# # ChangeLog for src in mod_gnutls # # Generated by Trac 1.2 # Mar 5, 2021, 6:06:54 PM Sun, 12 Jan 2020 10:27:45 GMT Fiona Klute [845c112] * src/gnutls_hooks.c (modified) * src/gnutls_ocsp.c (modified) * src/gnutls_ocsp.h (modified) Async OCSP updates for multi-stapling There's now one mod_watchdog ... Sat, 11 Jan 2020 22:37:23 GMT Fiona Klute [c446ca5] * include/mod_gnutls.h.in (modified) * src/gnutls_ocsp.c (modified) Small cleanups (use mgs_ocsp_data_t, update copyright header) Sat, 11 Jan 2020 21:49:30 GMT Fiona Klute [ce987dc] * src/gnutls_ocsp.c (modified) Log number of certificates in chain that OCSP stapling is enabled for Sat, 11 Jan 2020 21:41:42 GMT Fiona Klute [1aad1d7] * src/gnutls_ocsp.c (modified) Consider stapling configured if it's configured for one certificate ... Sat, 11 Jan 2020 20:30:40 GMT Fiona Klute [1c3853a] * include/mod_gnutls.h.in (modified) * src/gnutls_hooks.c (modified) * src/gnutls_ocsp.c (modified) Minimal multi-staple implementation Works, but has limitations: * ... Sat, 11 Jan 2020 17:59:30 GMT Fiona Klute [08ba205] * include/mod_gnutls.h.in (modified) * src/gnutls_hooks.c (modified) * src/gnutls_ocsp.c (modified) Turn per-vhost OCSP data into an array Size 1 for now, but it's a ... Sat, 11 Jan 2020 17:05:52 GMT Fiona Klute [4e60dd8] * src/gnutls_ocsp.c (modified) Handle initialization of the OCSP data structure in one place This ... Sat, 11 Jan 2020 16:49:11 GMT Fiona Klute [de9b100] * src/gnutls_ocsp.c (modified) OCSP config: Check if cache is available before processing ... Sat, 11 Jan 2020 16:39:48 GMT Fiona Klute [cf6f974] * src/gnutls_hooks.c (modified) * src/gnutls_ocsp.c (modified) * src/gnutls_ocsp.h (modified) mgs_get_ocsp_response: Accept request information from ... Sat, 11 Jan 2020 16:26:36 GMT Fiona Klute [98b37a1] * src/gnutls_ocsp.c (modified) mgs_get_ocsp_response: Consistently use "sc" variable The "sc = ... Sat, 11 Jan 2020 15:57:16 GMT Fiona Klute [9418c1e] * src/gnutls_ocsp.c (modified) mgs_cache_ocsp_failure: Require explicit struct mgs_ocsp_data Sat, 11 Jan 2020 15:53:18 GMT Fiona Klute [06dcf89] * src/gnutls_ocsp.c (modified) mgs_cache_ocsp_response: Require explicit struct mgs_ocsp_data Sat, 11 Jan 2020 15:45:00 GMT Fiona Klute [75f2d96] * src/gnutls_ocsp.c (modified) check_ocsp_response: Require explicit struct mgs_ocsp_data The ... Sat, 11 Jan 2020 15:40:09 GMT Fiona Klute [e798149] * src/gnutls_ocsp.c (modified) do_ocsp_request: Require responder URI This method just handles a ... Sat, 11 Jan 2020 15:40:01 GMT Fiona Klute [bdd10be] * src/gnutls_ocsp.c (modified) mgs_create_ocsp_request: Require explicit struct mgs_ocsp_data This ... Sat, 11 Jan 2020 14:51:53 GMT Fiona Klute [a8374f7] * src/gnutls_ocsp.c (modified) * src/gnutls_ocsp.h (modified) Keep a reference to the certificate with OCSP data When ... Fri, 29 Nov 2019 21:30:08 GMT Fiona Klute [e376ed8] * README (modified) * configure.ac (modified) * src/gnutls_cache.c (modified) * src/gnutls_cache.h (modified) * src/gnutls_hooks.c (modified) * src/gnutls_ocsp.c (modified) * test/Makefile.am (modified) * test/authority/subca/ocsp-responder/template (added) * test/authority/subca/server/template.in (added) * test/authority/subca/template.in (added) * test/ocsp_server.conf.in (modified) * test/test_ca.mk (modified) * test/tests/00_basic/apache.conf (modified) * test/tests/27_OCSP_server/apache.conf (modified) Merge branch 'subca' Thu, 28 Nov 2019 11:22:08 GMT Fiona Klute [dcec209] * src/mod_gnutls.c (modified) Fix possible segfault (NULL pointer dereference) on failed TLS ... Wed, 24 Jul 2019 06:29:40 GMT Fiona Klute [556783e] * src/gnutls_cache.c (modified) * src/gnutls_cache.h (modified) * src/gnutls_hooks.c (modified) * src/gnutls_ocsp.c (modified) Provide OCSP response via gnutls_certificate_retrieve_function3 ... Tue, 23 Jul 2019 06:33:41 GMT Fiona Klute [81018a4] * configure.ac (modified) * src/gnutls_cache.c (modified) * src/gnutls_hooks.c (modified) Remove compatibility code for GnuTLS version before 3.6.3 Tue, 23 Jul 2019 06:25:59 GMT Fiona Klute [65c84e5] * README (modified) * configure.ac (modified) * src/gnutls_hooks.c (modified) Set certificates via gnutls_certificate_set_retrieve_function3() ... Tue, 22 Jan 2019 07:27:36 GMT Fiona Klute [6200f6f] * src/gnutls_hooks.c (modified) Switch server based on early SNI only if a name was found Thu, 03 Jan 2019 15:17:55 GMT Fiona Klute [b6c7866] * src/gnutls_hooks.c (modified) * src/gnutls_io.c (modified) * src/gnutls_proxy.c (modified) * src/gnutls_util.c (modified) * src/gnutls_util.h (modified) Update copyright headers of files changed this year Thu, 03 Jan 2019 14:40:17 GMT Fiona Klute [a900948] * CHANGELOG (modified) * src/gnutls_proxy.c (modified) Support multiple ALPN proposals for proxy TLS connections The note ... Thu, 03 Jan 2019 12:24:47 GMT Fiona Klute [4d38cbd] * src/gnutls_io.c (modified) Return EOS/success for failed proxy TLS connections only on handshake ... Wed, 02 Jan 2019 20:22:48 GMT Fiona Klute [08c48d7] * src/gnutls_hooks.c (modified) * src/gnutls_util.c (modified) * src/gnutls_util.h (modified) Extract code for turning APR array of strings into gnutls_datum_t ... Wed, 19 Dec 2018 18:09:13 GMT Fiona Klute [c7710cf] * src/gnutls_proxy.c (modified) Immediately return from proxy_conn_set_alpn() if there is no proxy ... Mon, 17 Dec 2018 21:39:50 GMT Fiona Klute [564f33f] * src/gnutls_io.c (modified) * src/gnutls_proxy.c (modified) * src/gnutls_proxy.h (modified) Move SNI and ALPN setup for proxy connections to gnutls_proxy.c Mon, 17 Dec 2018 18:19:48 GMT Fiona Klute [0378c22] * include/mod_gnutls.h.in (modified) * src/gnutls_io.c (modified) * src/gnutls_proxy.h (modified) Move mod_proxy note name definitions to gnutls_proxy.h Mon, 17 Dec 2018 18:12:17 GMT Fiona Klute [68b5156] * src/Makefile.am (modified) * src/gnutls_hooks.c (modified) * src/gnutls_proxy.c (added) * src/gnutls_proxy.h (added) Move proxy-only functions from gnutls_hooks.c to a dedicated file Mon, 17 Dec 2018 18:05:51 GMT Fiona Klute [0fcba60] * src/gnutls_hooks.c (modified) * src/gnutls_util.c (modified) * src/gnutls_util.h (modified) Move compiled default priorities to gnutls_util.[hc] Wed, 12 Dec 2018 21:57:14 GMT Fiona Klute [f674424] * src/gnutls_io.c (modified) * test/Makefile.am (modified) * test/test-34_TLS_reverse_proxy_h2.bash (added) * test/tests/34_TLS_reverse_proxy_h2/apache.conf (added) * test/tests/34_TLS_reverse_proxy_h2/backend.conf (added) * test/tests/34_TLS_reverse_proxy_h2/gnutls-cli.args (added) * test/tests/34_TLS_reverse_proxy_h2/input (added) * test/tests/34_TLS_reverse_proxy_h2/output (added) * test/tests/Makefile.am (modified) First prototype of proxy ALPN support The current code assumes that ... Wed, 12 Dec 2018 21:24:36 GMT Fiona Klute [2038b76] * src/gnutls_io.c (modified) Ensure nonblocking reads pass EAGAIN or EINTR status to caller Wed, 12 Dec 2018 21:15:40 GMT Fiona Klute [92cb0cc] * src/gnutls_io.c (modified) Handle APR_TIMEUP return value from blocking ap_get_brigade() call ... Wed, 21 Nov 2018 19:38:58 GMT Fiona Klute [0da10eb] * src/gnutls_hooks.c (modified) * src/gnutls_sni.c (modified) Document Early SNI related functions and rename the post client hello ... Tue, 06 Nov 2018 17:50:05 GMT Fiona Klute [64470ce] * src/gnutls_hooks.c (modified) Load credentials and prepare ALPN in pre client hello hook This ... Tue, 06 Nov 2018 17:28:02 GMT Fiona Klute [79fc46b] * src/gnutls_hooks.c (modified) Don't cancel virtual host lookup after successful default SNI fallback Tue, 06 Nov 2018 06:55:59 GMT Fiona Klute [a26d3f6] * src/gnutls_hooks.c (modified) Protect early_sni_hook() against being called in the wrong context Tue, 06 Nov 2018 06:36:22 GMT Fiona Klute [4963516] * src/gnutls_hooks.c (modified) Use server back reference for ALPN handling Necessary because ... Mon, 05 Nov 2018 21:13:10 GMT Fiona Klute [d4c1a4e] * include/mod_gnutls.h.in (modified) * src/gnutls_hooks.c (modified) Add a reference from mod_gnutls server settings back to the ... Mon, 05 Nov 2018 07:20:54 GMT Fiona Klute [c0fc11e] * include/mod_gnutls.h.in (modified) * src/gnutls_hooks.c (modified) * src/gnutls_sni.c (modified) * src/gnutls_sni.h (modified) Separate functions for default SNI and loading virtual host ... Sun, 04 Nov 2018 21:55:35 GMT Fiona Klute [7ff6c6c] * configure.ac (modified) * src/Makefile.am (modified) * src/gnutls_hooks.c (modified) * src/gnutls_sni.c (added) * src/gnutls_sni.h (added) Add proof-of-concept SNI parser in a pre client hello hook The SNI ... Fri, 02 Nov 2018 18:24:00 GMT Fiona Klute [4e388b0] * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) Consistently use strcasecmp() instead of mixing in apr_strnatcasecmp() Fri, 02 Nov 2018 17:30:33 GMT Fiona Klute [f06c148] * include/mod_gnutls.h.in (modified) * src/gnutls_hooks.c (modified) Simplify wildcard match for virtual host aliases Fri, 02 Nov 2018 17:12:40 GMT Fiona Klute [6d8c00c] * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) * src/gnutls_config.c (modified) * src/mod_gnutls.c (modified) Include apr_strings.h only where needed Fri, 02 Nov 2018 11:57:02 GMT Fiona Klute [3c6645b] * src/gnutls_hooks.c (modified) gnutls_hooks.c: Fix spaces in check_server_aliases() Wed, 31 Oct 2018 07:20:28 GMT Fiona Klute [3aff94d] * src/gnutls_cache.c (modified) * src/gnutls_cache.h (modified) * src/gnutls_hooks.c (modified) Include cache status in mod_status reports Fri, 26 Oct 2018 19:02:54 GMT Fiona Klute [04753db8] * src/gnutls_hooks.c (modified) Require Host header to match SNI hostname (if any) This is a ... Fri, 26 Oct 2018 18:37:35 GMT Fiona Klute [a14cf5c] * include/mod_gnutls.h.in (modified) * src/gnutls_hooks.c (modified) * src/gnutls_util.c (modified) Store SNI hostname in mod_gnutls' connection context Wed, 24 Oct 2018 16:56:08 GMT Fiona Klute [de3fad3] * include/mod_gnutls.h.in (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) Require handshake and request to use the same server The new check ... Wed, 24 Oct 2018 06:16:36 GMT Fiona Klute [15368a4] * src/gnutls_hooks.c (modified) Improve log messages for PKCS #11 provider loading Tue, 23 Oct 2018 06:31:48 GMT Fiona Klute [8273683] * src/gnutls_hooks.c (modified) Fix port numbers for vhosts in post_config log messages Tue, 02 Oct 2018 16:57:20 GMT Fiona Klute [469861a] * src/gnutls_hooks.c (modified) Enable session tickets in the post client hello hook With this ... Sun, 30 Sep 2018 18:10:42 GMT Fiona Klute [bac1a32] * src/gnutls_hooks.c (modified) * src/gnutls_io.c (modified) * src/gnutls_ocsp.c (modified) Order, log message, and style fixes Sun, 30 Sep 2018 17:36:26 GMT Fiona Klute [fdd3bf0] * doc/mod_gnutls_manual.mdwn (modified) * src/gnutls_hooks.c (modified) Enable session tickets by default if GnuTLS version >= 3.6.4 GnuTLS ... Sun, 30 Sep 2018 17:20:53 GMT Fiona Klute [bd2b48b] * src/gnutls_io.c (modified) Immediately retry on EINTR or EAGAIN for blocking receive Proxy TLS ... Sun, 30 Sep 2018 16:55:08 GMT Fiona Klute [78d75ac] * src/gnutls_cache.c (modified) Use the right cache config string in cache trace logs Sun, 30 Sep 2018 16:54:17 GMT Fiona Klute [0d7660d] * src/gnutls_cache.c (modified) Provide a default path for the default OCSP cache Sun, 30 Sep 2018 10:04:48 GMT Fiona Klute [60868d2] * doc/mod_gnutls_manual.mdwn (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * test/tests/00_basic/apache.conf (modified) * test/tests/19_TLS_reverse_proxy/apache.conf (modified) * test/tests/19_TLS_reverse_proxy/backend.conf (modified) Default to NORMAL for the GnuTLS priority settings This simplifies ... Thu, 27 Sep 2018 17:23:25 GMT Fiona Klute [72b669e] * include/mod_gnutls.h.in (modified) * src/gnutls_io.c (modified) Refuse to send or receive over a failed TLS connection On a failed ... Wed, 26 Sep 2018 19:21:32 GMT Fiona Klute [adceac0] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) Remove unneeded server variables "cert_cn" and "cert_san" ... Wed, 26 Sep 2018 06:29:35 GMT Fiona Klute [cb6476c] * src/gnutls_hooks.c (modified) * test/tests/27_OCSP_server/apache.conf (modified) Enable OCSP stapling by default if possible If the user hasn't ... Tue, 25 Sep 2018 19:46:26 GMT Fiona Klute [efc43b4] * src/gnutls_hooks.c (modified) * src/gnutls_ocsp.c (modified) * src/gnutls_ocsp.h (modified) Split per-vhost post config for OCSP stapling into configuring and ... Tue, 25 Sep 2018 06:32:50 GMT Fiona Klute [994200a] * src/gnutls_cache.c (modified) * test/tests/27_OCSP_server/apache.conf (modified) Set up shmcb OCSP cache by default The shmcb socache doesn't ... Wed, 30 May 2018 06:12:49 GMT Fiona Klute [3358887] * src/gnutls_cache.c (modified) * src/gnutls_cache.h (modified) Assign cache configuration to server only if successful The ... Wed, 16 May 2018 17:19:05 GMT Fiona Klute [eced11a] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) Remove server variable ocsp_cache_enable There is no need to ... Wed, 16 May 2018 06:35:28 GMT Fiona Klute [92b5f4d] * src/gnutls_ocsp.c (modified) Use the OCSP cache for responses Wed, 16 May 2018 06:12:08 GMT Fiona Klute [babdb29] * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) * src/gnutls_cache.h (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_ocsp.h (modified) Initialize and clean up the OCSP cache, following session cache patterns Tue, 08 May 2018 19:04:41 GMT Fiona Klute [d036f96] * src/gnutls_config.c (modified) * src/mod_gnutls.c (modified) * test/tests/27_OCSP_server/apache.conf (modified) Add configuration directive GnuTLSOCSPCache (no-op for now) First ... Mon, 07 May 2018 16:47:32 GMT Fiona Klute [2d454a2] * src/gnutls_cache.c (modified) Macro for session cache name Thu, 03 May 2018 16:23:55 GMT Fiona Klute [72377cf] * src/gnutls_hooks.c (modified) Always set SSL_COMPRESS_METHOD=NULL with GnuTLS >= 3.6.0 ... Wed, 02 May 2018 18:30:26 GMT Fiona Klute [ce5f776] * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) * src/gnutls_cache.h (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) Move config and post_config of a cache instance to separate functions ... Mon, 30 Apr 2018 15:08:29 GMT Fiona Klute [5ab2868] * include/mod_gnutls.h.in (modified) * src/gnutls_io.c (modified) Remove unused server variable The mgs_srvconf_rec.non_ssl_request ... Sun, 29 Apr 2018 19:19:05 GMT Fiona Klute [f52f1b4] * doc/mod_gnutls_manual.mdwn (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * test/tests/03_cachetimeout_in_vhost/apache.conf (modified) * test/tests/03_cachetimeout_in_vhost/fail.server (deleted) * test/tests/03_cachetimeout_in_vhost/output (added) Allow GnuTLSCacheTimeout in virtual host config I'm not sure if ... Sun, 29 Apr 2018 10:33:34 GMT Fiona Klute [d8d6b1e] * src/gnutls_cache.c (modified) Reallocate buffer to data size after fetching from socache There is ... Sun, 29 Apr 2018 10:01:12 GMT Fiona Klute [a314ec9] * src/gnutls_cache.c (modified) * src/gnutls_cache.h (modified) Store config pointer in struct mgs_cache for logging This way the ... Sat, 28 Apr 2018 21:52:56 GMT Fiona Klute [b94aee2] * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) Remove internal cache type enum The cache type is now transparently ... Thu, 26 Apr 2018 06:32:28 GMT Fiona Klute [adf36c3] * src/gnutls_cache.c (modified) Update documentation in gnutls_cache.c Wed, 25 Apr 2018 09:28:35 GMT Fiona Klute [41f9bcb] * src/gnutls_cache.c (modified) Use cache parameter in mgs_cache_store() and mgs_cache_fetch() The ... Tue, 24 Apr 2018 17:13:28 GMT Fiona Klute [ded2291] * src/gnutls_cache.c (modified) * src/gnutls_cache.h (modified) * src/gnutls_ocsp.c (modified) Switch generic cache store/fetch function pointers to constant ... Tue, 24 Apr 2018 16:30:33 GMT Fiona Klute [6bbd378] * configure.ac (modified) * include/mod_gnutls.h.in (modified) * m4/apr_memcache.m4 (deleted) * src/gnutls_cache.c (modified) * src/gnutls_config.c (modified) Remove special handling for APR memcache and leftover includes Tue, 24 Apr 2018 06:21:35 GMT Fiona Klute [0363315] * src/gnutls_cache.c (modified) Use cache mutex only if socache provider is not multiprocess/thread safe Tue, 24 Apr 2018 05:47:16 GMT Fiona Klute [14a6f41] * src/gnutls_ocsp.c (modified) Check for a cache during OCSP setup Mon, 23 Apr 2018 20:39:28 GMT Fiona Klute [de1ceab] * include/mod_gnutls.h.in (modified) * src/gnutls_cache.c (modified) * src/gnutls_cache.h (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/gnutls_ocsp.c (modified) * test/base_apache.conf (modified) * test/tests/00_basic/apache.conf (modified) * test/tests/27_OCSP_server/apache.conf (modified) Replace internal cache implementation with mod_socache Massively ... Sun, 22 Apr 2018 20:35:32 GMT Fiona Klute [0470e44] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_config.h (modified) * src/mod_gnutls.c (modified) * test/tests/27_OCSP_server/apache.conf (modified) Support common socache "type:config" style for GnuTLSCache directive Sun, 22 Apr 2018 17:04:41 GMT Fiona Klute [7921dc7] * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_hooks.c (modified) * src/mod_gnutls.c (modified) * test/Makefile.am (modified) * test/gnutls_openpgp_support.c (deleted) * test/test-14_basic_openpgp.bash (modified) * test/tests/14_basic_openpgp/apache.conf (deleted) * test/tests/14_basic_openpgp/gnutls-cli.args (deleted) * test/tests/14_basic_openpgp/input (deleted) * test/tests/14_basic_openpgp/output (deleted) * test/tests/Makefile.am (modified) Remove OpenPGP authentication OpenPGP authentication was removed ... Sat, 21 Apr 2018 19:51:51 GMT Fiona Klute [2246a84] * doc/mod_gnutls_manual.mdwn (modified) * include/mod_gnutls.h.in (modified) * src/gnutls_config.c (modified) * src/gnutls_ocsp.c (modified) * src/gnutls_ocsp.h (modified) * src/mod_gnutls.c (modified) Make automatic OCSP cache updates and fuzz time configurable Fri, 20 Apr 2018 20:14:00 GMT Fiona Klute [fa6d0bb] * src/gnutls_hooks.c (modified) Initialize OCSP stapling only if mod_gnutls is enabled for a virtual ... Thu, 19 Apr 2018 19:27:08 GMT Fiona Klute [f233a23] * src/gnutls_ocsp.c (modified) Logic for fuzzy OCSP update timing If a server has a lot of virtual ... Thu, 19 Apr 2018 19:23:24 GMT Fiona Klute [3d30543] * src/gnutls_ocsp.c (modified) Write failure cache entries from asynchronous OCSP updates This ... Thu, 19 Apr 2018 19:22:11 GMT Fiona Klute [61e802c] * src/gnutls_ocsp.c (modified) Simplify mgs_async_ocsp_update Always use OCSP mutex for updates, ... Thu, 19 Apr 2018 19:20:16 GMT Fiona Klute [3c475e0] * src/mod_gnutls.c (modified) Ensure that mod_gnutls child_init runs before mod_watchdog's Our ... Thu, 19 Apr 2018 19:09:31 GMT Fiona Klute [103cafa] * src/gnutls_ocsp.c (modified) Remove extra "OCSP failed" log entry while writing failure to cache ... Thu, 19 Apr 2018 19:09:04 GMT Fiona Klute [a85de63] * src/gnutls_cache.c (modified) * src/gnutls_cache.h (modified) * src/gnutls_ocsp.c (modified) Make cache_fetch_func work without a connection context This is ... Thu, 19 Apr 2018 18:50:49 GMT Fiona Klute [c34a68b] * src/gnutls_cache.c (modified) dbm_cache_fetch: Prepare for signature without connection context ... Thu, 19 Apr 2018 18:49:53 GMT Fiona Klute [3656df0] * src/gnutls_ocsp.c (modified) mgs_cache_ocsp_failure: Make expiry timeout an argument A failure ... Thu, 19 Apr 2018 18:47:40 GMT Fiona Klute [6945efb] * src/gnutls_cache.c (modified) mc_cache_fetch: Don't require a connection context Thu, 19 Apr 2018 18:46:25 GMT Fiona Klute [3381559] * src/gnutls_ocsp.c (modified) Adjust intervals for async OCSP updates based on cache expiry or failure Thu, 19 Apr 2018 18:45:18 GMT Fiona Klute [0cdfb19] * src/gnutls_watchdog.h (modified) Documentation for mgs_new_singleton_watchdog Thu, 19 Apr 2018 18:44:26 GMT Fiona Klute [a467635] * src/gnutls_ocsp.c (modified) Enable asynchronous OCSP updates Asynchronous updates are always ...