|
|
|
@b4739cd
|
6 years |
dkg |
display some information in mod_status
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@b55bf71
|
6 years |
dkg |
accept the e-mail address in the cert Subject if no sAN e-mail is present
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@a01f8ab
|
6 years |
dkg |
upgrade to libmsv 0.1 API
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@832182b
|
6 years |
dkg |
extracting the user ID from a certificate cleanly.
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@5c0d491
|
6 years |
dkg |
MSVA: successful communication between apache and the agent
This is …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@07889ab
|
6 years |
dkg |
MSVA: some initial framework
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@cf2b905
|
6 years |
dkg |
MSVA: document and parse GnuTLSClientVerifyMethod directive
The …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@6bb2474
|
7 years |
dkg |
Changed Default Export Of Full PEM Certificates To FALSE
This matches …
debian/masterdebian/stretch-backportsjessie-backportsupstream
|
|
|
|
@b1c2b01
|
7 years |
dkg |
avoid a segfault if no X.509 certificates are present during vhost_cb
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@7d1ab49
|
7 years |
dkg |
restore GnuTLSExportCertificate directive
It looks to me like this …
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@c0dd3ab
|
7 years |
dkg |
avoid invoking gnutls_transport_get_ptr on a NULL session
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@b668622
|
7 years |
dkg |
Do not override the configured GnuTLS priority string.
This fixes …
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@8985a6b
|
7 years |
dkg |
allow certificate use for clients without SNI
The test removed here …
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@9ecd212
|
7 years |
dkg |
avoid embedding extra/unnecessary newlines in logs
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@932b68e
|
7 years |
dkg |
Check for the version of GnuTLS we built against
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@cb5188f
|
7 years |
dkg |
fatal library initialization error logs should be at APLOG_EMERG
…
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@421ef1c
|
7 years |
dkg |
deal responsibly with grave failures in pre_config hook
If a …
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@040387c
|
7 years |
dkg |
server-wide settings should be defaults unless overridden in a vhost
…
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@369f47a
|
7 years |
dkg |
avoid calling gnutls_srp_server_get_username() unless SRP is configured
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@b8df283
|
7 years |
dkg |
use gnutls_datum_t instead of the deprecated gnutls_datum
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@2b76a9c
|
7 years |
dkg |
X.509 certificates are ordered EE first (see …
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@6055aff
|
7 years |
dkg |
warn if the server hostname cannot be found in the certificate
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@e2b936e
|
7 years |
dkg |
no longer using first_run since 31645b2ad; remove it
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@3b4c0d0
|
7 years |
neuromancer |
* Added Comments to Header Structures
* Refactored the following: …
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@cb60afc
|
7 years |
neuromancer |
Bugfix: check_server_aliases()
Signed-off-by: Dash Shendy …
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@e3d36c7
|
7 years |
neuromancer |
Fixed conditional ServerAlias? names' & wildcards' matching
…
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@14d718f
|
7 years |
neuromancer |
Added support for wildcards in ServerAlias? configuration directive
…
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@9ee0464
|
7 years |
neuromancer |
Compilation Errors Cleanup
Signed-off-by: Dash Shendy …
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@37f8282
|
8 years |
neuromancer |
mod_proxy support continued
Signed-off-by: Dash Shendy …
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@33826c5
|
8 years |
neuromancer |
mod_proxy support
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@da8c2fe
|
8 years |
neuromancer |
Debug logging fix up
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@74f798f
|
8 years |
neuromancer |
Added Debug logging and user warning for not spec. DH Params
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@fe42bfb
|
8 years |
neuromancer |
Compilation Warnings Fixup
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@410d216
|
8 years |
neuromancer |
Generate DH params instead of using the static ones
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@b3eb741
|
8 years |
neuromancer |
Removed Obselete static const int protocol_priority[]
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@0cfcbf3
|
8 years |
neuromancer |
Removed DEBUGLOG
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@b7098b2
|
8 years |
neuromancer |
ServerAlias? Directive Fix (For Apache 2.0.x)
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@8581fac
|
8 years |
neuromancer |
Compilation Errors Fixup
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@8764d0d
|
8 years |
neuromancer |
ServerAlias? Directive Fix
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@d2ee1a1
|
8 years |
neuromancer |
Removed obselete function gnutls_certificate_server_set_retrieve_function()
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@cf10d49
|
8 years |
neuromancer |
Added new definition for function cert_retrieve_fn()
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@d0be765
|
8 years |
neuromancer |
Added some comments
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@9180a60
|
8 years |
neuromancer |
Applied New Functions Patch from Nikos
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@e183628
|
8 years |
neuromancer |
Updated Copyright Headers & Formatting
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@60cf11c
|
8 years |
neuromancer |
Proxy (TLS termination) patch
Signed-off-by: Dash Shendy …
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@b59327c
|
9 years |
nmav |
GnuTLSCache can now take a single argument (none).
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@e02dd8c
|
9 years |
nmav |
indented code
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@368b574
|
9 years |
nmav |
Safer usage of session variable to prevent segmentation faults on …
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@7fec961
|
9 years |
nmav |
Depend on libgnutls for the activation and expiration time checks.
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@ae233c2
|
9 years |
nmav |
Added option to turn on/off session tickets.
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@3928f79
|
9 years |
nmav |
More libgcrypt fixes.
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@0499540
|
9 years |
nmav |
Use libgcrypt calls only if gnutls is older than 2.11.0
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@8e98518
|
9 years |
nmav |
properly initialize variable.
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@ed07ddf
|
9 years |
nmav |
Added support for session tickets.
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@67101aa
|
10 years |
nmav |
Applied patch of jmdesp that allows certificate lists by client.
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@c38a4e9
|
10 years |
nmav |
Avoid requesting certificate from client when we already have it. …
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@1c90c18
|
10 years |
nmav |
Applied patch by AlainKnaff? to correctly verify certificates per …
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@377a900
|
10 years |
nmav |
set srp username to empty string. Solves …
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@f7a7d66
|
10 years |
nmav |
Allow openpgp certificates that have infinite expiration time. …
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@56f3628
|
11 years |
nmav |
Added patch to fix issue with mod_proxy. Investigation and patch by …
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@1a53be1
|
11 years |
nmav |
APLOG_EMERG was replaced with APLOG_STARTUP for startup messages.
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@52149ee
|
11 years |
nmav |
Allow openpgp-only sites
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@a208cd3
|
11 years |
nmav |
better logging
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@26b08fd
|
11 years |
nmav |
updated README file to account for openpgp keys --patch by Jack Bates
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@df34f08
|
11 years |
nmav |
added check for invalid context
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@1897a1c
|
11 years |
nmav |
depend on main libgnutls library (and gnutls 2.4.x)
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@787dab7
|
12 years |
nmav |
added option to disable srp (for distributions that disable it in gnutls)
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@f548f15
|
12 years |
nmav |
prepare for an alpha release
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@e6f648a
|
12 years |
nmav |
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@2b3a248
|
12 years |
nmav |
more changes for openpgp support. Seems to be at a workable state.
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@8bd529f
|
12 years |
nmav |
print error if preconfiguration fails
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@e5bbda4
|
12 years |
nmav |
Initial support for openpgp keys
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@619953c
|
12 years |
nmav |
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@25dad18
|
12 years |
nmav |
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@ae4a2b0
|
12 years |
nmav |
Corrected bug which did not allow the TLS session cache to be used.
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@5e81262
|
12 years |
nmav |
Added support for sending more than one certificate.
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@b077bdd
|
12 years |
nmav |
added more error checks.
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@a3c97d1
|
12 years |
nmav |
better handling of RSAFile and DHFile
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@2226711
|
12 years |
nmav |
report the missing GnuTLSPriorities for the gnutls enabled hosts only.
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@e239d1a
|
12 years |
nmav |
No more defaults for dhparams, rsaparams. Check for GnuTLSPriorities.
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@ea470be
|
12 years |
nmav |
The compatibility mode can now be enabled only using the …
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@af4998e
|
12 years |
nmav |
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@36736d4
|
12 years |
nmav |
added SSL_SERVER/CLIENT_S_TYPE
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@a5dc815
|
12 years |
nmav |
export the alternative names of the certificate
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@ee65fcb
|
12 years |
nmav |
added SSL_SERVER_M_SERIAL environment variable
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@717206c
|
12 years |
nmav |
more fixes for subject alternative name.
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@41f7031
|
12 years |
nmav |
some fixes in alternative name support
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@fd73a08
|
12 years |
nmav |
Added support for subject alternative names. (untested)
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@7bebb42
|
12 years |
nmav |
upgraded to 0.4.0
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@836c2f9
|
15 years |
chip |
start the CA Certificate code.
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@84cb5b2
|
15 years |
chip |
- add lua to do client verification
- only use gcrypt locking when …
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@836417f
|
15 years |
chip |
Refactor finding the correct server record to fix resumed sessions.
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@38435cc
|
15 years |
chip |
apr_table_setn doesn't copy the data. oops.
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@2ad3683
|
15 years |
chip |
We already have a Certificate, use it directly. With SNI, GnuTLS …
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@46e3920
|
15 years |
chip |
if there aren't any certs.. still set something.
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@7ba803b
|
15 years |
chip |
add SSL_SERVER_S_DN and SSL_SERVER_I_DN
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
|
|
|
@c301152
|
15 years |
chip |
- move hooks to gnutls_hooks.c
- use 'mgs_' as the prefix for all …
debian/masterdebian/stretch-backportsjessie-backportsmsvaupstream
|
