|
|
|
@c5d5942
|
6 years |
thomas2.klute |
README: Update installation instructions
* Most users won't need …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@b27cce7
|
6 years |
thomas2.klute |
Fix MSVA conditional
Disabling the MSVA test if the user disabled …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@f71e6ce
|
6 years |
thomas2.klute |
Check if available GnuTLS library supports SRP
SRP is enabled by …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@7813802
|
6 years |
thomas2.klute |
Test suite: Use AP_LIBEXECDIR to find Apache modules
Distributions …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@52c3f68
|
6 years |
thomas2.klute |
Detect apache(2?)ctl and use it instead of starting Apache directly
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@03295a9
|
6 years |
thomas2.klute |
Test suite: Prevent race over error log for server fail cases
In some …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@70509f8
|
6 years |
thomas2.klute |
configure: Try apr-util if apr_memcache library was not found
Fedora …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@e765670
|
6 years |
thomas2.klute |
Fix signature of mgs_cache_child_init when building without …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@28f3f4f
|
6 years |
thomas2.klute |
Mention pandoc in README and ./configure output
This should help …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@6e1d45d
|
6 years |
thomas2.klute |
Build documentation through automake
The handwritten Makefile used …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@47a3f49
|
6 years |
thomas2.klute |
Update test/.gitignore with files that are generated now
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@31caead
|
6 years |
thomas2.klute |
Rename documentation directory to "doc"
It's a more commonly used …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@33af2b7
|
6 years |
thomas2.klute |
Test suite: Add tests to "dist" target and support VPATH builds
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@e24eed68
|
6 years |
thomas2.klute |
Remove nonexistent files from EXTRA_DIST, add CHANGELOG
Some of these …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@349fd6e
|
6 years |
thomas2.klute |
Test suite: Unify calls from Makefile.am to TestMakefile? where possible
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@d92899e
|
6 years |
thomas2.klute |
Test suite: Add lock file for the shared GnuPG keyring
Key import and …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@3f00958
|
6 years |
thomas2.klute |
New test case: PKCS #11 URLs for server key and certificate
The new …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@1708045
|
6 years |
thomas2.klute |
Test suite: Clean Apache logs, cache, and test outputs on make …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@8f90bf4
|
6 years |
thomas2.klute |
Use Automake variable check_SCRIPTS for test scripts
Just a little …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@87f1ed2
|
6 years |
thomas2.klute |
Allow loading of an additional PKCS #11 provider library
When using …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@39bd695
|
6 years |
thomas2.klute |
Test suite: Avoid race conditions during key generation
Test cases …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@4133f2d
|
6 years |
thomas2.klute |
Unify argument handling in mgs_set_priorities
Just store the argument …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@2cde026d
|
6 years |
thomas2.klute |
Merge branch 'new-gnutls-api'
Merge my TLS proxy implementation with …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@73f6f12
|
6 years |
thomas2.klute |
Check handshake result before logging "TLS connection opened"
Without …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@f030883
|
6 years |
thomas2.klute |
Set GnuTLS priorities for proxy connections separately
Until now, …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@d04f7da
|
6 years |
thomas2.klute |
Version guards for gnutls_privkey_import_openpgp_raw workaround
The …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@8b472af
|
6 years |
thomas2.klute |
Use server root for file paths in TLS proxy config
This is what users …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@2cde8111
|
6 years |
thomas2.klute |
Workarounds for OpenPGP key handling
Commit …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@351b51f
|
6 years |
thomas2.klute |
Speed up tests with background sleep
Until now, a significant part of …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@01b5d85
|
6 years |
thomas2.klute |
Merge branch 'client-verify-fix' into new-gnutls-api
Merge the fix …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@c4a015b
|
6 years |
thomas2.klute |
Merge branch 'split-testsuite' into new-gnutls-api
OpenPGP support is …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@259e835
|
6 years |
thomas2.klute |
Merge branch 'master' into new-gnutls-api
Branch 'master' at this …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@1d9cfaf
|
6 years |
thomas2.klute |
gnutls_config.c: Backport function signature changes from master
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@49d25a9
|
6 years |
thomas2.klute |
Test suite: Unset sleep_pidfile before checking output
If the …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@907ae8f
|
6 years |
thomas2.klute |
New test case: Proxy server detects revoked back end cert using CRL
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@bfcff28
|
6 years |
thomas2.klute |
Test suite: Ensure test certificates have unique serial numbers
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@809c422
|
6 years |
thomas2.klute |
TLS proxy: Add support for CRLs to back end server verification
When …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@bd24203
|
6 years |
thomas2.klute |
Explicitly build trust list for proxy connections
This change …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@36db6c9
|
6 years |
thomas2.klute |
Test suite: Add CRL signing capability to test CAs
This is required …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@1b57c56
|
6 years |
thomas2.klute |
Test suite: Clean lock files
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@232fb60
|
6 years |
thomas2.klute |
runtests: Stop background sleep after gnutls-cli is done
The PID of …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@a213967
|
6 years |
thomas2.klute |
Test suite: Filter "Server" header when checking output
Like "Date", …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@ed82a6a
|
6 years |
thomas2.klute |
Two more test cases for TLS reverse proxy and test locking fix
New …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@54aa269
|
6 years |
thomas2.klute |
Test suite: Exclude "Date" header when comparing actual and expected …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@f84890d
|
6 years |
thomas2.klute |
Shared bash file for proxy back end management code
Futher test cases …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@6e6a4e4
|
6 years |
thomas2.klute |
Test case for TLS reverse proxy
This commit adds a simple test for a …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@7d2123d
|
6 years |
thomas2.klute |
Log errors while loading proxy certificate trust list
The way the …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@dda3acf
|
6 years |
thomas2.klute |
Speed up tests with background sleep
Until now, a significant part of …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@6bbc00a
|
6 years |
thomas2.klute |
Check hostname of proxy back end server against certificate
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@d8ae2a0
|
6 years |
thomas2.klute |
Documentation for proxy TLS configuration directives
Add …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@91ccb87
|
6 years |
thomas2.klute |
Merge branch 'doc' into tls-proxy
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@0de1839
|
6 years |
thomas2.klute |
Support X.509 auth for TLS proxy connections
This commit adds support …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@10b3370
|
6 years |
thomas2.klute |
Merge branch 'client-verify-fix' into tls-proxy
Fix Apache start for …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@9e35c48
|
6 years |
thomas2.klute |
runtests: Fix flock/Apache call when running with MSVA
The …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@7314438
|
6 years |
thomas2.klute |
Fix whitespace problems detected by git
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@b324906
|
6 years |
thomas2.klute |
Merge branch 'client-verify-fix' into tls-proxy
Most importantly, …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@eea8a16
|
6 years |
thomas2.klute |
New test case: TLS client auth with invalid certificate
Commit …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@8731286
|
6 years |
thomas2.klute |
Merge branch 'split-testsuite' into client-verify-fix
This merge will …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@5a8a32b
|
6 years |
thomas2.klute |
TLS Client auth: Check server verify mode if unset for dir
The …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@9a06bbd
|
6 years |
thomas2.klute |
Use flock instead of delays to protect Apache
The "sleep" call before …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@302965e
|
6 years |
thomas2.klute |
Run monkeysphere-validation-agent only for the test case using it
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@eebc960
|
6 years |
thomas2.klute |
Fix documentation for GnuTLSKeyFile option
The first two lines …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@b429e4c
|
6 years |
thomas2.klute |
Cleanup handler for proxy TLS connections
When handling client …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@d7a8286
|
6 years |
thomas2.klute |
Remove debug log messages for allocating connection config memory
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@265eafc
|
6 years |
thomas2.klute |
gnutls_io.c: Log connection start/end and unusual input filter events
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@4261999
|
6 years |
thomas2.klute |
gnutls_io_input_read: Retry gnutls_record_recv if necessary
While …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@398d1a0
|
6 years |
thomas2.klute |
Improved logging for gnutls_io_input_read
* Log if something tried to …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@4fefa39
|
6 years |
thomas2.klute |
src/gnutls_io.c: Reformat gnutls_io_filter_error for readability
No …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@beb14d9
|
6 years |
thomas2.klute |
Proof of concept: Support for proxy back end connections using TLS
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@c1ef069
|
6 years |
thomas2.klute |
Record if a connection is a proxy connection
When handling a proxy …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@5342265
|
6 years |
thomas2.klute |
Close last for loop in mgs_find_sni_server
The closing brace for the …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@07d548d
|
6 years |
thomas2.klute |
Properly use SSLProxyEngine option
ssl_proxy_enable now checks if …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@e78bc78
|
6 years |
thomas2.klute |
Adjust test tools and documentation to split tests and moved test dir
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@87208b5
|
6 years |
thomas2.klute |
Completely clean test identities
A few artifacts were left over …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@65c18ce
|
6 years |
thomas2.klute |
Run Monkeysphere based test case only when compiled with --enable-msva …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@5951102
|
6 years |
thomas2.klute |
Clean test environment on "make clean"
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@8dcf888
|
6 years |
thomas2.klute |
Rename test suite directory from t/ to test/
This is the same name …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@c51e33a
|
6 years |
thomas2.klute |
Run tests from separate scripts
Replace the run_tests.sh script with …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@859667d
|
6 years |
thomas2.klute |
t/.gitignore: Ignore test suite output
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@0f5c9e1
|
6 years |
thomas2.klute |
Let Automake handle the test directory
Instead of running the test …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@accbb83
|
6 years |
thomas2.klute |
mod_gnutls.c: Whitespace and line break fixes
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@c4ba9722
|
6 years |
thomas2.klute |
Add myself to list of contributors
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@c782c1f
|
6 years |
thomas2.klute |
Don't do global deinit when disabling TLS for a proxy back end …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@e8acf05
|
6 years |
thomas2.klute |
Enable/disable TLS per connection in ssl_engine_disable
Previously, …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@e4b58b6
|
6 years |
thomas2.klute |
Check error codes during GnuTLS connection init
These calls shouldn't …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@3d361b8
|
6 years |
thomas2.klute |
Check if filters exist before removing them in ssl_engine_disable
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@64dadf8
|
6 years |
thomas2.klute |
Use proper GNUTLS_ENABLED_* macros in SSL proxy functions
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@c32240f
|
6 years |
dkg |
switch from --long-arg=foo to --long-arg foo for certtool in test …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@031acac
|
7 years |
nmav |
Use the new (3.1.3+) GnuTLS APIs to obtain private keys.
This allows …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@fd82e59
|
7 years |
dkg |
use strict compiler arguments by default (-Wall -Werror -Wextra)
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@8a30d35
|
7 years |
dkg |
avoid deprecated form of AM_INIT_AUTOMAKE
without this change, we …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@765cac2
|
7 years |
dkg |
clean up MGS_SIDE abuse of apr_pstrcat
We were allocating twice as …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@2aaf4f5
|
7 years |
dkg |
implement GnuTLSExportCertificates control over max exported cert size …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@999cdec
|
7 years |
dkg |
GnuTLSExportCertificates should control maximum size of exported certs …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@04f48a2
|
7 years |
dkg |
trim down the readme so that we have one place for documentation.
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@8232c8b
|
7 years |
dkg |
removing dia ORM renderings; avoiding synchronization issues
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@a8df590
|
7 years |
dkg |
clean up testing directory properly
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@55dc3f0
|
7 years |
dkg |
Make Apache 2.4 display the correct module in error logs
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@1a99240
|
7 years |
dkg |
removing certtool templates that will be regenerated
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
mod_gnutls/0.6
|
|
|
@460c048
|
7 years |
dkg |
preparing version 0.6 release
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|