|
|
@f450ac9
|
7 years |
thomas2.klute |
Replace mgs_session_id2sz() with apr_(p?)escape_hex()
There's no need …
asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream
|
|
|
@c005645
|
7 years |
thomas2.klute |
Mutex for DBM cache access
I noticed that with a DBM cache enabled …
asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream
|
|
|
@04e6e65
|
7 years |
thomas2.klute |
Move declarations of cache-related functions to a dedicated header
…
asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream
|
|
|
@7511bfa
|
7 years |
thomas2.klute |
Use ap_log_cerror() instead of ap_log_error() where reasonable
…
asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream
|
|
|
@c3ad933
|
7 years |
thomas2.klute |
Remove stale support code for Apache versions before 2.2
asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream
|
|
|
@fd6bb19
|
7 years |
thomas2.klute |
Extract OCSP access URI from the server certificate
asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream
|
|
|
@fad7695
|
7 years |
thomas2.klute |
Store OCSP trust list in server config
This avoids recreating the …
asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream
|
|
|
@64856fd
|
7 years |
thomas2.klute |
Get rid of exit(-1) calls in mgs_hook_post_config()
This allows the …
asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream
|
|
|
@94cb972
|
7 years |
thomas2.klute |
Minimal OCSP stapling implementation using externally provided …
asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream
|
|
|
@bc539d5
|
7 years |
thomas2.klute |
Implement short message for mod_status reports
Until now the flags …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@600cf16
|
7 years |
thomas2.klute |
mgs_status_hook: Remove code for GnuTLS versions < 3
mod_gnutls …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@a2368a4
|
7 years |
thomas2.klute |
Use TLS session cleanup hook for all connection pools
If a TLS …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@2ceb836
|
7 years |
thomas2.klute |
Update log messages on session termination (cleanup_gnutls_session, …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@dff03fa
|
7 years |
thomas2.klute |
Configure C99 mode
Variable declarations in for loops improve code …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@9ca1f21
|
7 years |
thomas2.klute |
Allow loading more than one PKCS #11 module using GnuTLSP11Module
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@7764015
|
7 years |
thomas2.klute |
Update GnuTLSP11Module documentation for stricter semantics
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@746e993
|
7 years |
thomas2.klute |
Formatting fix for PKCS #11 module loading
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@f21d2a6
|
7 years |
thomas2.klute |
Changed the semantics of GnuTLSP11Module
That setting instructs …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@efd3cfe
|
8 years |
thomas2.klute |
Whitespace fix in gnutls_hooks.c
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@99f8375
|
8 years |
thomas2.klute |
Ensure safe defaults during client verification
Initialize the …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@e021722
|
8 years |
thomas2.klute |
Update copyright headers for Nikos Mavrogiannopoulos' PKCS #11 patch
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@e391197
|
8 years |
thomas2.klute |
Update copyright headers for C source
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@87f1ed2
|
8 years |
thomas2.klute |
Allow loading of an additional PKCS #11 provider library
When using …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@4133f2d
|
8 years |
thomas2.klute |
Unify argument handling in mgs_set_priorities
Just store the argument …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@2cde026d
|
8 years |
thomas2.klute |
Merge branch 'new-gnutls-api'
Merge my TLS proxy implementation with …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@f030883
|
8 years |
thomas2.klute |
Set GnuTLS priorities for proxy connections separately
Until now, …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@d04f7da
|
8 years |
thomas2.klute |
Version guards for gnutls_privkey_import_openpgp_raw workaround
The …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@8b472af
|
8 years |
thomas2.klute |
Use server root for file paths in TLS proxy config
This is what users …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@2cde8111
|
8 years |
thomas2.klute |
Workarounds for OpenPGP key handling
Commit …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@01b5d85
|
8 years |
thomas2.klute |
Merge branch 'client-verify-fix' into new-gnutls-api
Merge the fix …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@c4a015b
|
8 years |
thomas2.klute |
Merge branch 'split-testsuite' into new-gnutls-api
OpenPGP support is …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@259e835
|
8 years |
thomas2.klute |
Merge branch 'master' into new-gnutls-api
Branch 'master' at this …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@809c422
|
8 years |
thomas2.klute |
TLS proxy: Add support for CRLs to back end server verification
When …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@bd24203
|
8 years |
thomas2.klute |
Explicitly build trust list for proxy connections
This change …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@7d2123d
|
8 years |
thomas2.klute |
Log errors while loading proxy certificate trust list
The way the …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@6bbc00a
|
8 years |
thomas2.klute |
Check hostname of proxy back end server against certificate
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@0de1839
|
8 years |
thomas2.klute |
Support X.509 auth for TLS proxy connections
This commit adds support …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@b324906
|
8 years |
thomas2.klute |
Merge branch 'client-verify-fix' into tls-proxy
Most importantly, …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@5a8a32b
|
8 years |
thomas2.klute |
TLS Client auth: Check server verify mode if unset for dir
The …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@b429e4c
|
8 years |
thomas2.klute |
Cleanup handler for proxy TLS connections
When handling client …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@d7a8286
|
8 years |
thomas2.klute |
Remove debug log messages for allocating connection config memory
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@beb14d9
|
8 years |
thomas2.klute |
Proof of concept: Support for proxy back end connections using TLS
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@c1ef069
|
8 years |
thomas2.klute |
Record if a connection is a proxy connection
When handling a proxy …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@5342265
|
8 years |
thomas2.klute |
Close last for loop in mgs_find_sni_server
The closing brace for the …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@07d548d
|
8 years |
thomas2.klute |
Properly use SSLProxyEngine option
ssl_proxy_enable now checks if …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@e8acf05
|
8 years |
thomas2.klute |
Enable/disable TLS per connection in ssl_engine_disable
Previously, …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@e4b58b6
|
8 years |
thomas2.klute |
Check error codes during GnuTLS connection init
These calls shouldn't …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@031acac
|
9 years |
nmav |
Use the new (3.1.3+) GnuTLS APIs to obtain private keys.
This allows …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@fd82e59
|
9 years |
dkg |
use strict compiler arguments by default (-Wall -Werror -Wextra)
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@765cac2
|
9 years |
dkg |
clean up MGS_SIDE abuse of apr_pstrcat
We were allocating twice as …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@2aaf4f5
|
9 years |
dkg |
implement GnuTLSExportCertificates control over max exported cert size …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@55dc3f0
|
9 years |
dkg |
Make Apache 2.4 display the correct module in error logs
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@83eafed
|
9 years |
dkg |
avoid a very unlikely NULL dereference
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@4ec9183
|
9 years |
dkg |
Include GnuTLS version as additional version component in Server …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@46de753
|
9 years |
dkg |
fix build against GnuTLS 2.12.x
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@671b64f
|
9 years |
dkg |
remove all trailing whitespace
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@9720026
|
9 years |
dkg |
silly newline cleanup
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@5674676
|
9 years |
dkg |
add SSL_DH_PRIME_BITS to expose the size of the DH modulus to CGI
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@b4739cd
|
9 years |
dkg |
display some information in mod_status
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@b55bf71
|
9 years |
dkg |
accept the e-mail address in the cert Subject if no sAN e-mail is present
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@a01f8ab
|
9 years |
dkg |
upgrade to libmsv 0.1 API
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@832182b
|
9 years |
dkg |
extracting the user ID from a certificate cleanly.
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@5c0d491
|
9 years |
dkg |
MSVA: successful communication between apache and the agent
This is …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@07889ab
|
9 years |
dkg |
MSVA: some initial framework
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@cf2b905
|
9 years |
dkg |
MSVA: document and parse GnuTLSClientVerifyMethod directive
The …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@6bb2474
|
10 years |
dkg |
Changed Default Export Of Full PEM Certificates To FALSE
This matches …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@b1c2b01
|
10 years |
dkg |
avoid a segfault if no X.509 certificates are present during vhost_cb
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@7d1ab49
|
10 years |
dkg |
restore GnuTLSExportCertificate directive
It looks to me like this …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@c0dd3ab
|
10 years |
dkg |
avoid invoking gnutls_transport_get_ptr on a NULL session
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@b668622
|
10 years |
dkg |
Do not override the configured GnuTLS priority string.
This fixes …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@8985a6b
|
10 years |
dkg |
allow certificate use for clients without SNI
The test removed here …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@9ecd212
|
10 years |
dkg |
avoid embedding extra/unnecessary newlines in logs
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@932b68e
|
10 years |
dkg |
Check for the version of GnuTLS we built against
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@cb5188f
|
10 years |
dkg |
fatal library initialization error logs should be at APLOG_EMERG
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@421ef1c
|
10 years |
dkg |
deal responsibly with grave failures in pre_config hook
If a …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@040387c
|
10 years |
dkg |
server-wide settings should be defaults unless overridden in a vhost
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@369f47a
|
10 years |
dkg |
avoid calling gnutls_srp_server_get_username() unless SRP is configured
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@b8df283
|
10 years |
dkg |
use gnutls_datum_t instead of the deprecated gnutls_datum
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@2b76a9c
|
10 years |
dkg |
X.509 certificates are ordered EE first (see …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@6055aff
|
10 years |
dkg |
warn if the server hostname cannot be found in the certificate
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@e2b936e
|
10 years |
dkg |
no longer using first_run since 31645b2ad; remove it
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@3b4c0d0
|
10 years |
neuromancer |
* Added Comments to Header Structures
* Refactored the following: …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@cb60afc
|
10 years |
neuromancer |
Bugfix: check_server_aliases()
Signed-off-by: Dash Shendy …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@e3d36c7
|
10 years |
neuromancer |
Fixed conditional ServerAlias? names' & wildcards' matching
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@14d718f
|
10 years |
neuromancer |
Added support for wildcards in ServerAlias? configuration directive
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@9ee0464
|
10 years |
neuromancer |
Compilation Errors Cleanup
Signed-off-by: Dash Shendy …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@37f8282
|
11 years |
neuromancer |
mod_proxy support continued
Signed-off-by: Dash Shendy …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@33826c5
|
11 years |
neuromancer |
mod_proxy support
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@da8c2fe
|
11 years |
neuromancer |
Debug logging fix up
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@74f798f
|
11 years |
neuromancer |
Added Debug logging and user warning for not spec. DH Params
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@fe42bfb
|
11 years |
neuromancer |
Compilation Warnings Fixup
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@410d216
|
11 years |
neuromancer |
Generate DH params instead of using the static ones
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@b3eb741
|
11 years |
neuromancer |
Removed Obselete static const int protocol_priority[]
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@0cfcbf3
|
11 years |
neuromancer |
Removed DEBUGLOG
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@b7098b2
|
11 years |
neuromancer |
ServerAlias? Directive Fix (For Apache 2.0.x)
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@8581fac
|
11 years |
neuromancer |
Compilation Errors Fixup
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@8764d0d
|
11 years |
neuromancer |
ServerAlias? Directive Fix
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@d2ee1a1
|
11 years |
neuromancer |
Removed obselete function gnutls_certificate_server_set_retrieve_function()
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@cf10d49
|
11 years |
neuromancer |
Added new definition for function cert_retrieve_fn()
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@d0be765
|
11 years |
neuromancer |
Added some comments
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|