|
|
|
@70a1e5a
|
4 years |
thomas2.klute |
Introduce OCSP caching grace time
A cached OCSP response must be …
debian/masterdebian/stretch-backportsproxy-ticketupstream
|
|
|
|
@c005645
|
4 years |
thomas2.klute |
Mutex for DBM cache access
I noticed that with a DBM cache enabled …
debian/masterdebian/stretch-backportsproxy-ticketupstream
|
|
|
|
@8913410
|
4 years |
thomas2.klute |
Update copyright headers
debian/masterdebian/stretch-backportsproxy-ticketupstream
|
|
|
|
@fd6bb19
|
4 years |
thomas2.klute |
Extract OCSP access URI from the server certificate
debian/masterdebian/stretch-backportsproxy-ticketupstream
|
|
|
|
@fad7695
|
4 years |
thomas2.klute |
Store OCSP trust list in server config
This avoids recreating the …
debian/masterdebian/stretch-backportsproxy-ticketupstream
|
|
|
|
@94cb972
|
4 years |
thomas2.klute |
Minimal OCSP stapling implementation using externally provided …
debian/masterdebian/stretch-backportsproxy-ticketupstream
|
|
|
|
@9ca1f21
|
5 years |
thomas2.klute |
Allow loading more than one PKCS #11 module using GnuTLSP11Module
…
debian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
|
@176047e
|
5 years |
thomas2.klute |
Use AP_INIT_FLAG for On/Off? config directives
Letting the Apache …
debian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
|
@7764015
|
5 years |
thomas2.klute |
Update GnuTLSP11Module documentation for stricter semantics
debian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
|
@e021722
|
5 years |
thomas2.klute |
Update copyright headers for Nikos Mavrogiannopoulos' PKCS #11 patch
…
debian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
|
@e391197
|
5 years |
thomas2.klute |
Update copyright headers for C source
debian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
|
@a2e3c33
|
5 years |
thomas2.klute |
Rename option SSLProxyEngine to GnuTLSProxyEngine
This matches the …
debian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
|
@87f1ed2
|
5 years |
thomas2.klute |
Allow loading of an additional PKCS #11 provider library
When using …
debian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
|
@4133f2d
|
5 years |
thomas2.klute |
Unify argument handling in mgs_set_priorities
Just store the argument …
debian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
|
@2cde026d
|
5 years |
thomas2.klute |
Merge branch 'new-gnutls-api'
Merge my TLS proxy implementation with …
debian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
|
@f030883
|
5 years |
thomas2.klute |
Set GnuTLS priorities for proxy connections separately
Until now, …
debian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
|
@d04f7da
|
5 years |
thomas2.klute |
Version guards for gnutls_privkey_import_openpgp_raw workaround
The …
debian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
|
@2cde8111
|
5 years |
thomas2.klute |
Workarounds for OpenPGP key handling
Commit …
debian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
|
@259e835
|
5 years |
thomas2.klute |
Merge branch 'master' into new-gnutls-api
Branch 'master' at this …
debian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
|
@1d9cfaf
|
5 years |
thomas2.klute |
gnutls_config.c: Backport function signature changes from master
…
debian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
|
@809c422
|
5 years |
thomas2.klute |
TLS proxy: Add support for CRLs to back end server verification
When …
debian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
|
@0de1839
|
6 years |
thomas2.klute |
Support X.509 auth for TLS proxy connections
This commit adds support …
debian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
|
@7314438
|
6 years |
thomas2.klute |
Fix whitespace problems detected by git
debian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
|
@beb14d9
|
6 years |
thomas2.klute |
Proof of concept: Support for proxy back end connections using TLS
…
debian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
|
@031acac
|
6 years |
nmav |
Use the new (3.1.3+) GnuTLS APIs to obtain private keys.
This allows …
debian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
|
@fd82e59
|
7 years |
dkg |
use strict compiler arguments by default (-Wall -Werror -Wextra)
…
debian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
|
@2aaf4f5
|
7 years |
dkg |
implement GnuTLSExportCertificates control over max exported cert size …
debian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
|
@55dc3f0
|
7 years |
dkg |
Make Apache 2.4 display the correct module in error logs
debian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
|
@671b64f
|
7 years |
dkg |
remove all trailing whitespace
debian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
|
@cf2b905
|
7 years |
dkg |
MSVA: document and parse GnuTLSClientVerifyMethod directive
The …
debian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
|
@7d1ab49
|
8 years |
dkg |
restore GnuTLSExportCertificate directive
It looks to me like this …
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@929d313
|
8 years |
dkg |
avoid use-after-free in mgs_set_key_file()
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@480aba1
|
8 years |
dkg |
correct context terminology for GnuTLSCache configurations
"global …
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@040387c
|
8 years |
dkg |
server-wide settings should be defaults unless overridden in a vhost
…
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@8400c2e
|
8 years |
dkg |
properly document the GnuTLSCache directive
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@3b4c0d0
|
8 years |
neuromancer |
* Added Comments to Header Structures
* Refactored the following: …
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@33826c5
|
9 years |
neuromancer |
mod_proxy support
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@e183628
|
9 years |
neuromancer |
Updated Copyright Headers & Formatting
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@443b18e
|
9 years |
neuromancer |
Remove Legacy LUA Code
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@b59327c
|
10 years |
nmav |
GnuTLSCache can now take a single argument (none).
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@e02dd8c
|
10 years |
nmav |
indented code
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@d8c7cf4
|
10 years |
nmav |
Only allow two options for DB. Berkeley DB and gdbm. The other options …
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@771ca63
|
10 years |
nmav |
The GnuTLSCache variable now can be given the specific
option "sdbm" …
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@bca274d
|
10 years |
nmav |
Session tickets are enabled by default.
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@ae233c2
|
10 years |
nmav |
Added option to turn on/off session tickets.
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@03a9a6b
|
10 years |
nmav |
Force SDBM.
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@7ef38d4
|
11 years |
nmav |
if private key import fails try as pkcs8 key.
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@8663ace
|
12 years |
nmav |
removed limit on ca certificates' number
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@787dab7
|
13 years |
nmav |
added option to disable srp (for distributions that disable it in gnutls)
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@2b3a248b
|
13 years |
nmav |
more changes for openpgp support. Seems to be at a workable state.
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@e5bbda4
|
13 years |
nmav |
Initial support for openpgp keys
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@5e81262
|
13 years |
nmav |
Added support for sending more than one certificate.
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@b077bdd
|
13 years |
nmav |
added more error checks.
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@a3c97d1
|
13 years |
nmav |
better handling of RSAFile and DHFile
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@e239d1a
|
13 years |
nmav |
No more defaults for dhparams, rsaparams. Check for GnuTLSPriorities.
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@fd73a08
|
13 years |
nmav |
Added support for subject alternative names. (untested)
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@7bebb42
|
13 years |
nmav |
upgraded to 0.4.0
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@836c2f9
|
15 years |
chip |
start the CA Certificate code.
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@84cb5b2
|
15 years |
chip |
- add lua to do client verification
- only use gcrypt locking when …
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@c301152
|
15 years |
chip |
- move hooks to gnutls_hooks.c
- use 'mgs_' as the prefix for all …
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
|
@46b85d8
|
15 years |
chip |
move config functions to their own file.
debian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
