|
|
@c6dda6d
|
6 years |
thomas2.klute |
Rate limit OCSP requests
Retries after failed OCSP requests must be …
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@78b75b3
|
7 years |
thomas2.klute |
Restore GnuTLSOCSPResponseFile option
Using an externally updated …
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@4d4a406
|
7 years |
thomas2.klute |
New config option: GnuTLSOCSPStapling
This flag option …
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@eee1432
|
7 years |
thomas2.klute |
Bind temporary pool in mgs_load_files() to ptemp scope
Pool 'spool' …
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@cc74801e
|
7 years |
thomas2.klute |
Move generated vhost-wide OCSP config into a private structure
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@6b89353
|
7 years |
thomas2.klute |
Remove Lua bytecode variables from directory config structure
The …
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@d6834e0
|
7 years |
thomas2.klute |
OCSP refresh mutex: Prevent parallel requests
Add a global mutex …
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@aa68232
|
7 years |
thomas2.klute |
Move global cache mutex into the private cache struct
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@e809fb30
|
7 years |
thomas2.klute |
Use generic cache functions for OCSP response caching
With this, OCSP …
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@70a1e5a
|
7 years |
thomas2.klute |
Introduce OCSP caching grace time
A cached OCSP response must be …
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@c005645
|
7 years |
thomas2.klute |
Mutex for DBM cache access
I noticed that with a DBM cache enabled …
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@04e6e65
|
7 years |
thomas2.klute |
Move declarations of cache-related functions to a dedicated header
…
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@379a297
|
7 years |
thomas2.klute |
Remove code used only with GnuTLS 2.x
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@8913410
|
7 years |
thomas2.klute |
Update copyright headers
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@c3ad933
|
7 years |
thomas2.klute |
Remove stale support code for Apache versions before 2.2
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@fd6bb19
|
7 years |
thomas2.klute |
Extract OCSP access URI from the server certificate
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@fad7695
|
7 years |
thomas2.klute |
Store OCSP trust list in server config
This avoids recreating the …
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@64856fd
|
7 years |
thomas2.klute |
Get rid of exit(-1) calls in mgs_hook_post_config()
This allows the …
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@94cb972
|
7 years |
thomas2.klute |
Minimal OCSP stapling implementation using externally provided …
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@9ca1f21
|
8 years |
thomas2.klute |
Allow loading more than one PKCS #11 module using GnuTLSP11Module
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@176047e
|
8 years |
thomas2.klute |
Use AP_INIT_FLAG for On/Off? config directives
Letting the Apache …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@e021722
|
8 years |
thomas2.klute |
Update copyright headers for Nikos Mavrogiannopoulos' PKCS #11 patch
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@e391197
|
8 years |
thomas2.klute |
Update copyright headers for C source
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@87f1ed2
|
8 years |
thomas2.klute |
Allow loading of an additional PKCS #11 provider library
When using …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@4133f2d
|
8 years |
thomas2.klute |
Unify argument handling in mgs_set_priorities
Just store the argument …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@2cde026d
|
8 years |
thomas2.klute |
Merge branch 'new-gnutls-api'
Merge my TLS proxy implementation with …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@f030883
|
8 years |
thomas2.klute |
Set GnuTLS priorities for proxy connections separately
Until now, …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@d04f7da
|
8 years |
thomas2.klute |
Version guards for gnutls_privkey_import_openpgp_raw workaround
The …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@2cde8111
|
8 years |
thomas2.klute |
Workarounds for OpenPGP key handling
Commit …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@c4a015b
|
8 years |
thomas2.klute |
Merge branch 'split-testsuite' into new-gnutls-api
OpenPGP support is …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@809c422
|
8 years |
thomas2.klute |
TLS proxy: Add support for CRLs to back end server verification
When …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@bd24203
|
8 years |
thomas2.klute |
Explicitly build trust list for proxy connections
This change …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@0de1839
|
8 years |
thomas2.klute |
Support X.509 auth for TLS proxy connections
This commit adds support …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@7314438
|
8 years |
thomas2.klute |
Fix whitespace problems detected by git
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@beb14d9
|
8 years |
thomas2.klute |
Proof of concept: Support for proxy back end connections using TLS
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@c1ef069
|
8 years |
thomas2.klute |
Record if a connection is a proxy connection
When handling a proxy …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@e8acf05
|
8 years |
thomas2.klute |
Enable/disable TLS per connection in ssl_engine_disable
Previously, …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@031acac
|
9 years |
nmav |
Use the new (3.1.3+) GnuTLS APIs to obtain private keys.
This allows …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@2aaf4f5
|
9 years |
dkg |
implement GnuTLSExportCertificates control over max exported cert size …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@671b64f
|
9 years |
dkg |
remove all trailing whitespace
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@cf2b905
|
9 years |
dkg |
MSVA: document and parse GnuTLSClientVerifyMethod directive
The …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@7d1ab49
|
10 years |
dkg |
restore GnuTLSExportCertificate directive
It looks to me like this …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@25e6b32
|
10 years |
dkg |
remove obsolete mgs_handle_t.rsa_params -- RSA-EXPORT is not supported …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@032ff02
|
10 years |
dkg |
parameterize mod_gnutls.h.in so that MOD_GNUTLS_VERSION and …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@040387c
|
10 years |
dkg |
server-wide settings should be defaults unless overridden in a vhost
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@dab7a25
|
10 years |
dkg |
rip out remaining references to obsolete "export" encryption
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@3596d6a
|
10 years |
dkg |
enable building against gnutls 3.x, which does not have <gnutls/extra.h>
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@3b4c0d0
|
10 years |
neuromancer |
* Added Comments to Header Structures
* Refactored the following: …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@9ddaa29
|
10 years |
neuromancer |
Added missing header for string matching function ap_fnmatch()
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@9ee0464
|
10 years |
neuromancer |
Compilation Errors Cleanup
Signed-off-by: Dash Shendy …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@37f8282
|
11 years |
neuromancer |
mod_proxy support continued
Signed-off-by: Dash Shendy …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@33826c5
|
11 years |
neuromancer |
mod_proxy support
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@fb26be5
|
11 years |
neuromancer |
Declation of apr_signal_block(int signum)
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@7c05ed1
|
12 years |
neuromancer |
Fix Compilation Warnings
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@ec9daf2
|
12 years |
neuromancer |
Reverted ENABLE_SRP define (was correct!)
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@c70c6d7
|
12 years |
neuromancer |
#defined missing ENABLE_SRP
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@16a6853
|
12 years |
neuromancer |
Re-Arranged USING_2_1_RECENT define
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@c7c2ad2
|
12 years |
neuromancer |
Removed reference to mgs_authz_lua()
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@485d28e
|
12 years |
neuromancer |
Major Legacy Code Cleanup
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@8fffed1
|
12 years |
neuromancer |
Compilation Fixups
Signed-off-by: Dash Shendy <neuromancer@…>
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@d8c7cf4
|
13 years |
nmav |
Only allow two options for DB. Berkeley DB and gdbm. The other options …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@771ca63
|
13 years |
nmav |
The GnuTLSCache variable now can be given the specific
option "sdbm" …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@ae233c2
|
13 years |
nmav |
Added option to turn on/off session tickets.
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@f10ab4f
|
13 years |
nmav |
Added missing var.
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@0499540
|
13 years |
nmav |
Use libgcrypt calls only if gnutls is older than 2.11.0
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@7e67487
|
14 years |
nmav |
Applied patch to allow building with Apache 2.4. Patch by Arfrever …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@8663ace
|
14 years |
nmav |
removed limit on ca certificates' number
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@6d4de37
|
14 years |
nmav |
modified definition to extern to avoid compilation errors in darwin.
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@e5bbda4
|
15 years |
nmav |
Initial support for openpgp keys
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@5e81262
|
15 years |
nmav |
Added support for sending more than one certificate.
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@a3c97d1
|
15 years |
nmav |
better handling of RSAFile and DHFile
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@7bebb42
|
15 years |
nmav |
upgraded to 0.4.0
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@84cb5b2
|
18 years |
chip |
- add lua to do client verification
- only use gcrypt locking when …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@836417f
|
18 years |
chip |
Refactor finding the correct server record to fix resumed sessions.
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@c301152
|
18 years |
chip |
- move hooks to gnutls_hooks.c
- use 'mgs_' as the prefix for all …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@46b85d8
|
18 years |
chip |
move config functions to their own file.
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@e924ddd
|
18 years |
chip |
client auth is sort of working.
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@31645b2
|
18 years |
chip |
working SNI. Not so working Client Cert support.
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@482f47f
|
18 years |
chip |
include support for 2.0.xx
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@5a6446d
|
18 years |
chip |
wrap the debug log in maintainer mode.
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@42307a9
|
18 years |
chip |
- remove anno creds
- initial attempt at Server Name Extension
- …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@fcb122d
|
18 years |
chip |
checkpoint the work so far. The DBM cache needs a little more work.
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@6e0bfd6
|
18 years |
chip |
- make memcahe optional
- update for 2.1.x branch changes.
- some …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@7bd1f6a
|
18 years |
chip |
make this a generated file
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@05d56ce
|
18 years |
chip |
updated header.
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@a66e147
|
18 years |
chip |
working support for a ssl session cache via memcached.
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@76bd3bf
|
18 years |
chip |
add check for apr_memcache
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@0b3bc05
|
18 years |
chip |
setting proper ignores.
adding an empty cache files
trying to fix …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@dae0aec
|
18 years |
chip |
input and output filters
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@2e12226
|
18 years |
chip |
rename structures.
properly prefix all non-static functions with …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|
|
|
@7e2b223
|
18 years |
chip |
break up the IO functions into their own file
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainmsvaproxy-ticketupstream
|