute |
mgstest.softhsm: Include type when searching object URLs
The p11tool …
asynciomainproxy-ticket
|
|
|
@221ffe5
|
3 years |
fiona.klute |
Test 28_HTTP2_support: Fix skip message in case of missing curl
asynciomainproxy-ticket
|
|
|
@0da2c5d
|
3 years |
fiona.klute |
Test suite: Update README and newtest script
asynciomainproxy-ticket
|
|
|
@478767a
|
3 years |
fiona.klute |
Generate test scripts instead of carrying static files
asynciomainproxy-ticket
|
|
|
@ff039b1
|
3 years |
fiona.klute |
Test suite: Replace softhsm.bash with Python code
With this all test …
asynciomainproxy-ticket
|
|
|
@60ed7d1
|
3 years |
fiona.klute |
Allow the prepare_env hook to return a cleanup callback
asynciomainproxy-ticket
|
|
|
@7e10018
|
3 years |
fiona.klute |
runtest.py: Get Apache debug info before running prepare_env hook
…
asynciomainproxy-ticket
|
|
|
@573b810
|
3 years |
fiona.klute |
mgstest.services: Use pathlib and conditional expressions
Just a …
asynciomainproxy-ticket
|
|
|
@278381d
|
3 years |
fiona.klute |
Remove code for SoftHSM 1 support
SoftHSM 1 has been unsupported for …
asynciomainproxy-ticket
|
|
|
@482bafc
|
3 years |
fiona.klute |
Test suite: Remove checks for no longer supported GnuTLS version
…
asynciomainproxy-ticket
|
|
|
@0f52d48
|
3 years |
fiona.klute |
Switch most tests to hooks.py instead of preconditions in test scripts …
asynciomainproxy-ticket
|
|
|
@baa0056
|
3 years |
fiona.klute |
Test 30_ip_based_vhosts: Move to prepare_env hook
asynciomainproxy-ticket
|
|
|
@9a48691
|
3 years |
fiona.klute |
Test suite: Support checking preconditions in prepare_env hook
The …
asynciomainproxy-ticket
|
|
|
@dda0f4a
|
3 years |
fiona.klute |
Replace comments in test scripts with connection descriptions
asynciomainproxy-ticket
|
|
|
@3871dbd
|
3 years |
fiona.klute |
Move TEST_HTTP_PORT definition to Makefile.am with the other ports
…
asynciomainproxy-ticket
|
|
|
@8666b50
|
3 years |
fiona.klute |
Implement "prepare_env" hook for tests
Test 15_basic_msva uses it to …
asynciomainproxy-ticket
|
|
|
@d14d7d1
|
3 years |
fiona.klute |
Test 16_view-status hooks: Use raw strings for regular expressions
asynciomainproxy-ticket
|
|
|
@0cfe818
|
3 years |
fiona.klute |
https-test-client.py: Use with instead of try/finally to safely close file
asynciomainproxy-ticket
|
|
|
@b307cc1
|
3 years |
fiona.klute |
mgstest.http._stderr_writer: Always close input stream at EOS
Fixes …
asynciomainproxy-ticket
|
|
|
@a274959
|
3 years |
fiona.klute |
Build the test suite README as HTML if pandoc is available
It doesn't …
asynciomainproxy-ticket
|
|
|
@5ea6c14
|
3 years |
fiona.klute |
Clarify exception message for unexpected headers
Using the …
asynciomainproxy-ticket
|
|
|
@459a982
|
3 years |
fiona.klute |
Include doctest for the mgstest Python package in test suite runs
…
asynciomainproxy-ticket
|
|
|
@1fe7cac
|
3 years |
fiona.klute |
TestReq10: Handle expected and unexpected connection failure
With …
asynciomainproxy-ticket
|
|
|
@0b3733d
|
3 years |
fiona.klute |
Test suite: Support checking absence of headers
asynciomainproxy-ticket
|
|
|
@bdf5917
|
3 years |
fiona.klute |
TestReq10: Implement checking expected headers
asynciomainproxy-ticket
|
|
|
@fa14c32
|
3 years |
fiona.klute |
Rename mod_gnutls_manual.mdwn -> mod_gnutls_manual.md
".md" has …
asynciomainproxy-ticket
|
|
|