|
|
|
@dcaba46
|
4 years |
fiona.klute |
Fix newtest script
The generated test script now calls ./runtests …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@0bed0a0
|
4 years |
fiona.klute |
Update documentation on ALPN and HTTP/2
asynciodebian/mastermainproxy-ticket
|
|
|
|
@a939015
|
4 years |
fiona.klute |
Test early SNI in HTTP/2 test (if enabled)
asynciodebian/mastermainproxy-ticket
|
|
|
|
@64470ce
|
4 years |
fiona.klute |
Load credentials and prepare ALPN in pre client hello hook
This fully …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@79fc46b
|
4 years |
fiona.klute |
Don't cancel virtual host lookup after successful default SNI fallback
asynciodebian/mastermainproxy-ticket
|
|
|
|
@a26d3f6
|
4 years |
fiona.klute |
Protect early_sni_hook() against being called in the wrong context
asynciodebian/mastermainproxy-ticket
|
|
|
|
@4963516
|
4 years |
fiona.klute |
Use server back reference for ALPN handling
Necessary because during …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@d4c1a4e
|
4 years |
fiona.klute |
Add a reference from mod_gnutls server settings back to the server_rec …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@c0fc11e
|
4 years |
fiona.klute |
Separate functions for default SNI and loading virtual host …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@7ff6c6c
|
4 years |
fiona.klute |
Add proof-of-concept SNI parser in a pre client hello hook
The SNI …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@99eb567
|
4 years |
fiona.klute |
Test suite: Use static output instead of CGI for test …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@7f2fd55
|
4 years |
fiona.klute |
Mention manual page documentation in ./configure output
asynciodebian/mastermainproxy-ticket
|
|
|
|
@4e388b0
|
4 years |
fiona.klute |
Consistently use strcasecmp() instead of mixing in apr_strnatcasecmp()
asynciodebian/mastermainproxy-ticket
|
|
|
|
@f06c148
|
4 years |
fiona.klute |
Simplify wildcard match for virtual host aliases
asynciodebian/mastermainproxy-ticket
|
|
|
|
@6d8c00c
|
4 years |
fiona.klute |
Include apr_strings.h only where needed
asynciodebian/mastermainproxy-ticket
|
|
|
|
@3c6645b
|
4 years |
fiona.klute |
gnutls_hooks.c: Fix spaces in check_server_aliases()
asynciodebian/mastermainproxy-ticket
|
|
|
|
@96e2ea8
|
4 years |
fiona.klute |
Update changelog
asynciodebian/mastermainproxy-ticket
|
|
|
|
@a997449
|
4 years |
fiona.klute |
Document ALPN issue
asynciodebian/mastermainproxy-ticket
|
|
|
|
@5b0dd3d
|
4 years |
fiona.klute |
Test CA: Keep private keys after certificate by default
This does not …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@3493a80
|
4 years |
fiona.klute |
Include version and build date in the manual page
asynciodebian/mastermainproxy-ticket
|
|
|
|
@af9e3a5
|
4 years |
fiona.klute |
Build a manual page (requires pandoc)
asynciodebian/mastermainproxy-ticket
|
|
|
|
@b47dc70
|
4 years |
fiona.klute |
Test suite: Simplify certificate template creation
asynciodebian/mastermainproxy-ticket
|
|
|
|
@3aff94d
|
4 years |
fiona.klute |
Include cache status in mod_status reports
asynciodebian/mastermainproxy-ticket
|
|
|
|
@267a27a
|
4 years |
fiona.klute |
Test suite: Use separate IPC namespaces when enabled
Minimal change …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@0062ede
|
4 years |
fiona.klute |
Test for IP-based virtual hosts
Mostly to make sure the new "same …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@849b87e
|
4 years |
fiona.klute |
Test suite: Add support for IP-based virtual hosts
* Pass TEST_IP to …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@04753db8
|
4 years |
fiona.klute |
Require Host header to match SNI hostname (if any)
This is a …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@a14cf5c
|
4 years |
fiona.klute |
Store SNI hostname in mod_gnutls' connection context
asynciodebian/mastermainproxy-ticket
|
|
|
|
@20c3f7b
|
4 years |
fiona.klute |
Expect test for vhost check to pass
asynciodebian/mastermainproxy-ticket
|
|
|
|
@de3fad3
|
4 years |
fiona.klute |
Require handshake and request to use the same server
The new check …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@15368a4
|
4 years |
fiona.klute |
Improve log messages for PKCS #11 provider loading
asynciodebian/mastermainproxy-ticket
|
|
|
|
@359f009
|
4 years |
fiona.klute |
Add test for vhost check
Expected to fail right now. The test …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@8273683
|
4 years |
fiona.klute |
Fix port numbers for vhosts in post_config log messages
asynciodebian/mastermainproxy-ticket
|
|
|
|
@469861a
|
4 years |
fiona.klute |
Enable session tickets in the post client hello hook
With this …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@5f15295
|
4 years |
fiona.klute |
Update configuration examples
asynciodebian/mastermainproxy-ticket
|
|
|
|
@1a3068c
|
4 years |
fiona.klute |
Update documentation on OCSP stapling and the certificate file
asynciodebian/mastermainproxy-ticket
|
|
|
|
@bac1a32
|
4 years |
fiona.klute |
Order, log message, and style fixes
asynciodebian/mastermainproxy-ticket
|
|
|
|
@fdd3bf0
|
4 years |
fiona.klute |
Enable session tickets by default if GnuTLS version >= 3.6.4
GnuTLS …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@bd2b48b
|
4 years |
fiona.klute |
Immediately retry on EINTR or EAGAIN for blocking receive
Proxy TLS …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@78d75ac
|
4 years |
fiona.klute |
Use the right cache config string in cache trace logs
asynciodebian/mastermainproxy-ticket
|
|
|
|
@0d7660d
|
4 years |
fiona.klute |
Provide a default path for the default OCSP cache
asynciodebian/mastermainproxy-ticket
|
|
|
|
@60868d2
|
4 years |
fiona.klute |
Default to NORMAL for the GnuTLS priority settings
This simplifies …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@bd1d8d3
|
4 years |
fiona.klute |
Test suite: Stop proxy backend servers from writing to proxy access …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@e796121
|
4 years |
fiona.klute |
Remove documentation on OpenPGP authentication
asynciodebian/mastermainproxy-ticket
|
|
|
|
@ed5d2b8
|
4 years |
fiona.klute |
Update GnuTLSCacheTimeout documentation: No longer used for OCSP
asynciodebian/mastermainproxy-ticket
|
|
|
|
@7105869
|
4 years |
fiona.klute |
Update GnuTLSCache documentation
asynciodebian/mastermainproxy-ticket
|
|
|
|
@b4eef18
|
4 years |
fiona.klute |
Add --with-gnutls-dev=DIR option to ./configure
Makes testing against …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@1754503
|
4 years |
fiona.klute |
Test suite: Enable session tickets for session resumption test
TLS …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@eb4cab7
|
4 years |
fiona.klute |
Test suite: Compare cipher suites to test the status page
Expecting a …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@c33ef88
|
4 years |
fiona.klute |
Test suite: Use ciphers, not protocol versions for priority mismatch …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@72b669e
|
4 years |
fiona.klute |
Refuse to send or receive over a failed TLS connection
On a failed …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@514d4d6
|
4 years |
fiona.klute |
Test suite: Two more compatibility fixes for GnuTLS 3.6.4
asynciodebian/mastermainproxy-ticket
|
|
|
|
@2ec3e54
|
4 years |
fiona.klute |
Test suite: Remove size of DH prime from variable dump
The variable …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@adceac0
|
4 years |
fiona.klute |
Remove unneeded server variables "cert_cn" and "cert_san"
"cert_san" …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@cb6476c
|
4 years |
fiona.klute |
Enable OCSP stapling by default if possible
If the user hasn't …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@efc43b4
|
4 years |
fiona.klute |
Split per-vhost post config for OCSP stapling into configuring and …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@994200a
|
4 years |
fiona.klute |
Set up shmcb OCSP cache by default
The shmcb socache doesn't require …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@3358887
|
5 years |
fiona.klute |
Assign cache configuration to server only if successful
The sc->cache …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@eced11a
|
5 years |
fiona.klute |
Remove server variable ocsp_cache_enable
There is no need to …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@92b5f4d
|
5 years |
fiona.klute |
Use the OCSP cache for responses
asynciodebian/mastermainproxy-ticket
|
|
|
|
@babdb29
|
5 years |
fiona.klute |
Initialize and clean up the OCSP cache, following session cache patterns
asynciodebian/mastermainproxy-ticket
|
|
|
|
@d036f96
|
5 years |
fiona.klute |
Add configuration directive GnuTLSOCSPCache (no-op for now)
First …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@13870b7
|
5 years |
fiona.klute |
test-14_resume_session.bash: Check if the session was resumed …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@2d454a2
|
5 years |
fiona.klute |
Macro for session cache name
asynciodebian/mastermainproxy-ticket
|
|
|
|
@72377cf
|
5 years |
fiona.klute |
Always set SSL_COMPRESS_METHOD=NULL with GnuTLS >= 3.6.0
Compression …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@eaa8a9d
|
5 years |
fiona.klute |
Test suite: Fix list of dist files for test 03_cachetimeout_in_vhost
asynciodebian/mastermainproxy-ticket
|
|
|
|
@ce5f776
|
5 years |
fiona.klute |
Move config and post_config of a cache instance to separate functions
…
asynciodebian/mastermainproxy-ticket
|
|
|
|
@5ab2868
|
5 years |
fiona.klute |
Remove unused server variable
The mgs_srvconf_rec.non_ssl_request …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@a6aa387
|
5 years |
fiona.klute |
Test suite: Update cache configuration, ensure unique cache paths
asynciodebian/mastermainproxy-ticket
|
|
|
|
@56c722f
|
5 years |
fiona.klute |
Test suite: Do not expire test PGP keys
Infinite validity is no …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@f52f1b4
|
5 years |
fiona.klute |
Allow GnuTLSCacheTimeout in virtual host config
I'm not sure if …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@d8d6b1e
|
5 years |
fiona.klute |
Reallocate buffer to data size after fetching from socache
There is …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@a314ec9
|
5 years |
fiona.klute |
Store config pointer in struct mgs_cache for logging
This way the …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@b94aee2
|
5 years |
fiona.klute |
Remove internal cache type enum
The cache type is now transparently …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@2f949bc
|
5 years |
fiona.klute |
Remove deleted m4/apr_memcache.m4 from EXTRA_DIST
asynciodebian/mastermainproxy-ticket
|
|
|
|
@adf36c3
|
5 years |
fiona.klute |
Update documentation in gnutls_cache.c
asynciodebian/mastermainproxy-ticket
|
|
|
|
@41f9bcb
|
5 years |
fiona.klute |
Use cache parameter in mgs_cache_store() and mgs_cache_fetch()
The …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@ded2291
|
5 years |
fiona.klute |
Switch generic cache store/fetch function pointers to constant …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@6bbd378
|
5 years |
fiona.klute |
Remove special handling for APR memcache and leftover includes
asynciodebian/mastermainproxy-ticket
|
|
|
|
@0363315
|
5 years |
fiona.klute |
Use cache mutex only if socache provider is not multiprocess/thread safe
asynciodebian/mastermainproxy-ticket
|
|
|
|
@6c5c2ec
|
5 years |
fiona.klute |
Test for session resumption
asynciodebian/mastermainproxy-ticket
|
|
|
|
@14a6f41
|
5 years |
fiona.klute |
Check for a cache during OCSP setup
asynciodebian/mastermainproxy-ticket
|
|
|
|
@de1ceab
|
5 years |
fiona.klute |
Replace internal cache implementation with mod_socache
Massively …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@0470e44
|
5 years |
fiona.klute |
Support common socache "type:config" style for GnuTLSCache directive
asynciodebian/mastermainproxy-ticket
|
|
|
|
@7921dc7
|
5 years |
fiona.klute |
Remove OpenPGP authentication
OpenPGP authentication was removed from …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@2246a84
|
5 years |
fiona.klute |
Make automatic OCSP cache updates and fuzz time configurable
asynciodebian/mastermainproxy-ticket
|
|
|
|
@fa6d0bb
|
5 years |
fiona.klute |
Initialize OCSP stapling only if mod_gnutls is enabled for a virtual …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@f233a23
|
5 years |
fiona.klute |
Logic for fuzzy OCSP update timing
If a server has a lot of virtual …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@3d30543
|
5 years |
fiona.klute |
Write failure cache entries from asynchronous OCSP updates
This …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@61e802c
|
5 years |
fiona.klute |
Simplify mgs_async_ocsp_update
Always use OCSP mutex for updates, …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@3c475e0
|
5 years |
fiona.klute |
Ensure that mod_gnutls child_init runs before mod_watchdog's
Our …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@103cafa
|
5 years |
fiona.klute |
Remove extra "OCSP failed" log entry while writing failure to cache
…
asynciodebian/mastermainproxy-ticket
|
|
|
|
@a85de63
|
5 years |
fiona.klute |
Make cache_fetch_func work without a connection context
This is …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@c34a68b
|
5 years |
fiona.klute |
dbm_cache_fetch: Prepare for signature without connection context
…
asynciodebian/mastermainproxy-ticket
|
|
|
|
@3656df0
|
5 years |
fiona.klute |
mgs_cache_ocsp_failure: Make expiry timeout an argument
A failure …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@6945efb
|
5 years |
fiona.klute |
mc_cache_fetch: Don't require a connection context
asynciodebian/mastermainproxy-ticket
|
|
|
|
@3381559
|
5 years |
fiona.klute |
Adjust intervals for async OCSP updates based on cache expiry or failure
asynciodebian/mastermainproxy-ticket
|
|
|
|
@0cdfb19
|
5 years |
fiona.klute |
Documentation for mgs_new_singleton_watchdog
asynciodebian/mastermainproxy-ticket
|
|
|
|
@a467635
|
5 years |
fiona.klute |
Enable asynchronous OCSP updates
Asynchronous updates are always …
asynciodebian/mastermainproxy-ticket
|
|
|
|
@506e64a
|
5 years |
fiona.klute |
Optionally return cache expiry time when caching an OCSP response
…
asynciodebian/mastermainproxy-ticket
|
|
|
|
