# # ChangeLog for include in mod_gnutls # # Generated by Trac 1.2 # Jan 22, 2021, 12:24:04 AM Fri, 02 Nov 2018 17:30:33 GMT Fiona Klute [f06c148] * include/mod_gnutls.h.in (modified) * src/gnutls_hooks.c (modified) Simplify wildcard match for virtual host aliases Fri, 02 Nov 2018 17:12:40 GMT Fiona Klute [6d8c00c] * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) * src/gnutls_config.c (modified) * src/mod_gnutls.c (modified) Include apr_strings.h only where needed Fri, 26 Oct 2018 18:37:35 GMT Fiona Klute [a14cf5c] * include/mod_gnutls.h.in (modified) * src/gnutls_hooks.c (modified) * src/gnutls_util.c (modified) Store SNI hostname in mod_gnutls' connection context Wed, 24 Oct 2018 16:56:08 GMT Fiona Klute [de3fad3] * include/mod_gnutls.h.in (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) Require handshake and request to use the same server The new check ... Thu, 27 Sep 2018 17:23:25 GMT Fiona Klute [72b669e] * include/mod_gnutls.h.in (modified) * src/gnutls_io.c (modified) Refuse to send or receive over a failed TLS connection On a failed ... Wed, 26 Sep 2018 19:21:32 GMT Fiona Klute [adceac0] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) Remove unneeded server variables "cert_cn" and "cert_san" ... Wed, 16 May 2018 17:19:05 GMT Fiona Klute [eced11a] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) Remove server variable ocsp_cache_enable There is no need to ... Wed, 16 May 2018 06:12:08 GMT Fiona Klute [babdb29] * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) * src/gnutls_cache.h (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_ocsp.h (modified) Initialize and clean up the OCSP cache, following session cache patterns Wed, 02 May 2018 18:30:26 GMT Fiona Klute [ce5f776] * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) * src/gnutls_cache.h (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) Move config and post_config of a cache instance to separate functions ... Mon, 30 Apr 2018 15:08:29 GMT Fiona Klute [5ab2868] * include/mod_gnutls.h.in (modified) * src/gnutls_io.c (modified) Remove unused server variable The mgs_srvconf_rec.non_ssl_request ... Sat, 28 Apr 2018 21:52:56 GMT Fiona Klute [b94aee2] * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) Remove internal cache type enum The cache type is now transparently ... Tue, 24 Apr 2018 16:30:33 GMT Fiona Klute [6bbd378] * configure.ac (modified) * include/mod_gnutls.h.in (modified) * m4/apr_memcache.m4 (deleted) * src/gnutls_cache.c (modified) * src/gnutls_config.c (modified) Remove special handling for APR memcache and leftover includes Mon, 23 Apr 2018 20:39:28 GMT Fiona Klute [de1ceab] * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) * src/gnutls_cache.h (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_ocsp.c (modified) * test/base_apache.conf (modified) * test/tests/00_basic/apache.conf (modified) * test/tests/27_OCSP_server/apache.conf (modified) Replace internal cache implementation with mod_socache Massively ... Sun, 22 Apr 2018 20:35:32 GMT Fiona Klute [0470e44] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_config.h (modified) * src/mod_gnutls.c (modified) * test/tests/27_OCSP_server/apache.conf (modified) Support common socache "type:config" style for GnuTLSCache directive Sun, 22 Apr 2018 17:04:41 GMT Fiona Klute [7921dc7] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) * test/Makefile.am (modified) * test/gnutls_openpgp_support.c (deleted) * test/test-14_basic_openpgp.bash (modified) * test/tests/14_basic_openpgp/apache.conf (deleted) * test/tests/14_basic_openpgp/gnutls-cli.args (deleted) * test/tests/14_basic_openpgp/input (deleted) * test/tests/14_basic_openpgp/output (deleted) * test/tests/Makefile.am (modified) Remove OpenPGP authentication OpenPGP authentication was removed ... Sat, 21 Apr 2018 19:51:51 GMT Fiona Klute [2246a84] * doc/mod_gnutls_manual.mdwn (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_ocsp.c (modified) * src/gnutls_ocsp.h (modified) * src/mod_gnutls.c (modified) Make automatic OCSP cache updates and fuzz time configurable Thu, 19 Apr 2018 18:11:52 GMT Fiona Klute [0e3f8c6] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) Create module-wide singleton watchdog during post_config Thu, 19 Apr 2018 18:09:17 GMT Fiona Klute [5c62a6a] * include/mod_gnutls.h.in (modified) mod_gnutls.h.in: Remove outdated comment Wed, 11 Apr 2018 17:16:04 GMT Fiona Klute [3c123cd] * CHANGELOG (modified) * README (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) * src/gnutls_cache.h (modified) * src/gnutls_config.c (modified) * src/gnutls_config.h (modified) * src/gnutls_hooks.c (modified) * src/gnutls_io.c (modified) * src/gnutls_ocsp.c (modified) * src/gnutls_ocsp.h (modified) * src/gnutls_util.c (modified) * src/gnutls_util.h (modified) * src/mod_gnutls.c (modified) * test/README (modified) * test/cert_helper.c (modified) * test/cert_helper.h (modified) * test/data/ocsp.cgi (modified) * test/gen_ocsp_index.c (modified) * test/gnutls_openpgp_support.c (modified) * test/runtests (modified) * test/test_ca.mk (modified) Update my name, prepare changelog for the next release Tue, 10 Apr 2018 16:18:26 GMT Fiona Klute [e7cf823] * include/mod_gnutls.h.in (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) Add process_connection hook, adjust hook order for mod_http2 ... Tue, 10 Apr 2018 06:30:52 GMT Fiona Klute [4cdd4fd] * include/mod_gnutls.h.in (modified) * src/mod_gnutls.c (modified) Implement ssl_var_lookup function (subset of mod_ssl implementation) ... Mon, 09 Apr 2018 06:52:27 GMT Fiona Klute [23e98b3] * include/mod_gnutls.h.in (modified) * src/mod_gnutls.c (modified) Implement ssl_engine_set as introduced by mod_ssl in Apache 2.4.33 Tue, 17 Oct 2017 18:49:17 GMT Thomas Klute [265159d] * include/mod_gnutls.h.in (modified) * src/gnutls_hooks.c (modified) * src/gnutls_io.c (modified) Send SNI for proxy connections Sun, 19 Feb 2017 21:58:07 GMT Thomas Klute [0b83b21] * include/mod_gnutls.h.in (modified) Remove two left-over function declarations for Lua auth handling ... Tue, 06 Dec 2016 07:13:55 GMT Thomas Klute [104e881] * include/mod_gnutls.h.in (modified) * src/gnutls_cache.h (modified) * src/gnutls_config.c (modified) * src/gnutls_config.h (modified) * src/gnutls_hooks.c (modified) * src/gnutls_io.c (modified) * src/gnutls_ocsp.c (modified) * src/gnutls_ocsp.h (modified) * src/gnutls_util.c (modified) * src/gnutls_util.h (modified) * src/mod_gnutls.c (modified) General comment updates for Doxygen compatibility Mostly /* */ vs. ... Mon, 14 Nov 2016 19:12:53 GMT Thomas Klute [e1c094c] * doc/mod_gnutls_manual.mdwn (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_ocsp.c (modified) * src/gnutls_ocsp.h (modified) * src/mod_gnutls.c (modified) * test/tests/27_OCSP_server/apache.conf (modified) Replace GnuTLSOCSPGraceTime with GnuTLSOCSPCacheTimeout Configuring ... Tue, 01 Nov 2016 11:20:42 GMT Thomas Klute [b888e8b] * doc/mod_gnutls_manual.mdwn (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_ocsp.c (modified) * src/gnutls_ocsp.h (modified) * src/mod_gnutls.c (modified) New directive GnuTLSOCSPCheckNonce Some CAs refuse to send nonces ... Mon, 31 Oct 2016 22:30:14 GMT Thomas Klute [3475e62] * include/mod_gnutls.h.in (modified) * src/mod_gnutls.c (modified) Remove EXPERIMENTAL mark for OCSP from internal documentation Thu, 27 Oct 2016 22:21:05 GMT Thomas Klute [0a02378] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_ocsp.h (modified) Style fixes for OCSP related time differences * Consistently use ... Thu, 27 Oct 2016 21:50:18 GMT Thomas Klute [333bbc7] * doc/mod_gnutls_manual.mdwn (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_ocsp.c (modified) * src/gnutls_ocsp.h (modified) * src/mod_gnutls.c (modified) Configurable OCSP socket timeout Stalled OCSP requests must time ... Fri, 21 Oct 2016 22:40:02 GMT Thomas Klute [c6dda6d] * doc/mod_gnutls_manual.mdwn (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_ocsp.c (modified) * src/mod_gnutls.c (modified) Rate limit OCSP requests Retries after failed OCSP requests must be ... Thu, 16 Jun 2016 22:49:25 GMT Thomas Klute [78b75b3] * include/mod_gnutls.h.in (modified) * src/gnutls_ocsp.c (modified) * src/mod_gnutls.c (modified) Restore GnuTLSOCSPResponseFile option Using an externally updated ... Thu, 16 Jun 2016 22:47:09 GMT Thomas Klute [4d4a406] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_ocsp.c (modified) * src/gnutls_ocsp.h (modified) * src/mod_gnutls.c (modified) * test/tests/27_OCSP_server/apache.conf (modified) New config option: GnuTLSOCSPStapling This flag option ... Wed, 15 Jun 2016 22:12:50 GMT Thomas Klute [eee1432] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) Bind temporary pool in mgs_load_files() to ptemp scope Pool 'spool' ... Sat, 11 Jun 2016 00:19:20 GMT Thomas Klute [cc74801e] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_ocsp.c (modified) * src/gnutls_ocsp.h (modified) Move generated vhost-wide OCSP config into a private structure Sat, 11 Jun 2016 00:06:49 GMT Thomas Klute [6b89353] * include/mod_gnutls.h.in (modified) Remove Lua bytecode variables from directory config structure The ... Fri, 10 Jun 2016 13:34:08 GMT Thomas Klute [d6834e0] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_ocsp.c (modified) * src/gnutls_ocsp.h (modified) OCSP refresh mutex: Prevent parallel requests Add a global mutex ... Fri, 10 Jun 2016 08:16:48 GMT Thomas Klute [aa68232] * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) * src/gnutls_cache.h (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) Move global cache mutex into the private cache struct Thu, 09 Jun 2016 23:52:23 GMT Thomas Klute [e809fb3] * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) * src/gnutls_cache.h (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_ocsp.c (modified) Use generic cache functions for OCSP response caching With this, ... Thu, 09 Jun 2016 21:08:30 GMT Thomas Klute [70a1e5a] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_ocsp.c (modified) * src/mod_gnutls.c (modified) Introduce OCSP caching grace time A cached OCSP response must be ... Wed, 08 Jun 2016 19:31:29 GMT Thomas Klute [c005645] * doc/mod_gnutls_manual.mdwn (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) * src/gnutls_cache.h (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) Mutex for DBM cache access I noticed that with a DBM cache enabled ... Fri, 03 Jun 2016 22:49:21 GMT Thomas Klute [04e6e65] * include/mod_gnutls.h.in (modified) * src/Makefile.am (modified) * src/gnutls_cache.c (modified) * src/gnutls_cache.h (added) * src/gnutls_hooks.c (modified) Move declarations of cache-related functions to a dedicated header ... Fri, 03 Jun 2016 19:33:46 GMT Thomas Klute [379a297] * include/mod_gnutls.h.in (modified) Remove code used only with GnuTLS 2.x Fri, 03 Jun 2016 19:01:26 GMT Thomas Klute [8913410] * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) * src/gnutls_config.c (modified) * src/gnutls_io.c (modified) * src/mod_gnutls.c (modified) Update copyright headers Fri, 03 Jun 2016 18:31:56 GMT Thomas Klute [c3ad933] * include/mod_gnutls.h.in (modified) * src/gnutls_hooks.c (modified) * src/gnutls_io.c (modified) * src/mod_gnutls.c (modified) Remove stale support code for Apache versions before 2.2 Fri, 03 Jun 2016 14:08:29 GMT Thomas Klute [fd6bb19] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_ocsp.c (modified) * src/gnutls_ocsp.h (modified) Extract OCSP access URI from the server certificate Wed, 01 Jun 2016 16:20:12 GMT Thomas Klute [fad7695] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_ocsp.c (modified) * src/gnutls_ocsp.h (modified) Store OCSP trust list in server config This avoids recreating the ... Tue, 31 May 2016 22:00:31 GMT Thomas Klute [64856fd] * include/mod_gnutls.h.in (modified) * src/gnutls_hooks.c (modified) Get rid of exit(-1) calls in mgs_hook_post_config() This allows the ... Sun, 29 May 2016 22:06:59 GMT Thomas Klute [94cb972] * include/mod_gnutls.h.in (modified) * src/Makefile.am (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_ocsp.c (added) * src/gnutls_ocsp.h (added) * src/mod_gnutls.c (modified) * test/runtests (modified) * test/test-27_OCSP_server.bash (modified) * test/tests/27_OCSP_server/apache.conf (modified) Minimal OCSP stapling implementation using externally provided ... Fri, 18 Sep 2015 23:12:16 GMT Thomas Klute [9ca1f21] * doc/mod_gnutls_manual.mdwn (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) Allow loading more than one PKCS #11 module using GnuTLSP11Module ... Thu, 17 Sep 2015 20:25:07 GMT Thomas Klute [176047e] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/mod_gnutls.c (modified) Use AP_INIT_FLAG for On/Off config directives Letting the Apache ... Mon, 29 Jun 2015 16:12:11 GMT Thomas Klute [e021722] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) Update copyright headers for Nikos Mavrogiannopoulos' PKCS #11 patch ... Sat, 27 Jun 2015 17:09:27 GMT Thomas Klute [e391197] * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_io.c (modified) * src/mod_gnutls.c (modified) Update copyright headers for C source Sat, 09 May 2015 00:40:02 GMT Thomas Klute [87f1ed2] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) Allow loading of an additional PKCS #11 provider library When using ... Tue, 21 Apr 2015 13:08:00 GMT Thomas Klute [4133f2d] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) Unify argument handling in mgs_set_priorities Just store the ... Tue, 21 Apr 2015 12:09:54 GMT Thomas Klute [2cde026d] * README (modified) * docs/mod_gnutls_manual.mdwn (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) Merge branch 'new-gnutls-api' Merge my TLS proxy implementation ... Thu, 09 Apr 2015 17:02:39 GMT Thomas Klute [f030883] * docs/mod_gnutls_manual.mdwn (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) * test/Makefile.am (modified) * test/test-23_TLS_reverse_proxy_mismatched_priorities.bash (added) * test/tests/19_TLS_reverse_proxy/apache.conf (modified) * test/tests/20_TLS_reverse_proxy_client_auth/apache.conf (modified) * test/tests/21_TLS_reverse_proxy_wrong_cert/apache.conf (modified) * test/tests/22_TLS_reverse_proxy_crl_revoke/apache.conf (modified) * test/tests/23_TLS_reverse_proxy_mismatched_priorities/apache.conf (added) * test/tests/23_TLS_reverse_proxy_mismatched_priorities/backend.conf (added) * test/tests/23_TLS_reverse_proxy_mismatched_priorities/gnutls-cli.args (added) * test/tests/23_TLS_reverse_proxy_mismatched_priorities/input (added) * test/tests/23_TLS_reverse_proxy_mismatched_priorities/output (added) Set GnuTLS priorities for proxy connections separately Until now, ... Tue, 07 Apr 2015 16:28:40 GMT Thomas Klute [d04f7da] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) Version guards for gnutls_privkey_import_openpgp_raw workaround The ... Sun, 05 Apr 2015 22:20:59 GMT Thomas Klute [2cde8111] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) Workarounds for OpenPGP key handling Commit ... Sat, 04 Apr 2015 21:03:43 GMT Thomas Klute [c4a015b] * Makefile.am (modified) * README (modified) * configure.ac (modified) * include/mod_gnutls.h.in (modified) * run_tests.sh (deleted) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) * t/newtest (deleted) * test/.gitignore (moved) * test/Makefile.am (added) * test/README (moved) * test/TestMakefile (moved) * test/authority.template.in (moved) * test/authority.uid (moved) * test/base_apache.conf (moved) * test/client.template.in (moved) * test/client.uid (moved) * test/data/dump.cgi (moved) * test/data/secret.txt (moved) * test/data/test.txt (moved) * test/imposter.template (moved) * test/imposter.uid (moved) * test/mime.types (moved) * test/newtest (added) * test/rogueca.template (moved) * test/rogueca.uid (moved) * test/runtests (moved) * test/server.template.in (moved) * test/server.uid.in (moved) * test/setup (moved) * test/test-00_basic.bash (added) * test/test-01_serverwide_priorities.bash (added) * test/test-02_cache_in_vhost.bash (added) * test/test-03_cachetimeout_in_vhost.bash (added) * test/test-04_basic_nosni.bash (added) * test/test-05_mismatched-priorities.bash (added) * test/test-06_verify_sni_a.bash (added) * test/test-07_verify_sni_b.bash (added) * test/test-08_verify_no_sni_fallback_to_first_vhost.bash (added) * test/test-09_verify_no_sni_fails_with_wrong_order.bash (added) * test/test-10_basic_client_verification.bash (added) * test/test-11_basic_client_verification_fail.bash (added) * test/test-12_cgi_variables.bash (added) * test/test-13_cgi_variables_no_client_cert.bash (added) * test/test-14_basic_openpgp.bash (added) * test/test-15_basic_msva.bash (added) * test/test-16_view-status.bash (added) * test/test-17_cgi_vars_large_cert.bash (added) * test/tests/00_basic/apache.conf (moved) * test/tests/00_basic/gnutls-cli.args (moved) * test/tests/00_basic/input (moved) * test/tests/00_basic/output (moved) * test/tests/01_serverwide_priorities/apache.conf (moved) * test/tests/01_serverwide_priorities/gnutls-cli.args (moved) * test/tests/01_serverwide_priorities/input (moved) * test/tests/01_serverwide_priorities/output (moved) * test/tests/02_cache_in_vhost/apache.conf (moved) * test/tests/02_cache_in_vhost/fail.server (moved) * test/tests/02_cache_in_vhost/gnutls-cli.args (moved) * test/tests/02_cache_in_vhost/input (moved) * test/tests/03_cachetimeout_in_vhost/apache.conf (moved) * test/tests/03_cachetimeout_in_vhost/fail.server (moved) * test/tests/03_cachetimeout_in_vhost/gnutls-cli.args (moved) * test/tests/03_cachetimeout_in_vhost/input (moved) * test/tests/04_basic_nosni/apache.conf (moved) * test/tests/04_basic_nosni/gnutls-cli.args (moved) * test/tests/04_basic_nosni/input (moved) * test/tests/04_basic_nosni/output (moved) * test/tests/05_mismatched-priorities/apache.conf (moved) * test/tests/05_mismatched-priorities/fail.client (moved) * test/tests/05_mismatched-priorities/gnutls-cli.args (moved) * test/tests/05_mismatched-priorities/input (moved) * test/tests/06_verify_sni_a/apache.conf (moved) * test/tests/06_verify_sni_a/gnutls-cli.args (moved) * test/tests/06_verify_sni_a/input (moved) * test/tests/06_verify_sni_a/output (moved) * test/tests/07_verify_sni_b/apache.conf (moved) * test/tests/07_verify_sni_b/gnutls-cli.args (moved) * test/tests/07_verify_sni_b/input (moved) * test/tests/07_verify_sni_b/output (moved) * test/tests/08_verify_no_sni_fallback_to_first_vhost/apache.conf (moved) * test/tests/08_verify_no_sni_fallback_to_first_vhost/gnutls-cli.args (moved) * test/tests/08_verify_no_sni_fallback_to_first_vhost/input (moved) * test/tests/08_verify_no_sni_fallback_to_first_vhost/output (moved) * test/tests/09_verify_no_sni_fails_with_wrong_order/apache.conf (moved) * test/tests/09_verify_no_sni_fails_with_wrong_order/fail.client (moved) * test/tests/09_verify_no_sni_fails_with_wrong_order/gnutls-cli.args (moved) * test/tests/09_verify_no_sni_fails_with_wrong_order/input (moved) * test/tests/10_basic_client_verification/apache.conf (moved) * test/tests/10_basic_client_verification/gnutls-cli.args (moved) * test/tests/10_basic_client_verification/input (moved) * test/tests/10_basic_client_verification/output (moved) * test/tests/11_basic_client_verification_fail/apache.conf (moved) * test/tests/11_basic_client_verification_fail/fail.client (moved) * test/tests/11_basic_client_verification_fail/gnutls-cli.args (moved) * test/tests/11_basic_client_verification_fail/input (moved) * test/tests/12_cgi_variables/apache.conf (moved) * test/tests/12_cgi_variables/gnutls-cli.args (moved) * test/tests/12_cgi_variables/input (moved) * test/tests/12_cgi_variables/output (moved) * test/tests/13_cgi_variables_no_client_cert/apache.conf (moved) * test/tests/13_cgi_variables_no_client_cert/gnutls-cli.args (moved) * test/tests/13_cgi_variables_no_client_cert/input (moved) * test/tests/13_cgi_variables_no_client_cert/output (moved) * test/tests/14_basic_openpgp/apache.conf (moved) * test/tests/14_basic_openpgp/gnutls-cli.args (moved) * test/tests/14_basic_openpgp/input (moved) * test/tests/14_basic_openpgp/output (moved) * test/tests/15_basic_msva/apache.conf (moved) * test/tests/15_basic_msva/gnutls-cli.args (moved) * test/tests/15_basic_msva/input (moved) * test/tests/15_basic_msva/output (moved) * test/tests/16_view-status/apache.conf (moved) * test/tests/16_view-status/gnutls-cli.args (moved) * test/tests/16_view-status/input (moved) * test/tests/16_view-status/output (moved) * test/tests/17_cgi_vars_large_cert/apache.conf (moved) * test/tests/17_cgi_vars_large_cert/gnutls-cli.args (moved) * test/tests/17_cgi_vars_large_cert/input (moved) * test/tests/17_cgi_vars_large_cert/output (moved) Merge branch 'split-testsuite' into new-gnutls-api OpenPGP support ... Fri, 03 Apr 2015 00:48:19 GMT Thomas Klute [809c422] * docs/mod_gnutls_manual.mdwn (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) TLS proxy: Add support for CRLs to back end server verification ... Thu, 02 Apr 2015 23:51:48 GMT Thomas Klute [bd24203] * include/mod_gnutls.h.in (modified) * src/gnutls_hooks.c (modified) Explicitly build trust list for proxy connections This change ... Thu, 19 Mar 2015 12:27:45 GMT Thomas Klute [0de1839] * README (modified) * configure.ac (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) Support X.509 auth for TLS proxy connections This commit adds ... Wed, 18 Feb 2015 11:33:37 GMT Thomas Klute [7314438] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) Fix whitespace problems detected by git Tue, 27 Jan 2015 12:20:27 GMT Thomas Klute [beb14d9] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_io.c (modified) Proof of concept: Support for proxy back end connections using TLS ... Tue, 27 Jan 2015 10:48:53 GMT Thomas Klute [c1ef069] * include/mod_gnutls.h.in (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) Record if a connection is a proxy connection When handling a proxy ... Tue, 20 Jan 2015 15:45:39 GMT Thomas Klute [e8acf05] * include/mod_gnutls.h.in (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) Enable/disable TLS per connection in ssl_engine_disable Previously, ... Thu, 03 Jul 2014 17:00:29 GMT Nikos Mavrogiannopoulos [031acac] * README (modified) * configure.ac (modified) * docs/mod_gnutls_manual.mdwn (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) Use the new (3.1.3+) GnuTLS APIs to obtain private keys. This ... Sun, 23 Feb 2014 18:05:31 GMT Daniel Kahn Gillmor [2aaf4f5] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) implement GnuTLSExportCertificates control over max exported cert ... Tue, 03 Dec 2013 23:49:15 GMT Daniel Kahn Gillmor [671b64f] * include/mod_gnutls.h.in (modified) * src/Makefile.am (modified) * src/gnutls_cache.c (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_io.c (modified) * src/mod_gnutls.c (modified) remove all trailing whitespace Sat, 16 Nov 2013 07:46:50 GMT Daniel Kahn Gillmor [cf2b905] * docs/manual.mdwn (added) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) MSVA: document and parse GnuTLSClientVerifyMethod directive The ... Wed, 30 Jan 2013 01:05:42 GMT Daniel Kahn Gillmor [7d1ab49] * docs/mod_gnutls_manual-0.1.html (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) restore GnuTLSExportCertificate directive It looks to me like this ... Wed, 30 Jan 2013 01:05:42 GMT Daniel Kahn Gillmor [25e6b32] * include/mod_gnutls.h.in (modified) remove obsolete mgs_handle_t.rsa_params -- RSA-EXPORT is not ... Wed, 30 Jan 2013 01:05:42 GMT Daniel Kahn Gillmor [032ff02] * include/mod_gnutls.h.in (modified) parameterize mod_gnutls.h.in so that MOD_GNUTLS_VERSION and ... Wed, 30 Jan 2013 01:05:42 GMT Daniel Kahn Gillmor [040387c] * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) server-wide settings should be defaults unless overridden in a vhost ... Tue, 29 Jan 2013 20:41:38 GMT Daniel Kahn Gillmor [dab7a25] * docs/mod_gnutls_manual-0.1.html (modified) * include/mod_gnutls.h.in (modified) rip out remaining references to obsolete "export" encryption Tue, 29 Jan 2013 20:41:38 GMT Daniel Kahn Gillmor [3596d6a] * include/mod_gnutls.h.in (modified) enable building against gnutls 3.x, which does not have Fri, 21 Dec 2012 04:29:16 GMT Dash Shendy [3b4c0d0] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * Added Comments to Header Structures * Refactored the following: ... Wed, 14 Nov 2012 21:00:07 GMT Dash Shendy [9ddaa29] * include/mod_gnutls.h.in (modified) Added missing header for string matching function ap_fnmatch() Sun, 11 Nov 2012 02:06:32 GMT Dash Shendy [9ee0464] * include/mod_gnutls.h.in (modified) * src/gnutls_hooks.c (modified) * src/gnutls_io.c (modified) Compilation Errors Cleanup Signed-off-by: Dash Shendy ... Wed, 07 Dec 2011 05:22:48 GMT Dash Shendy [37f8282] * include/mod_gnutls.h.in (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) mod_proxy support continued Signed-off-by: Dash Shendy ... Tue, 04 Oct 2011 11:01:32 GMT Dash Shendy [33826c5] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_io.c (modified) * src/mod_gnutls.c (modified) mod_proxy support Mon, 26 Sep 2011 01:25:20 GMT Dash Shendy [fb26be5] * include/mod_gnutls.h.in (modified) Declation of apr_signal_block(int signum) Tue, 20 Sep 2011 05:28:25 GMT Dash Shendy [7c05ed1] * include/mod_gnutls.h.in (modified) * src/mod_gnutls.c (modified) Fix Compilation Warnings Tue, 20 Sep 2011 05:17:20 GMT Dash Shendy [ec9daf2] * configure.ac (modified) * include/mod_gnutls.h.in (modified) Reverted ENABLE_SRP define (was correct!) Tue, 20 Sep 2011 04:46:28 GMT Dash Shendy [c70c6d7] * configure.ac (modified) * include/mod_gnutls.h.in (modified) #defined missing ENABLE_SRP Tue, 20 Sep 2011 04:32:33 GMT Dash Shendy [16a6853] * include/mod_gnutls.h.in (modified) Re-Arranged USING_2_1_RECENT define Tue, 20 Sep 2011 04:31:02 GMT Dash Shendy [c7c2ad2] * include/mod_gnutls.h.in (modified) Removed reference to mgs_authz_lua() Tue, 20 Sep 2011 02:25:46 GMT Dash Shendy [485d28e] * Makefile.am (modified) * include/mod_gnutls.h.in (modified) * src/Makefile.am (modified) * src/gnutls_cache.c (modified) * src/gnutls_io.c (modified) * src/gnutls_lua.c (deleted) Major Legacy Code Cleanup Fri, 08 Jul 2011 21:30:33 GMT Dash Shendy [8fffed1] * include/mod_gnutls.h.in (modified) * src/gnutls_io.c (modified) Compilation Fixups Signed-off-by: Dash Shendy Fri, 24 Sep 2010 06:51:52 GMT Nikos Mavrogiannopoulos [d8c7cf4] * NEWS (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) * src/gnutls_config.c (modified) Only allow two options for DB. Berkeley DB and gdbm. The other ... Thu, 23 Sep 2010 07:35:27 GMT Nikos Mavrogiannopoulos [771ca63] * NEWS (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) * src/gnutls_config.c (modified) The GnuTLSCache variable now can be given the specific option "sdbm" ... Thu, 01 Jul 2010 01:09:56 GMT Nikos Mavrogiannopoulos [ae233c2] * NEWS (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) Added option to turn on/off session tickets. Wed, 30 Jun 2010 19:28:55 GMT Nikos Mavrogiannopoulos [f10ab4f] * include/mod_gnutls.h.in (modified) Added missing var. Wed, 30 Jun 2010 18:16:35 GMT Nikos Mavrogiannopoulos [0499540] * include/mod_gnutls.h.in (modified) * src/gnutls_hooks.c (modified) Use libgcrypt calls only if gnutls is older than 2.11.0 Tue, 30 Jun 2009 17:12:19 GMT Nokis Mavrogiannopoulos [7e67487] * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) Applied patch to allow building with Apache 2.4. Patch by Arfrever ... Sat, 24 Jan 2009 17:47:18 GMT Nokis Mavrogiannopoulos [8663ace] * NEWS (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) removed limit on ca certificates' number Sun, 19 Oct 2008 07:13:58 GMT Nokis Mavrogiannopoulos [6d4de37] * NEWS (modified) * include/mod_gnutls.h.in (modified) modified definition to extern to avoid compilation errors in darwin. Sat, 15 Dec 2007 13:26:01 GMT Nokis Mavrogiannopoulos [e5bbda4] * NEWS (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) Initial support for openpgp keys Sat, 08 Dec 2007 16:07:12 GMT Nokis Mavrogiannopoulos [5e81262] * NEWS (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) Added support for sending more than one certificate.