|
|
|
@a819501
|
4 years |
fiona.klute |
Test suite: Move template files into per-identity directories
Also …
asynciomainproxy-ticket
|
|
|
@c91382d
|
4 years |
fiona.klute |
Test suite: Move UID files into per-identity directories
asynciomainproxy-ticket
|
|
|
@143bd98
|
4 years |
fiona.klute |
Build test certificates without intermediate certificate request files
asynciomainproxy-ticket
|
|
|
@510764a
|
4 years |
fiona.klute |
Release version 0.9.0
asynciodebian/mastermainproxy-ticket
mod_gnutls/0.9.0
|
|
|
@8adfa57
|
4 years |
fiona.klute |
Remove "experimental" note from Early SNI status in ./configure output
asynciodebian/mastermainproxy-ticket
|
|
|
@6200f6f
|
4 years |
fiona.klute |
Switch server based on early SNI only if a name was found
asynciodebian/mastermainproxy-ticket
|
|
|
@39a27cf
|
4 years |
fiona.klute |
Require pem2openpgp for tests only when building with MSVA support
…
asynciodebian/mastermainproxy-ticket
|
|
|
@b6c7866
|
4 years |
fiona.klute |
Update copyright headers of files changed this year
asynciodebian/mastermainproxy-ticket
|
|
|
@a900948
|
4 years |
fiona.klute |
Support multiple ALPN proposals for proxy TLS connections
The note …
asynciodebian/mastermainproxy-ticket
|
|
|
@4d38cbd
|
4 years |
fiona.klute |
Return EOS/success for failed proxy TLS connections only on handshake
…
asynciodebian/mastermainproxy-ticket
|
|
|
@08c48d7
|
4 years |
fiona.klute |
Extract code for turning APR array of strings into gnutls_datum_t …
asynciodebian/mastermainproxy-ticket
|
|
|
@c7710cf
|
4 years |
fiona.klute |
Immediately return from proxy_conn_set_alpn() if there is no proxy …
asynciodebian/mastermainproxy-ticket
|
|
|
@564f33f
|
4 years |
fiona.klute |
Move SNI and ALPN setup for proxy connections to gnutls_proxy.c
asynciodebian/mastermainproxy-ticket
|
|
|
@0378c22
|
4 years |
fiona.klute |
Move mod_proxy note name definitions to gnutls_proxy.h
asynciodebian/mastermainproxy-ticket
|
|
|
@68b5156
|
4 years |
fiona.klute |
Move proxy-only functions from gnutls_hooks.c to a dedicated file
asynciodebian/mastermainproxy-ticket
|
|
|
@0fcba60
|
4 years |
fiona.klute |
Move compiled default priorities to gnutls_util.[hc]
asynciodebian/mastermainproxy-ticket
|
|
|
@f674424
|
4 years |
fiona.klute |
First prototype of proxy ALPN support
The current code assumes that …
asynciodebian/mastermainproxy-ticket
|
|
|
@2038b76
|
4 years |
fiona.klute |
Ensure nonblocking reads pass EAGAIN or EINTR status to caller
asynciodebian/mastermainproxy-ticket
|
|
|
@92cb0cc
|
4 years |
fiona.klute |
Handle APR_TIMEUP return value from blocking ap_get_brigade() call
…
asynciodebian/mastermainproxy-ticket
|
|
|
@5c56e5b
|
4 years |
fiona.klute |
Pass SOFTHSM_LIB setting to distcheck build
asynciodebian/mastermainproxy-ticket
|
|
|
@9a834cc
|
4 years |
fiona.klute |
Merge gnutls-cli version check
Thanks Krista!
asynciodebian/mastermainproxy-ticket
|
|
|
@6519eb9
|
4 years |
fiona.klute |
Test suite: Clear softhsm2.db before rebuilding
This avoids token ID …
asynciodebian/mastermainproxy-ticket
|
|
|
@afebb9b
|
4 years |
krista.celestia |
Add gnutls-cli version requirement to SNI tests
Since the …
asynciodebian/mastermainproxy-ticket
|
|
|
@847c0be
|
4 years |
fiona.klute |
Remove build date from manual page to support reproducible builds
asynciodebian/mastermainproxy-ticket
|
|
|
@0e55076
|
4 years |
fiona.klute |
Merge additional tests for vhost checks
Thanks Krista!
asynciodebian/mastermainproxy-ticket
|
|
|
@dcc053e
|
4 years |
krista.celestia |
Add test for missing Host header, SNI matching server alias
Test that …
asynciodebian/mastermainproxy-ticket
|
|
|
@5cf8e99
|
4 years |
krista.celestia |
Add tests for virtual host server aliases
Test matching and …
asynciodebian/mastermainproxy-ticket
|
|
|
@2ead314
|
4 years |
fiona.klute |
Hide attribute(x) annotations from Doxygen
Doxygen confuses …
asynciodebian/mastermainproxy-ticket
|
|
|
@0da10eb
|
4 years |
fiona.klute |
Document Early SNI related functions and rename the post client hello hook
asynciodebian/mastermainproxy-ticket
|
|
|
@0020874
|
4 years |
fiona.klute |
Doxygen doc: Include Early SNI functions, disable PDF output
asynciodebian/mastermainproxy-ticket
|
|
|
@dcaba46
|
4 years |
fiona.klute |
Fix newtest script
The generated test script now calls ./runtests …
asynciodebian/mastermainproxy-ticket
|
|
|
@0bed0a0
|
4 years |
fiona.klute |
Update documentation on ALPN and HTTP/2
asynciodebian/mastermainproxy-ticket
|
|
|
@a939015
|
4 years |
fiona.klute |
Test early SNI in HTTP/2 test (if enabled)
asynciodebian/mastermainproxy-ticket
|
|
|
@64470ce
|
4 years |
fiona.klute |
Load credentials and prepare ALPN in pre client hello hook
This fully …
asynciodebian/mastermainproxy-ticket
|
|
|
@79fc46b
|
4 years |
fiona.klute |
Don't cancel virtual host lookup after successful default SNI fallback
asynciodebian/mastermainproxy-ticket
|
|
|
@a26d3f6
|
4 years |
fiona.klute |
Protect early_sni_hook() against being called in the wrong context
asynciodebian/mastermainproxy-ticket
|
|
|
@4963516
|
4 years |
fiona.klute |
Use server back reference for ALPN handling
Necessary because during …
asynciodebian/mastermainproxy-ticket
|
|
|
@d4c1a4e
|
4 years |
fiona.klute |
Add a reference from mod_gnutls server settings back to the server_rec …
asynciodebian/mastermainproxy-ticket
|
|
|
@c0fc11e
|
4 years |
fiona.klute |
Separate functions for default SNI and loading virtual host …
asynciodebian/mastermainproxy-ticket
|
|
|
@7ff6c6c
|
4 years |
fiona.klute |
Add proof-of-concept SNI parser in a pre client hello hook
The SNI …
asynciodebian/mastermainproxy-ticket
|
|
|
@99eb567
|
4 years |
fiona.klute |
Test suite: Use static output instead of CGI for test …
asynciodebian/mastermainproxy-ticket
|
|
|
@7f2fd55
|
4 years |
fiona.klute |
Mention manual page documentation in ./configure output
asynciodebian/mastermainproxy-ticket
|
|
|
@4e388b0
|
4 years |
fiona.klute |
Consistently use strcasecmp() instead of mixing in apr_strnatcasecmp()
asynciodebian/mastermainproxy-ticket
|
|
|
@f06c148
|
4 years |
fiona.klute |
Simplify wildcard match for virtual host aliases
asynciodebian/mastermainproxy-ticket
|
|
|
@6d8c00c
|
4 years |
fiona.klute |
Include apr_strings.h only where needed
asynciodebian/mastermainproxy-ticket
|
|
|
@3c6645b
|
4 years |
fiona.klute |
gnutls_hooks.c: Fix spaces in check_server_aliases()
asynciodebian/mastermainproxy-ticket
|
|
|
@96e2ea8
|
4 years |
fiona.klute |
Update changelog
asynciodebian/mastermainproxy-ticket
|
|
|
@a997449
|
4 years |
fiona.klute |
Document ALPN issue
asynciodebian/mastermainproxy-ticket
|
|
|
@5b0dd3d
|
4 years |
fiona.klute |
Test CA: Keep private keys after certificate by default
This does not …
asynciodebian/mastermainproxy-ticket
|
|
|
@3493a80
|
4 years |
fiona.klute |
Include version and build date in the manual page
asynciodebian/mastermainproxy-ticket
|
|
|
@af9e3a5
|
4 years |
fiona.klute |
Build a manual page (requires pandoc)
asynciodebian/mastermainproxy-ticket
|
|
|
@b47dc70
|
4 years |
fiona.klute |
Test suite: Simplify certificate template creation
asynciodebian/mastermainproxy-ticket
|
|
|
@3aff94d
|
4 years |
fiona.klute |
Include cache status in mod_status reports
asynciodebian/mastermainproxy-ticket
|
|
|
@267a27a
|
4 years |
fiona.klute |
Test suite: Use separate IPC namespaces when enabled
Minimal change …
asynciodebian/mastermainproxy-ticket
|
|
|
@0062ede
|
4 years |
fiona.klute |
Test for IP-based virtual hosts
Mostly to make sure the new "same …
asynciodebian/mastermainproxy-ticket
|
|
|
@849b87e
|
4 years |
fiona.klute |
Test suite: Add support for IP-based virtual hosts
* Pass TEST_IP to …
asynciodebian/mastermainproxy-ticket
|
|
|
@04753db8
|
4 years |
fiona.klute |
Require Host header to match SNI hostname (if any)
This is a …
asynciodebian/mastermainproxy-ticket
|
|
|
@a14cf5c
|
4 years |
fiona.klute |
Store SNI hostname in mod_gnutls' connection context
asynciodebian/mastermainproxy-ticket
|
|
|
@20c3f7b
|
4 years |
fiona.klute |
Expect test for vhost check to pass
asynciodebian/mastermainproxy-ticket
|
|
|
@de3fad3
|
4 years |
fiona.klute |
Require handshake and request to use the same server
The new check …
asynciodebian/mastermainproxy-ticket
|
|
|
@15368a4
|
4 years |
fiona.klute |
Improve log messages for PKCS #11 provider loading
asynciodebian/mastermainproxy-ticket
|
|
|
@359f009
|
4 years |
fiona.klute |
Add test for vhost check
Expected to fail right now. The test …
asynciodebian/mastermainproxy-ticket
|
|
|
@8273683
|
4 years |
fiona.klute |
Fix port numbers for vhosts in post_config log messages
asynciodebian/mastermainproxy-ticket
|
|
|
@469861a
|
4 years |
fiona.klute |
Enable session tickets in the post client hello hook
With this …
asynciodebian/mastermainproxy-ticket
|
|
|
@5f15295
|
4 years |
fiona.klute |
Update configuration examples
asynciodebian/mastermainproxy-ticket
|
|
|
@1a3068c
|
4 years |
fiona.klute |
Update documentation on OCSP stapling and the certificate file
asynciodebian/mastermainproxy-ticket
|
|
|
@bac1a32
|
4 years |
fiona.klute |
Order, log message, and style fixes
asynciodebian/mastermainproxy-ticket
|
|
|
@fdd3bf0
|
4 years |
fiona.klute |
Enable session tickets by default if GnuTLS version >= 3.6.4
GnuTLS …
asynciodebian/mastermainproxy-ticket
|
|
|
@bd2b48b
|
4 years |
fiona.klute |
Immediately retry on EINTR or EAGAIN for blocking receive
Proxy TLS …
asynciodebian/mastermainproxy-ticket
|
|
|
@78d75ac
|
4 years |
fiona.klute |
Use the right cache config string in cache trace logs
asynciodebian/mastermainproxy-ticket
|
|
|
@0d7660d
|
4 years |
fiona.klute |
Provide a default path for the default OCSP cache
asynciodebian/mastermainproxy-ticket
|
|
|
@60868d2
|
4 years |
fiona.klute |
Default to NORMAL for the GnuTLS priority settings
This simplifies …
asynciodebian/mastermainproxy-ticket
|
|
|
@bd1d8d3
|
4 years |
fiona.klute |
Test suite: Stop proxy backend servers from writing to proxy access …
asynciodebian/mastermainproxy-ticket
|
|
|
@e796121
|
4 years |
fiona.klute |
Remove documentation on OpenPGP authentication
asynciodebian/mastermainproxy-ticket
|
|
|
@ed5d2b8
|
4 years |
fiona.klute |
Update GnuTLSCacheTimeout documentation: No longer used for OCSP
asynciodebian/mastermainproxy-ticket
|
|
|
@7105869
|
4 years |
fiona.klute |
Update GnuTLSCache documentation
asynciodebian/mastermainproxy-ticket
|
|
|
@b4eef18
|
4 years |
fiona.klute |
Add --with-gnutls-dev=DIR option to ./configure
Makes testing against …
asynciodebian/mastermainproxy-ticket
|
|
|
@1754503
|
4 years |
fiona.klute |
Test suite: Enable session tickets for session resumption test
TLS …
asynciodebian/mastermainproxy-ticket
|
|
|
@eb4cab7
|
4 years |
fiona.klute |
Test suite: Compare cipher suites to test the status page
Expecting a …
asynciodebian/mastermainproxy-ticket
|
|
|
@c33ef88
|
4 years |
fiona.klute |
Test suite: Use ciphers, not protocol versions for priority mismatch …
asynciodebian/mastermainproxy-ticket
|
|
|
@72b669e
|
4 years |
fiona.klute |
Refuse to send or receive over a failed TLS connection
On a failed …
asynciodebian/mastermainproxy-ticket
|
|
|
@514d4d6
|
4 years |
fiona.klute |
Test suite: Two more compatibility fixes for GnuTLS 3.6.4
asynciodebian/mastermainproxy-ticket
|
|
|
@2ec3e54
|
4 years |
fiona.klute |
Test suite: Remove size of DH prime from variable dump
The variable …
asynciodebian/mastermainproxy-ticket
|
|
|
@adceac0
|
5 years |
fiona.klute |
Remove unneeded server variables "cert_cn" and "cert_san"
"cert_san" …
asynciodebian/mastermainproxy-ticket
|
|
|
@cb6476c
|
5 years |
fiona.klute |
Enable OCSP stapling by default if possible
If the user hasn't …
asynciodebian/mastermainproxy-ticket
|
|
|
@efc43b4
|
5 years |
fiona.klute |
Split per-vhost post config for OCSP stapling into configuring and …
asynciodebian/mastermainproxy-ticket
|
|
|
@994200a
|
5 years |
fiona.klute |
Set up shmcb OCSP cache by default
The shmcb socache doesn't require …
asynciodebian/mastermainproxy-ticket
|
|
|
@3358887
|
5 years |
fiona.klute |
Assign cache configuration to server only if successful
The sc->cache …
asynciodebian/mastermainproxy-ticket
|
|
|
@eced11a
|
5 years |
fiona.klute |
Remove server variable ocsp_cache_enable
There is no need to …
asynciodebian/mastermainproxy-ticket
|
|
|
@92b5f4d
|
5 years |
fiona.klute |
Use the OCSP cache for responses
asynciodebian/mastermainproxy-ticket
|
|
|
@babdb29
|
5 years |
fiona.klute |
Initialize and clean up the OCSP cache, following session cache patterns
asynciodebian/mastermainproxy-ticket
|
|
|
@d036f96
|
5 years |
fiona.klute |
Add configuration directive GnuTLSOCSPCache (no-op for now)
First …
asynciodebian/mastermainproxy-ticket
|
|
|
@13870b7
|
5 years |
fiona.klute |
test-14_resume_session.bash: Check if the session was resumed …
asynciodebian/mastermainproxy-ticket
|
|
|
@2d454a2
|
5 years |
fiona.klute |
Macro for session cache name
asynciodebian/mastermainproxy-ticket
|
|
|
@72377cf
|
5 years |
fiona.klute |
Always set SSL_COMPRESS_METHOD=NULL with GnuTLS >= 3.6.0
Compression …
asynciodebian/mastermainproxy-ticket
|
|
|
@eaa8a9d
|
5 years |
fiona.klute |
Test suite: Fix list of dist files for test 03_cachetimeout_in_vhost
asynciodebian/mastermainproxy-ticket
|
|
|
@ce5f776
|
5 years |
fiona.klute |
Move config and post_config of a cache instance to separate functions
…
asynciodebian/mastermainproxy-ticket
|
|
|
@5ab2868
|
5 years |
fiona.klute |
Remove unused server variable
The mgs_srvconf_rec.non_ssl_request …
asynciodebian/mastermainproxy-ticket
|
|
|
@a6aa387
|
5 years |
fiona.klute |
Test suite: Update cache configuration, ensure unique cache paths
asynciodebian/mastermainproxy-ticket
|
|
|
@56c722f
|
5 years |
fiona.klute |
Test suite: Do not expire test PGP keys
Infinite validity is no …
asynciodebian/mastermainproxy-ticket
|
|
|