|
|
|
@bd24203
|
5 years |
thomas2.klute |
Explicitly build trust list for proxy connections
This change …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@36db6c9
|
5 years |
thomas2.klute |
Test suite: Add CRL signing capability to test CAs
This is required …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@1b57c56
|
5 years |
thomas2.klute |
Test suite: Clean lock files
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@232fb60
|
5 years |
thomas2.klute |
runtests: Stop background sleep after gnutls-cli is done
The PID of …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@a213967
|
5 years |
thomas2.klute |
Test suite: Filter "Server" header when checking output
Like "Date", …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@ed82a6a
|
5 years |
thomas2.klute |
Two more test cases for TLS reverse proxy and test locking fix
New …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@54aa269
|
5 years |
thomas2.klute |
Test suite: Exclude "Date" header when comparing actual and expected …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@f84890d
|
5 years |
thomas2.klute |
Shared bash file for proxy back end management code
Futher test cases …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@6e6a4e4
|
5 years |
thomas2.klute |
Test case for TLS reverse proxy
This commit adds a simple test for a …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@7d2123d
|
5 years |
thomas2.klute |
Log errors while loading proxy certificate trust list
The way the …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@dda3acf
|
5 years |
thomas2.klute |
Speed up tests with background sleep
Until now, a significant part of …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@6bbc00a
|
5 years |
thomas2.klute |
Check hostname of proxy back end server against certificate
…
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@d8ae2a0
|
5 years |
thomas2.klute |
Documentation for proxy TLS configuration directives
Add …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@91ccb87
|
5 years |
thomas2.klute |
Merge branch 'doc' into tls-proxy
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@0de1839
|
5 years |
thomas2.klute |
Support X.509 auth for TLS proxy connections
This commit adds support …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@10b3370
|
5 years |
thomas2.klute |
Merge branch 'client-verify-fix' into tls-proxy
Fix Apache start for …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@9e35c48
|
5 years |
thomas2.klute |
runtests: Fix flock/Apache call when running with MSVA
The …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@b324906
|
5 years |
thomas2.klute |
Merge branch 'client-verify-fix' into tls-proxy
Most importantly, …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@eea8a16
|
5 years |
thomas2.klute |
New test case: TLS client auth with invalid certificate
Commit …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@8731286
|
5 years |
thomas2.klute |
Merge branch 'split-testsuite' into client-verify-fix
This merge will …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@5a8a32b
|
5 years |
thomas2.klute |
TLS Client auth: Check server verify mode if unset for dir
The …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@9a06bbd
|
5 years |
thomas2.klute |
Use flock instead of delays to protect Apache
The "sleep" call before …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@302965e
|
5 years |
thomas2.klute |
Run monkeysphere-validation-agent only for the test case using it
…
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@eebc960
|
5 years |
thomas2.klute |
Fix documentation for GnuTLSKeyFile option
The first two lines …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@b429e4c
|
5 years |
thomas2.klute |
Cleanup handler for proxy TLS connections
When handling client …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@d7a8286
|
5 years |
thomas2.klute |
Remove debug log messages for allocating connection config memory
…
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@265eafc
|
5 years |
thomas2.klute |
gnutls_io.c: Log connection start/end and unusual input filter events
…
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@4261999
|
5 years |
thomas2.klute |
gnutls_io_input_read: Retry gnutls_record_recv if necessary
While …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@398d1a0
|
5 years |
thomas2.klute |
Improved logging for gnutls_io_input_read
* Log if something tried to …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@4fefa39
|
5 years |
thomas2.klute |
src/gnutls_io.c: Reformat gnutls_io_filter_error for readability
No …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@beb14d9
|
5 years |
thomas2.klute |
Proof of concept: Support for proxy back end connections using TLS
…
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@c1ef069
|
5 years |
thomas2.klute |
Record if a connection is a proxy connection
When handling a proxy …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@5342265
|
5 years |
thomas2.klute |
Close last for loop in mgs_find_sni_server
The closing brace for the …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@07d548d
|
5 years |
thomas2.klute |
Properly use SSLProxyEngine option
ssl_proxy_enable now checks if …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@e78bc78
|
5 years |
thomas2.klute |
Adjust test tools and documentation to split tests and moved test dir
…
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@87208b5
|
5 years |
thomas2.klute |
Completely clean test identities
A few artifacts were left over …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@65c18ce
|
5 years |
thomas2.klute |
Run Monkeysphere based test case only when compiled with --enable-msva …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@5951102
|
5 years |
thomas2.klute |
Clean test environment on "make clean"
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@8dcf888
|
5 years |
thomas2.klute |
Rename test suite directory from t/ to test/
This is the same name …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@c51e33a
|
5 years |
thomas2.klute |
Run tests from separate scripts
Replace the run_tests.sh script with …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@859667d
|
5 years |
thomas2.klute |
t/.gitignore: Ignore test suite output
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@0f5c9e1
|
5 years |
thomas2.klute |
Let Automake handle the test directory
Instead of running the test …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@accbb83
|
5 years |
thomas2.klute |
mod_gnutls.c: Whitespace and line break fixes
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@c4ba972
|
5 years |
thomas2.klute |
Add myself to list of contributors
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@c782c1f
|
5 years |
thomas2.klute |
Don't do global deinit when disabling TLS for a proxy back end …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@e8acf05
|
5 years |
thomas2.klute |
Enable/disable TLS per connection in ssl_engine_disable
Previously, …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@e4b58b6
|
5 years |
thomas2.klute |
Check error codes during GnuTLS connection init
These calls shouldn't …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@3d361b8
|
5 years |
thomas2.klute |
Check if filters exist before removing them in ssl_engine_disable
…
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@64dadf8
|
5 years |
thomas2.klute |
Use proper GNUTLS_ENABLED_* macros in SSL proxy functions
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@c32240f
|
5 years |
dkg |
switch from --long-arg=foo to --long-arg foo for certtool in test …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@fd82e59
|
6 years |
dkg |
use strict compiler arguments by default (-Wall -Werror -Wextra)
…
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@8a30d35
|
6 years |
dkg |
avoid deprecated form of AM_INIT_AUTOMAKE
without this change, we …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@765cac2
|
6 years |
dkg |
clean up MGS_SIDE abuse of apr_pstrcat
We were allocating twice as …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@2aaf4f5
|
6 years |
dkg |
implement GnuTLSExportCertificates control over max exported cert size …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@999cdec
|
6 years |
dkg |
GnuTLSExportCertificates should control maximum size of exported certs …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@04f48a2
|
6 years |
dkg |
trim down the readme so that we have one place for documentation.
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@8232c8b
|
6 years |
dkg |
removing dia ORM renderings; avoiding synchronization issues
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@a8df590
|
6 years |
dkg |
clean up testing directory properly
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@55dc3f0
|
6 years |
dkg |
Make Apache 2.4 display the correct module in error logs
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@1a99240
|
6 years |
dkg |
removing certtool templates that will be regenerated
debian/masterdebian/stretch-backportsjessie-backportsupstream
mod_gnutls/0.6
|
|
|
|
@460c048
|
6 years |
dkg |
preparing version 0.6 release
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@83eafed
|
6 years |
dkg |
avoid a very unlikely NULL dereference
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@bce7907
|
6 years |
dkg |
updated documentation to refer to the project website.
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@2de1320
|
6 years |
dkg |
drop the -PKIX suffix in the session description
(this tracks changes …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@4ec9183
|
6 years |
dkg |
Include GnuTLS version as additional version component in Server …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@1830668
|
6 years |
dkg |
fix PKG_CHECK_MODULES autoconf macro
…
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@ba7d1c5
|
6 years |
dkg |
Use older priority string for compatibility
This lets the test at …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@46de753
|
6 years |
dkg |
fix build against GnuTLS 2.12.x
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@ac32bb5
|
6 years |
dkg |
document SSL_CLIENT_CERT_TYPE
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@5409165
|
6 years |
dkg |
correct GnuTLSPriorities documentation
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@6cfb4b4
|
6 years |
dkg |
replacing manual.mdwn with mod_gnutls_manual.mdwn
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@5a3ab3c
|
6 years |
dkg |
README.ENV is now subsumed into docs/mod_gnutls_manual.mdwn
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@671b64f
|
6 years |
dkg |
remove all trailing whitespace
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@9720026
|
6 years |
dkg |
silly newline cleanup
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@5674676
|
6 years |
dkg |
add SSL_DH_PRIME_BITS to expose the size of the DH modulus to CGI
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@9717fe4
|
6 years |
dkg |
test mod_status output
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@b4739cd
|
6 years |
dkg |
display some information in mod_status
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@37b52ea
|
6 years |
dkg |
do not fail if the msva homedir already exists
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@b55bf71
|
6 years |
dkg |
accept the e-mail address in the cert Subject if no sAN e-mail is present
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@a01f8ab
|
6 years |
dkg |
upgrade to libmsv 0.1 API
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@832182b
|
6 years |
dkg |
extracting the user ID from a certificate cleanly.
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@140d237
|
6 years |
dkg |
added a monkeysphere-validated test
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@5c0d491
|
6 years |
dkg |
MSVA: successful communication between apache and the agent
This is …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@07889ab
|
6 years |
dkg |
MSVA: some initial framework
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@e3cbda4
|
6 years |
dkg |
MSVA: include in test framework
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@cf2b905
|
6 years |
dkg |
MSVA: document and parse GnuTLSClientVerifyMethod directive
The …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@fa45dcb
|
6 years |
dkg |
MSVA: ./configure now supports --enable-msva
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@6870585
|
6 years |
dkg |
Do not request X.509 certs when we are expecting OpenPGP
Apparently …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@925318f
|
6 years |
dkg |
simplify OpenPGP User ID for server in test suite
Our test suite …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@c25fc5d
|
6 years |
dkg |
OpenPGP certificate needs either sign or encrypt capabilities
GnuTLS …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@dee490f
|
6 years |
dkg |
update tests for apache 2.4
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@74212ee
|
6 years |
dkg |
update test since SSL_CLIENT_CERT is not exported to the environment …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@6bb2474
|
7 years |
dkg |
Changed Default Export Of Full PEM Certificates To FALSE
This matches …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@70e7652
|
7 years |
dkg |
remove old versions of documentation now that we can generate them …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@2b16350
|
7 years |
dkg |
clean up documentation, list GnuTLSEnable as the first option
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@e7527b9
|
7 years |
dkg |
automate generation of other manual formats.
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@4ee45a1
|
7 years |
dkg |
Used pandoc to convert from html to markdown
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@6f76e16
|
7 years |
dkg |
Do not compare ephemeral output from gnutls-cli failures
The original …
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@b1c2b01
|
7 years |
dkg |
avoid a segfault if no X.509 certificates are present during vhost_cb
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@834d926
|
7 years |
dkg |
add basic test with OpenPGP-certified credentials
This test is …
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
