|
|
|
@ca0690b
|
3 years |
fiona.klute |
Add ./configure option to disable building PDF documentation
The …
asynciomainproxy-ticket
|
|
|
@a99f1aa
|
3 years |
fiona.klute |
Test suite: Create OCSP responder certificates with …
asynciomainproxy-ticket
|
|
|
@6e41fcb
|
3 years |
fiona.klute |
Release version 0.10.0
asynciomainproxy-ticket
mod_gnutls/0.10.0
|
|
|
@c4a6889
|
3 years |
fiona.klute |
CI: Add a Debian Sid (unstable) build
asynciomainproxy-ticket
|
|
|
@bfef00c
|
3 years |
fiona.klute |
Show the right GnuTLS version when using ./configure --with-gnutls-dev …
asynciomainproxy-ticket
|
|
|
@1a6eeae
|
3 years |
fiona.klute |
Allow overriding the default HTTPD mutex via configure
The custom …
asynciomainproxy-ticket
|
|
|
@2794787
|
3 years |
fiona.klute |
Pass TEST_IP and TEST_HOST to "make distcheck"
This should allow …
asynciomainproxy-ticket
|
|
|
@bfb0168
|
3 years |
fiona.klute |
CI: Don't run Valgrind tests on Markdown-only changes outside doc/
asynciomainproxy-ticket
|
|
|
@883efd2
|
3 years |
fiona.klute |
Document how to override which Valgrind suppressions to use
asynciomainproxy-ticket
|
|
|
@221e6b9
|
3 years |
fiona.klute |
Valgrind: Remove suppression for local SoftHSM build
asynciomainproxy-ticket
|
|
|
@451ca3e
|
3 years |
fiona.klute |
Valgrind: Suppression for leak from p11_kit_module_load in child processes
asynciomainproxy-ticket
|
|
|
@931da2d
|
3 years |
fiona.klute |
Get deeper stack traces from Valgrind
asynciomainproxy-ticket
|
|
|
@10100a2
|
3 years |
fiona.klute |
Remove keyEncipherment flag from test certificates
The days of plain …
asynciomainproxy-ticket
|
|
|
@9071889
|
3 years |
fiona.klute |
Remove pointless set-once process pool userdata
I know some modules …
asynciomainproxy-ticket
|
|
|
@4b1687d
|
3 years |
fiona.klute |
Changelog: Note libmsv/libcurl memory issue as known
asynciomainproxy-ticket
|
|
|
@38bf158
|
3 years |
fiona.klute |
Documentation for testing with Valgrind
asynciomainproxy-ticket
|
|
|
@0fc654d
|
3 years |
fiona.klute |
Update README
* Include "make check" in build instructions
* Fix …
asynciomainproxy-ticket
|
|
|
@8b14b13
|
3 years |
fiona.klute |
Small .gitignore cleanup
asynciomainproxy-ticket
|
|
|
@ee6351d
|
3 years |
fiona.klute |
Test suite: Use mod_mpm_event by default
The "event" MPM module is …
asynciomainproxy-ticket
|
|
|
@57dec86
|
3 years |
fiona.klute |
CI: Use matrix instead of container-specific jobs
asynciomainproxy-ticket
|
|
|
@8c63a1c
|
3 years |
fiona.klute |
Another round of the getaddrinfo Valgrind suppression
asynciomainproxy-ticket
|
|
|
@4482da4
|
3 years |
fiona.klute |
Test suite: Set global ServerName?
This gets rid of the annoying …
asynciomainproxy-ticket
|
|
|
@c756f08
|
3 years |
fiona.klute |
Make apr_getaddrinfo_leak Valgrind suppression more generic
This …
asynciomainproxy-ticket
|
|
|
@4f81704
|
3 years |
fiona.klute |
CI: Use "pthread" mutex for non-Valgrind builds, too
I've switched …
asynciomainproxy-ticket
|
|
|
@732cdb11
|
3 years |
fiona.klute |
CI: Run Valgrind tests
asynciomainproxy-ticket
|
|
|
@1d778ce
|
3 years |
fiona.klute |
Run Valgrind with "--gen-suppressions=all"
This makes it easier to …
asynciomainproxy-ticket
|
|
|
@cfb43fc
|
3 years |
fiona.klute |
Use Valgrind "-v" instead of "-s" for compatibility with Debian Buster …
asynciomainproxy-ticket
|
|
|
@7c89e8a
|
3 years |
fiona.klute |
Make Valgrind suppressions work without Apache and GnuTLS debug …
asynciomainproxy-ticket
|
|
|
@fe3564a
|
3 years |
fiona.klute |
configure.as: Use AS_IF instead of shell if-blocks around macros
Some …
asynciomainproxy-ticket
|
|
|
@d1d1e3a
|
3 years |
fiona.klute |
Valgrind tests: Use --keep-debuginfo=yes
By default Valgrind drops …
asynciomainproxy-ticket
|
|
|
@f73eeb7
|
3 years |
fiona.klute |
Valgrind tests: More suppressions for issues outside mod_gnutls
asynciomainproxy-ticket
|
|
|
@005b185
|
3 years |
fiona.klute |
Fail tests running with Valgrind if Valgrind reports errors
asynciomainproxy-ticket
|
|
|
@e46d203
|
3 years |
fiona.klute |
Update forgotten license headers
asynciomainproxy-ticket
|
|
|
@99c61f9
|
3 years |
fiona.klute |
Add configure option --enable-valgrind-test to run tests with Valgrind …
asynciomainproxy-ticket
|
|
|
@c5f8e85
|
3 years |
fiona.klute |
Manual: Fix circular reference in GnuTLSOCSPCache section
Thanks to …
asynciomainproxy-ticket
|
|
|
@c4ba2b60
|
3 years |
fiona.klute |
Test suite: Automatically detect required modules
Which modules are …
asynciomainproxy-ticket
|
|
|
@c05b8c5
|
3 years |
fiona.klute |
TestService?: Preserve the child process' return code
asynciomainproxy-ticket
|
|
|
@422eade
|
3 years |
fiona.klute |
Support optional timeout for TestService?.wait()
asynciomainproxy-ticket
|
|
|
@264ab17
|
3 years |
fiona.klute |
mgstest.services: Remove code for handling forking services
No longer …
asynciomainproxy-ticket
|
|
|
@e2200db
|
3 years |
fiona.klute |
Test suite: Always run Apache with "-DFOREGROUND"
This simplifies …
asynciomainproxy-ticket
|
|
|
@72ebe64
|
3 years |
fiona.klute |
runtest.py: Support for running Apache with Valgrind
Not used by …
asynciomainproxy-ticket
|
|
|
@f042405
|
3 years |
fiona.klute |
Update changelog and version for 0.10.0
asynciomainproxy-ticket
|
|
|
@47c2384
|
3 years |
fiona.klute |
Documentation: OCSP multi-stapling works only for consecutive certificates
asynciomainproxy-ticket
|
|
|
@8daef10
|
3 years |
fiona.klute |
Update documentation on client authentication
asynciomainproxy-ticket
|
|
|
@f51d359
|
3 years |
fiona.klute |
Remove obsolete restrictions on HTTP/2 from documentation
GnuTLS …
asynciomainproxy-ticket
|
|
|
@e819f13
|
3 years |
fiona.klute |
Unconditionally enable early SNI parsing
All supported GnuTLS …
asynciomainproxy-ticket
|
|
|
@f4f837a
|
3 years |
fiona.klute |
CI: Ignore packaging branches for simple build
If anything they …
asynciomainproxy-ticket
|
|
|
@07fc5d3
|
3 years |
fiona.klute |
CI: Use job-specific names for debug artifacts
asynciomainproxy-ticket
|
|
|
@c33b0ea
|
3 years |
fiona.klute |
Test per-directory "GnuTLSClientVerify request"
The request must …
asynciomainproxy-ticket
|
|
|
@0be2505
|
3 years |
fiona.klute |
Nice names for log storage actions
asynciomainproxy-ticket
|
|
|
@2cc53cb
|
3 years |
fiona.klute |
Add Fedora CI build
asynciomainproxy-ticket
|
|
|
@f4ac390e
|
3 years |
fiona.klute |
Simple CI build
asynciomainproxy-ticket
|
|
|
@442c6a6
|
3 years |
fiona.klute |
Test suite: Detect Apache shutdown by PID file
Wait for the PID file …
asynciomainproxy-ticket
|
|
|
@7543db4
|
3 years |
fiona.klute |
Remove debug output of raw test connection config
asynciomainproxy-ticket
|
|
|
@44188aa
|
3 years |
fiona.klute |
Test post-handshake authentication with an untrusted certificate
asynciomainproxy-ticket
|
|
|
@4f2c988
|
3 years |
fiona.klute |
Send 403 if required client post-handshake authentication fails
This …
asynciomainproxy-ticket
|
|
|
@4fe52e6
|
3 years |
fiona.klute |
Use gnutls-cli inline command to test TLS session resumption
This …
asynciomainproxy-ticket
|
|
|
@f94938c
|
3 years |
fiona.klute |
Nicer logging for post-handshake authentication
asynciomainproxy-ticket
|
|
|
@fcad37b
|
3 years |
fiona.klute |
Retry gnutls_reauth() on transport interruptions
asynciomainproxy-ticket
|
|
|
@9db4dcd
|
3 years |
fiona.klute |
Handle GNUTLS_E_GOT_APPLICATION_DATA on gnutls_reauth()
Pending …
asynciomainproxy-ticket
|
|
|
@4a22ee6
|
3 years |
fiona.klute |
Fix speculative reads using cached data
The rollback buffer …
asynciomainproxy-ticket
|
|
|
@1c76ea7
|
3 years |
fiona.klute |
mgstest.tests: Encode request body as utf-8
HTTPConnection.request() …
asynciomainproxy-ticket
|
|
|
@6fa6095
|
3 years |
fiona.klute |
Partial post-handshake auth support
Needs proper error handling, …
asynciomainproxy-ticket
|
|
|
@e24e3bf9
|
3 years |
fiona.klute |
Rewrite authz hook
Using the effective mode simplifies the code a …
asynciomainproxy-ticket
|
|
|
@3b2edd6
|
3 years |
fiona.klute |
Use GnuTLS' certificate status text instead of hard-coded cases
…
asynciomainproxy-ticket
|
|
|
@ee2854b
|
3 years |
fiona.klute |
Remove a forgotten "return OK" in mgs_cert_verify
See …
asynciomainproxy-ticket
|
|
|
@99196d9
|
3 years |
fiona.klute |
Reauthentication: Much simpler check for HTTP/2
Integer comparison …
asynciomainproxy-ticket
|
|
|
@a9e0738
|
3 years |
fiona.klute |
Test 28_HTTP2_support: Log curl output regardless of failure
asynciomainproxy-ticket
|
|
|
@0dc1a31
|
3 years |
fiona.klute |
Always return DECLINED instead of OK from mgs_cert_verify
The return …
asynciomainproxy-ticket
|
|
|
@346c03b
|
3 years |
fiona.klute |
Prohibit TLS renegotiation for HTTP/2 connections (RFC 7540, section 9.2.1)
asynciomainproxy-ticket
|
|
|
@407ca6e
|
3 years |
fiona.klute |
TestRequest? and TestReq10: Support request body
This will allow …
asynciomainproxy-ticket
|
|
|
@b22def6
|
3 years |
fiona.klute |
Remove SIGPIPE signal block
There's no discernible reason to keep …
asynciomainproxy-ticket
|
|
|
@05e2d9e
|
3 years |
fiona.klute |
Move function declarations for gnutls_io.c into a separate header
asynciomainproxy-ticket
|
|
|
@cc748329
|
3 years |
fiona.klute |
Update Changelog
asynciomainproxy-ticket
|
|
|
@adcd021
|
3 years |
fiona.klute |
Small documentation updates
asynciomainproxy-ticket
|
|
|
@546bf35
|
3 years |
fiona.klute |
Update documentation on OCSP stapling
asynciomainproxy-ticket
|
|
|
@9bc842e
|
3 years |
fiona.klute |
Update documentation for GnuTLSOCSPResponseFile
asynciomainproxy-ticket
|
|
|
@33fa7d5
|
3 years |
fiona.klute |
Ensure stapling is active for server certificates with "must-staple"
…
asynciomainproxy-ticket
|
|
|
@5c9ca6b
|
3 years |
fiona.klute |
Ensure sc->ocsp and sc->ocsp_num are always initialized
They should …
asynciomainproxy-ticket
|
|
|
@a3e0f7b
|
3 years |
fiona.klute |
Support a list of files for the GnuTLSOCSPResponseFile option
This …
asynciomainproxy-ticket
|
|
|
@845c112
|
3 years |
fiona.klute |
Async OCSP updates for multi-stapling
There's now one mod_watchdog …
asynciomainproxy-ticket
|
|
|
@587642d
|
3 years |
fiona.klute |
OCSP test: Prevent single-second refresh intervals
With the default …
asynciomainproxy-ticket
|
|
|
@c446ca5
|
3 years |
fiona.klute |
Small cleanups (use mgs_ocsp_data_t, update copyright header)
asynciomainproxy-ticket
|
|
|
@ce987dc
|
3 years |
fiona.klute |
Log number of certificates in chain that OCSP stapling is enabled for
asynciomainproxy-ticket
|
|
|
@1aad1d7
|
3 years |
fiona.klute |
Consider stapling configured if it's configured for one certificate
…
asynciomainproxy-ticket
|
|
|
@1c3853a
|
3 years |
fiona.klute |
Minimal multi-staple implementation
Works, but has limitations:
* …
asynciomainproxy-ticket
|
|
|
@08ba205
|
3 years |
fiona.klute |
Turn per-vhost OCSP data into an array
Size 1 for now, but it's a …
asynciomainproxy-ticket
|
|
|
@4e60dd8
|
3 years |
fiona.klute |
Handle initialization of the OCSP data structure in one place
This …
asynciomainproxy-ticket
|
|
|
@de9b100
|
3 years |
fiona.klute |
OCSP config: Check if cache is available before processing certificate …
asynciomainproxy-ticket
|
|
|
@cf6f974
|
3 years |
fiona.klute |
mgs_get_ocsp_response: Accept request information from …
asynciomainproxy-ticket
|
|
|
@98b37a1
|
3 years |
fiona.klute |
mgs_get_ocsp_response: Consistently use "sc" variable
The "sc = …
asynciomainproxy-ticket
|
|
|
@9418c1e
|
3 years |
fiona.klute |
mgs_cache_ocsp_failure: Require explicit struct mgs_ocsp_data
asynciomainproxy-ticket
|
|
|
@06dcf89
|
3 years |
fiona.klute |
mgs_cache_ocsp_response: Require explicit struct mgs_ocsp_data
asynciomainproxy-ticket
|
|
|
@75f2d96
|
3 years |
fiona.klute |
check_ocsp_response: Require explicit struct mgs_ocsp_data
The …
asynciomainproxy-ticket
|
|
|
@e798149
|
3 years |
fiona.klute |
do_ocsp_request: Require responder URI
This method just handles a …
asynciomainproxy-ticket
|
|
|
@bdd10be
|
3 years |
fiona.klute |
mgs_create_ocsp_request: Require explicit struct mgs_ocsp_data
This …
asynciomainproxy-ticket
|
|
|
@a8374f7
|
3 years |
fiona.klute |
Keep a reference to the certificate with OCSP data
When implementing …
asynciomainproxy-ticket
|
|
|
@20a3915
|
3 years |
fiona.klute |
mgstest.softhsm: Remove unnecessary import
asynciomainproxy-ticket
|
|
|
@b2546f0
|
3 years |
fiona.klute |
mgstest.softhsm: Include type when searching object URLs
The p11tool …
asynciomainproxy-ticket
|
|
|
@221ffe5
|
3 years |
fiona.klute |
Test 28_HTTP2_support: Fix skip message in case of missing curl
asynciomainproxy-ticket
|
|
|