|
|
@70a1e5a
|
7 years |
thomas2.klute |
Introduce OCSP caching grace time
A cached OCSP response must be …
asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream
|
|
|
@8913410
|
7 years |
thomas2.klute |
Update copyright headers
asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream
|
|
|
@c3ad933
|
7 years |
thomas2.klute |
Remove stale support code for Apache versions before 2.2
asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream
|
|
|
@94cb972
|
7 years |
thomas2.klute |
Minimal OCSP stapling implementation using externally provided …
asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream
|
|
|
@8ac7c0d
|
7 years |
thomas2.klute |
Register "ssl_is_https" function for compatibility with mod_rewrite
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@88df24d
|
7 years |
thomas2.klute |
Replace "SSL" with "TLS" in config directive descriptions
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@176047e
|
7 years |
thomas2.klute |
Use AP_INIT_FLAG for On/Off? config directives
Letting the Apache …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@f21d2a6
|
7 years |
thomas2.klute |
Changed the semantics of GnuTLSP11Module
That setting instructs …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@e021722
|
8 years |
thomas2.klute |
Update copyright headers for Nikos Mavrogiannopoulos' PKCS #11 patch
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@e391197
|
8 years |
thomas2.klute |
Update copyright headers for C source
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@a2e3c33
|
8 years |
thomas2.klute |
Rename option SSLProxyEngine to GnuTLSProxyEngine
This matches the …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@87f1ed2
|
8 years |
thomas2.klute |
Allow loading of an additional PKCS #11 provider library
When using …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@2cde026d
|
8 years |
thomas2.klute |
Merge branch 'new-gnutls-api'
Merge my TLS proxy implementation with …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@f030883
|
8 years |
thomas2.klute |
Set GnuTLS priorities for proxy connections separately
Until now, …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@c4a015b
|
8 years |
thomas2.klute |
Merge branch 'split-testsuite' into new-gnutls-api
OpenPGP support is …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@259e835
|
8 years |
thomas2.klute |
Merge branch 'master' into new-gnutls-api
Branch 'master' at this …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@809c422
|
8 years |
thomas2.klute |
TLS proxy: Add support for CRLs to back end server verification
When …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@0de1839
|
8 years |
thomas2.klute |
Support X.509 auth for TLS proxy connections
This commit adds support …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@d7a8286
|
8 years |
thomas2.klute |
Remove debug log messages for allocating connection config memory
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@c1ef069
|
8 years |
thomas2.klute |
Record if a connection is a proxy connection
When handling a proxy …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@07d548d
|
8 years |
thomas2.klute |
Properly use SSLProxyEngine option
ssl_proxy_enable now checks if …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@accbb83
|
8 years |
thomas2.klute |
mod_gnutls.c: Whitespace and line break fixes
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@c782c1f
|
8 years |
thomas2.klute |
Don't do global deinit when disabling TLS for a proxy back end …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@e8acf05
|
8 years |
thomas2.klute |
Enable/disable TLS per connection in ssl_engine_disable
Previously, …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@3d361b8
|
8 years |
thomas2.klute |
Check if filters exist before removing them in ssl_engine_disable
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@64dadf8
|
8 years |
thomas2.klute |
Use proper GNUTLS_ENABLED_* macros in SSL proxy functions
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@031acac
|
9 years |
nmav |
Use the new (3.1.3+) GnuTLS APIs to obtain private keys.
This allows …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@fd82e59
|
9 years |
dkg |
use strict compiler arguments by default (-Wall -Werror -Wextra)
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@2aaf4f5
|
9 years |
dkg |
implement GnuTLSExportCertificates control over max exported cert size …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@671b64f
|
9 years |
dkg |
remove all trailing whitespace
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@cf2b905
|
9 years |
dkg |
MSVA: document and parse GnuTLSClientVerifyMethod directive
The …
asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
|
|
|
@7d1ab49
|
10 years |
dkg |
restore GnuTLSExportCertificate directive
It looks to me like this …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@040387c
|
10 years |
dkg |
server-wide settings should be defaults unless overridden in a vhost
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@2d0f6cf
|
10 years |
dkg |
initialize members by name, for better clarity
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@8c03808
|
10 years |
neuromancer |
Removed Obselete Configuration Directives:
- GnuTLSRSAFile
- …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@37f8282
|
11 years |
neuromancer |
mod_proxy support continued
Signed-off-by: Dash Shendy …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@33826c5
|
11 years |
neuromancer |
mod_proxy support
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@7c05ed1
|
11 years |
neuromancer |
Fix Compilation Warnings
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@e183628
|
11 years |
neuromancer |
Updated Copyright Headers & Formatting
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@6223319
|
11 years |
neuromancer |
Remove More Legacy LUA Code
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@b59327c
|
12 years |
nmav |
GnuTLSCache can now take a single argument (none).
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@e02dd8c
|
12 years |
nmav |
indented code
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@ae233c2
|
13 years |
nmav |
Added option to turn on/off session tickets.
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@b072204
|
15 years |
nmav |
corrected SRP enable flag, and corrected the DBM hook support. It now …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@787dab7
|
15 years |
nmav |
added option to disable srp (for distributions that disable it in gnutls)
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@2b3a248b
|
15 years |
nmav |
more changes for openpgp support. Seems to be at a workable state.
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@e5bbda4
|
15 years |
nmav |
Initial support for openpgp keys
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@e239d1a
|
15 years |
nmav |
No more defaults for dhparams, rsaparams. Check for GnuTLSPriorities.
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@7bebb42
|
15 years |
nmav |
upgraded to 0.4.0
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@836c2f9
|
18 years |
chip |
start the CA Certificate code.
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@84cb5b2
|
18 years |
chip |
- add lua to do client verification
- only use gcrypt locking when …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@c301152
|
18 years |
chip |
- move hooks to gnutls_hooks.c
- use 'mgs_' as the prefix for all …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@46b85d8
|
18 years |
chip |
move config functions to their own file.
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@316bd8c
|
18 years |
chip |
- remove more debug logging.
- fix a crash by changing the certificate …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@e924ddd
|
18 years |
chip |
client auth is sort of working.
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@31645b2
|
18 years |
chip |
working SNI. Not so working Client Cert support.
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@482f47f
|
18 years |
chip |
include support for 2.0.xx
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@5a6446d
|
18 years |
chip |
wrap the debug log in maintainer mode.
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@42307a9
|
18 years |
chip |
- remove anno creds
- initial attempt at Server Name Extension
- …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@fcb122d
|
18 years |
chip |
checkpoint the work so far. The DBM cache needs a little more work.
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@6e0bfd6
|
18 years |
chip |
- make memcahe optional
- update for 2.1.x branch changes.
- some …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@a66e147
|
18 years |
chip |
working support for a ssl session cache via memcached.
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@76bd3bf
|
18 years |
chip |
add check for apr_memcache
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@32f2e60
|
18 years |
chip |
fixes and stuff that i should of already committed.
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@0314deb
|
18 years |
chip |
re-order the cipher types.
Add a fixups hook and some Basic Env vars
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@b1f7f11
|
18 years |
chip |
hey hey, this is working code!
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@dae0aec
|
18 years |
chip |
input and output filters
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@2e12226
|
18 years |
chip |
rename structures.
properly prefix all non-static functions with …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@7e2b223
|
18 years |
chip |
break up the IO functions into their own file
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@aa99b13
|
18 years |
chip |
commit before i move everything around
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@6a8a839
|
18 years |
chip |
updated
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|
|
|
@9706fc2
|
18 years |
chip |
iniail makefiles and license foo
asynciodebian/masterdebian/stretch-backportsjessie-backportsmsvaproxy-ticketupstream
|