# # ChangeLog for src/gnutls_config.c in mod_gnutls # # Generated by Trac 1.2 # Jan 15, 2021, 10:09:23 AM Wed, 08 Jun 2016 19:31:29 GMT Thomas Klute [c005645] * doc/mod_gnutls_manual.mdwn (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) * src/gnutls_cache.h (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) Mutex for DBM cache access I noticed that with a DBM cache enabled ... Fri, 03 Jun 2016 19:01:26 GMT Thomas Klute [8913410] * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) * src/gnutls_config.c (modified) * src/gnutls_io.c (modified) * src/mod_gnutls.c (modified) Update copyright headers Fri, 03 Jun 2016 14:08:29 GMT Thomas Klute [fd6bb19] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_ocsp.c (modified) * src/gnutls_ocsp.h (modified) Extract OCSP access URI from the server certificate Wed, 01 Jun 2016 16:20:12 GMT Thomas Klute [fad7695] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_ocsp.c (modified) * src/gnutls_ocsp.h (modified) Store OCSP trust list in server config This avoids recreating the ... Sun, 29 May 2016 22:06:59 GMT Thomas Klute [94cb972] * include/mod_gnutls.h.in (modified) * src/Makefile.am (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_ocsp.c (added) * src/gnutls_ocsp.h (added) * src/mod_gnutls.c (modified) * test/runtests (modified) * test/test-27_OCSP_server.bash (modified) * test/tests/27_OCSP_server/apache.conf (modified) Minimal OCSP stapling implementation using externally provided ... Fri, 18 Sep 2015 23:12:16 GMT Thomas Klute [9ca1f21] * doc/mod_gnutls_manual.mdwn (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) Allow loading more than one PKCS #11 module using GnuTLSP11Module ... Thu, 17 Sep 2015 20:25:07 GMT Thomas Klute [176047e] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/mod_gnutls.c (modified) Use AP_INIT_FLAG for On/Off config directives Letting the Apache ... Thu, 17 Sep 2015 19:48:54 GMT Thomas Klute [7764015] * doc/mod_gnutls_manual.mdwn (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) Update GnuTLSP11Module documentation for stricter semantics Mon, 29 Jun 2015 16:12:11 GMT Thomas Klute [e021722] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) Update copyright headers for Nikos Mavrogiannopoulos' PKCS #11 patch ... Sat, 27 Jun 2015 17:09:27 GMT Thomas Klute [e391197] * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_io.c (modified) * src/mod_gnutls.c (modified) Update copyright headers for C source Wed, 03 Jun 2015 05:48:15 GMT Thomas Klute [a2e3c33] * doc/mod_gnutls_manual.mdwn (modified) * src/gnutls_config.c (modified) * src/mod_gnutls.c (modified) * test/tests/19_TLS_reverse_proxy/apache.conf (modified) * test/tests/20_TLS_reverse_proxy_client_auth/apache.conf (modified) * test/tests/21_TLS_reverse_proxy_wrong_cert/apache.conf (modified) * test/tests/22_TLS_reverse_proxy_crl_revoke/apache.conf (modified) * test/tests/23_TLS_reverse_proxy_mismatched_priorities/apache.conf (modified) Rename option SSLProxyEngine to GnuTLSProxyEngine This matches the ... Sat, 09 May 2015 00:40:02 GMT Thomas Klute [87f1ed2] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) Allow loading of an additional PKCS #11 provider library When using ... Tue, 21 Apr 2015 13:08:00 GMT Thomas Klute [4133f2d] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) Unify argument handling in mgs_set_priorities Just store the ... Tue, 21 Apr 2015 12:09:54 GMT Thomas Klute [2cde026d] * README (modified) * docs/mod_gnutls_manual.mdwn (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) Merge branch 'new-gnutls-api' Merge my TLS proxy implementation ... Thu, 09 Apr 2015 17:02:39 GMT Thomas Klute [f030883] * docs/mod_gnutls_manual.mdwn (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) * test/Makefile.am (modified) * test/test-23_TLS_reverse_proxy_mismatched_priorities.bash (added) * test/tests/19_TLS_reverse_proxy/apache.conf (modified) * test/tests/20_TLS_reverse_proxy_client_auth/apache.conf (modified) * test/tests/21_TLS_reverse_proxy_wrong_cert/apache.conf (modified) * test/tests/22_TLS_reverse_proxy_crl_revoke/apache.conf (modified) * test/tests/23_TLS_reverse_proxy_mismatched_priorities/apache.conf (added) * test/tests/23_TLS_reverse_proxy_mismatched_priorities/backend.conf (added) * test/tests/23_TLS_reverse_proxy_mismatched_priorities/gnutls-cli.args (added) * test/tests/23_TLS_reverse_proxy_mismatched_priorities/input (added) * test/tests/23_TLS_reverse_proxy_mismatched_priorities/output (added) Set GnuTLS priorities for proxy connections separately Until now, ... Tue, 07 Apr 2015 16:28:40 GMT Thomas Klute [d04f7da] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) Version guards for gnutls_privkey_import_openpgp_raw workaround The ... Sun, 05 Apr 2015 22:20:59 GMT Thomas Klute [2cde8111] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) Workarounds for OpenPGP key handling Commit ... Sat, 04 Apr 2015 20:57:10 GMT Thomas Klute [259e835] * configure.ac (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_io.c (modified) * src/mod_gnutls.c (modified) * t/Makefile (modified) * t/setup (modified) Merge branch 'master' into new-gnutls-api Branch 'master' at this ... Sat, 04 Apr 2015 20:44:24 GMT Thomas Klute [1d9cfaf] * src/gnutls_config.c (modified) gnutls_config.c: Backport function signature changes from master ... Fri, 03 Apr 2015 00:48:19 GMT Thomas Klute [809c422] * docs/mod_gnutls_manual.mdwn (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) TLS proxy: Add support for CRLs to back end server verification ... Thu, 19 Mar 2015 12:27:45 GMT Thomas Klute [0de1839] * README (modified) * configure.ac (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) Support X.509 auth for TLS proxy connections This commit adds ... Wed, 18 Feb 2015 11:33:37 GMT Thomas Klute [7314438] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) Fix whitespace problems detected by git Tue, 27 Jan 2015 12:20:27 GMT Thomas Klute [beb14d9] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_io.c (modified) Proof of concept: Support for proxy back end connections using TLS ... Thu, 03 Jul 2014 17:00:29 GMT Nikos Mavrogiannopoulos [031acac] * README (modified) * configure.ac (modified) * docs/mod_gnutls_manual.mdwn (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) Use the new (3.1.3+) GnuTLS APIs to obtain private keys. This ... Thu, 27 Feb 2014 07:26:26 GMT Daniel Kahn Gillmor [fd82e59] * configure.ac (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_io.c (modified) * src/mod_gnutls.c (modified) use strict compiler arguments by default (-Wall -Werror -Wextra) ... Sun, 23 Feb 2014 18:05:31 GMT Daniel Kahn Gillmor [2aaf4f5] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) implement GnuTLSExportCertificates control over max exported cert ... Thu, 20 Feb 2014 16:16:22 GMT Daniel Kahn Gillmor [55dc3f0] * src/gnutls_cache.c (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_io.c (modified) Make Apache 2.4 display the correct module in error logs Tue, 03 Dec 2013 23:49:15 GMT Daniel Kahn Gillmor [671b64f] * include/mod_gnutls.h.in (modified) * src/Makefile.am (modified) * src/gnutls_cache.c (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_io.c (modified) * src/mod_gnutls.c (modified) remove all trailing whitespace Sat, 16 Nov 2013 07:46:50 GMT Daniel Kahn Gillmor [cf2b905] * docs/manual.mdwn (added) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) MSVA: document and parse GnuTLSClientVerifyMethod directive The ... Wed, 30 Jan 2013 01:05:42 GMT Daniel Kahn Gillmor [7d1ab49] * docs/mod_gnutls_manual-0.1.html (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) restore GnuTLSExportCertificate directive It looks to me like this ... Wed, 30 Jan 2013 01:05:42 GMT Daniel Kahn Gillmor [929d313] * src/gnutls_config.c (modified) avoid use-after-free in mgs_set_key_file() Wed, 30 Jan 2013 01:05:42 GMT Daniel Kahn Gillmor [480aba1] * docs/mod_gnutls_manual-0.1.html (modified) * src/gnutls_config.c (modified) correct context terminology for GnuTLSCache configurations "global ... Wed, 30 Jan 2013 01:05:42 GMT Daniel Kahn Gillmor [040387c] * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) server-wide settings should be defaults unless overridden in a vhost ... Tue, 29 Jan 2013 20:41:38 GMT Daniel Kahn Gillmor [8400c2e] * docs/mod_gnutls_manual-0.1.html (modified) * src/gnutls_config.c (modified) properly document the GnuTLSCache directive Fri, 21 Dec 2012 04:29:16 GMT Dash Shendy [3b4c0d0] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * Added Comments to Header Structures * Refactored the following: ... Tue, 04 Oct 2011 11:01:32 GMT Dash Shendy [33826c5] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_io.c (modified) * src/mod_gnutls.c (modified) mod_proxy support Tue, 20 Sep 2011 03:58:43 GMT Dash Shendy [e183628] * src/gnutls_cache.c (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_io.c (modified) * src/mod_gnutls.c (modified) Updated Copyright Headers & Formatting Tue, 20 Sep 2011 03:38:39 GMT Dash Shendy [443b18e] * src/gnutls_config.c (modified) Remove Legacy LUA Code Tue, 16 Nov 2010 14:05:30 GMT Nikos Mavrogiannopoulos [b59327c] * NEWS (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) GnuTLSCache can now take a single argument (none). Mon, 25 Oct 2010 19:21:04 GMT Nikos Mavrogiannopoulos [e02dd8c] * src/gnutls_cache.c (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_io.c (modified) * src/gnutls_lua.c (modified) * src/mod_gnutls.c (modified) indented code Fri, 24 Sep 2010 06:51:52 GMT Nikos Mavrogiannopoulos [d8c7cf4] * NEWS (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) * src/gnutls_config.c (modified) Only allow two options for DB. Berkeley DB and gdbm. The other ... Thu, 23 Sep 2010 07:35:27 GMT Nikos Mavrogiannopoulos [771ca63] * NEWS (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) * src/gnutls_config.c (modified) The GnuTLSCache variable now can be given the specific option "sdbm" ... Fri, 02 Jul 2010 13:04:15 GMT Nikos Mavrogiannopoulos [bca274d] * NEWS (modified) * src/gnutls_config.c (modified) Session tickets are enabled by default. Thu, 01 Jul 2010 01:09:56 GMT Nikos Mavrogiannopoulos [ae233c2] * NEWS (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) Added option to turn on/off session tickets. Thu, 01 Jul 2010 00:47:51 GMT Nikos Mavrogiannopoulos [03a9a6b] * NEWS (modified) * src/gnutls_cache.c (modified) * src/gnutls_config.c (modified) Force SDBM. Thu, 21 May 2009 18:48:34 GMT Nokis Mavrogiannopoulos [7ef38d4] * src/gnutls_config.c (modified) if private key import fails try as pkcs8 key. Sat, 24 Jan 2009 17:47:18 GMT Nokis Mavrogiannopoulos [8663ace] * NEWS (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) removed limit on ca certificates' number Wed, 20 Feb 2008 19:50:09 GMT Nokis Mavrogiannopoulos [787dab7] * configure.ac (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) added option to disable srp (for distributions that disable it in gnutls) Sun, 16 Dec 2007 09:04:11 GMT Nokis Mavrogiannopoulos [2b3a248b] * README (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) more changes for openpgp support. Seems to be at a workable state. Sat, 15 Dec 2007 13:26:01 GMT Nokis Mavrogiannopoulos [e5bbda4] * NEWS (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) Initial support for openpgp keys Sat, 08 Dec 2007 16:07:12 GMT Nokis Mavrogiannopoulos [5e81262] * NEWS (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) Added support for sending more than one certificate. Mon, 03 Dec 2007 21:09:43 GMT Nokis Mavrogiannopoulos [b077bdd] * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) added more error checks. Mon, 03 Dec 2007 18:26:23 GMT Nokis Mavrogiannopoulos [a3c97d1] * NEWS (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) better handling of RSAFile and DHFile Sun, 02 Dec 2007 23:12:23 GMT Nokis Mavrogiannopoulos [e239d1a] * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) No more defaults for dhparams, rsaparams. Check for GnuTLSPriorities. Sat, 01 Dec 2007 09:12:01 GMT Nokis Mavrogiannopoulos [fd73a08] * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) Added support for subject alternative names. (untested) Wed, 28 Nov 2007 18:29:21 GMT Nokis Mavrogiannopoulos [7bebb42] * Makefile.am (modified) * README (modified) * autogen.sh (modified) * configure.ac (modified) * include/mod_gnutls.h.in (modified) * src/Makefile.am (modified) * src/gnutls_cache.c (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_io.c (modified) * src/mod_gnutls.c (modified) upgraded to 0.4.0 Tue, 24 May 2005 17:55:17 GMT Paul Querna [836c2f9] * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) start the CA Certificate code. Tue, 17 May 2005 21:00:53 GMT Paul Querna [84cb5b2] * Makefile.am (modified) * configure.ac (modified) * include/mod_gnutls.h.in (modified) * mod_gnutls.xcode/project.pbxproj (modified) * src/Makefile.am (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_lua.c (added) * src/mod_gnutls.c (modified) - add lua to do client verification - only use gcrypt locking when ... Sun, 24 Apr 2005 22:21:50 GMT Paul Querna [c301152] * include/mod_gnutls.h.in (modified) * mod_gnutls.xcode/project.pbxproj (modified) * src/Makefile.am (modified) * src/gnutls_cache.c (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (added) * src/gnutls_io.c (modified) * src/mod_gnutls.c (modified) - move hooks to gnutls_hooks.c - use 'mgs_' as the prefix for all ... Sun, 24 Apr 2005 22:01:46 GMT Paul Querna [46b85d8] * include/mod_gnutls.h.in (modified) * mod_gnutls.xcode/project.pbxproj (modified) * src/Makefile.am (modified) * src/gnutls_cache.c (modified) * src/gnutls_config.c (added) * src/mod_gnutls.c (modified) move config functions to their own file.