|
|
@e819f13
|
3 years |
fiona.klute |
Unconditionally enable early SNI parsing
All supported GnuTLS …
asynciomainproxy-ticket
|
|
|
@c33b0ea
|
3 years |
fiona.klute |
Test per-directory "GnuTLSClientVerify request"
The request must …
asynciomainproxy-ticket
|
|
|
@44188aa
|
3 years |
fiona.klute |
Test post-handshake authentication with an untrusted certificate
asynciomainproxy-ticket
|
|
|
@4f2c988
|
3 years |
fiona.klute |
Send 403 if required client post-handshake authentication fails
This …
asynciomainproxy-ticket
|
|
|
@4fe52e6
|
3 years |
fiona.klute |
Use gnutls-cli inline command to test TLS session resumption
This …
asynciomainproxy-ticket
|
|
|
@9db4dcd
|
3 years |
fiona.klute |
Handle GNUTLS_E_GOT_APPLICATION_DATA on gnutls_reauth()
Pending …
asynciomainproxy-ticket
|
|
|
@6fa6095
|
3 years |
fiona.klute |
Partial post-handshake auth support
Needs proper error handling, …
asynciomainproxy-ticket
|
|
|
@a9e0738
|
3 years |
fiona.klute |
Test 28_HTTP2_support: Log curl output regardless of failure
asynciomainproxy-ticket
|
|
|
@33fa7d5
|
3 years |
fiona.klute |
Ensure stapling is active for server certificates with "must-staple"
…
asynciomainproxy-ticket
|
|
|
@587642d
|
3 years |
fiona.klute |
OCSP test: Prevent single-second refresh intervals
With the default …
asynciomainproxy-ticket
|
|
|
@221ffe5
|
3 years |
fiona.klute |
Test 28_HTTP2_support: Fix skip message in case of missing curl
asynciomainproxy-ticket
|
|
|
@ff039b1
|
3 years |
fiona.klute |
Test suite: Replace softhsm.bash with Python code
With this all test …
asynciomainproxy-ticket
|
|
|
@0f52d48
|
3 years |
fiona.klute |
Switch most tests to hooks.py instead of preconditions in test scripts …
asynciomainproxy-ticket
|
|
|
@baa0056
|
3 years |
fiona.klute |
Test 30_ip_based_vhosts: Move to prepare_env hook
asynciomainproxy-ticket
|
|
|
@dda0f4a
|
3 years |
fiona.klute |
Replace comments in test scripts with connection descriptions
asynciomainproxy-ticket
|
|
|
@8666b50
|
3 years |
fiona.klute |
Implement "prepare_env" hook for tests
Test 15_basic_msva uses it to …
asynciomainproxy-ticket
|
|
|
@d14d7d1
|
3 years |
fiona.klute |
Test 16_view-status hooks: Use raw strings for regular expressions
asynciomainproxy-ticket
|
|
|
@63e4efe
|
3 years |
fiona.klute |
Test suite: Remove unused data files
* ffdhe3072.pem was loaded, but …
asynciomainproxy-ticket
|
|
|
@0699668
|
3 years |
fiona.klute |
Use post_check hook for test 27_OCSP_server
asynciomainproxy-ticket
|
|
|
@f246f00
|
3 years |
fiona.klute |
Use post_check hook for test 14_resume_session
asynciomainproxy-ticket
|
|
|
@905063e
|
3 years |
fiona.klute |
Simplify 16_view-status post_check hook using mgstest.require_match()
asynciomainproxy-ticket
|
|
|
@0f65ea9
|
3 years |
fiona.klute |
Use post_check hook in 28_HTTP2_support
asynciomainproxy-ticket
|
|
|
@2d25c1c
|
3 years |
fiona.klute |
Test 16_view-status: Use post_check hook for GnuTLS 3.6.11 …
asynciomainproxy-ticket
|
|
|
@52636ee
|
3 years |
fiona.klute |
TestReq10: Use superclass constructor and _from_yaml function
This …
asynciomainproxy-ticket
|
|
|
@7089dbc
|
3 years |
fiona.klute |
Rename TestRaw10 to TestReq10 and adjust the YAML tag
asynciomainproxy-ticket
|
|
|
@0909c92
|
3 years |
fiona.klute |
Add hooks system to the test runner
With this all tests can use …
asynciomainproxy-ticket
|
|
|
@eb84747
|
3 years |
fiona.klute |
TestConnection?: Add optional "description" attribute for logging
asynciomainproxy-ticket
|
|
|
@0e069b6
|
3 years |
fiona.klute |
Support plain HTTP in the Python test framework
This makes it …
asynciomainproxy-ticket
|
|
|
@e3e0de1
|
3 years |
fiona.klute |
https-test-client.py: Make host and port configurable per connection
…
asynciomainproxy-ticket
|
|
|
@1c2b936
|
3 years |
fiona.klute |
Test suite: Use the new Python-based test client
asynciomainproxy-ticket
|
|
|
@dec05c4
|
3 years |
fiona.klute |
Test suite: Enable HTTP keep-alive in the test server
Test using the …
asynciomainproxy-ticket
|
|
|
@e376ed8
|
3 years |
fiona.klute |
Merge branch 'subca'
asynciomainproxy-ticket
|
|
|
@20a20df
|
3 years |
krista.celestia |
Test suite: ignore "Content-Length" header
Do not check the returned …
asynciomainproxy-ticket
|
|
|
@a55742a
|
3 years |
fiona.klute |
Test suite: Remove URLs from expected error responses
Apache HTTPD …
asynciomainproxy-ticket
|
|
|
@7cfc02b
|
4 years |
fiona.klute |
Test suite: Add an OCSP responder for the sub CA
All CAs use the same …
asynciomainproxy-ticket
|
|
|
@f828974
|
4 years |
fiona.klute |
Test suite: Build & use certificate chain for the authority/subca/server ID
asynciomainproxy-ticket
|
|
|
@6dab61d
|
4 years |
fiona.klute |
Test suite: Move rogueclient ID into rogueca dir, share recipe with …
asynciomainproxy-ticket
|
|
|
@59afe51
|
4 years |
fiona.klute |
Test suite: Move directory for imposter identity into authority directory
asynciomainproxy-ticket
|
|
|
@c825c3a
|
4 years |
fiona.klute |
Test suite: Move directory for server identity into authority directory
asynciomainproxy-ticket
|
|
|
@e5546be
|
4 years |
fiona.klute |
Test suite: Move directory for client identity into authority …
asynciomainproxy-ticket
|
|
|
@f674424
|
4 years |
fiona.klute |
First prototype of proxy ALPN support
The current code assumes that …
asynciodebian/mastermainproxy-ticket
|
|
|
@0e55076
|
4 years |
fiona.klute |
Merge additional tests for vhost checks
Thanks Krista!
asynciodebian/mastermainproxy-ticket
|
|
|
@dcc053e
|
4 years |
krista.celestia |
Add test for missing Host header, SNI matching server alias
Test that …
asynciodebian/mastermainproxy-ticket
|
|
|
@5cf8e99
|
4 years |
krista.celestia |
Add tests for virtual host server aliases
Test matching and …
asynciodebian/mastermainproxy-ticket
|
|
|
@a939015
|
4 years |
fiona.klute |
Test early SNI in HTTP/2 test (if enabled)
asynciodebian/mastermainproxy-ticket
|
|
|
@99eb567
|
4 years |
fiona.klute |
Test suite: Use static output instead of CGI for test …
asynciodebian/mastermainproxy-ticket
|
|
|
@0062ede
|
4 years |
fiona.klute |
Test for IP-based virtual hosts
Mostly to make sure the new "same …
asynciodebian/mastermainproxy-ticket
|
|
|
@20c3f7b
|
4 years |
fiona.klute |
Expect test for vhost check to pass
asynciodebian/mastermainproxy-ticket
|
|
|
@359f009
|
4 years |
fiona.klute |
Add test for vhost check
Expected to fail right now. The test …
asynciodebian/mastermainproxy-ticket
|
|
|
@60868d2
|
4 years |
fiona.klute |
Default to NORMAL for the GnuTLS priority settings
This simplifies …
asynciodebian/mastermainproxy-ticket
|
|
|
@1754503
|
4 years |
fiona.klute |
Test suite: Enable session tickets for session resumption test
TLS …
asynciodebian/mastermainproxy-ticket
|
|
|
@eb4cab7
|
4 years |
fiona.klute |
Test suite: Compare cipher suites to test the status page
Expecting a …
asynciodebian/mastermainproxy-ticket
|
|
|
@c33ef88
|
4 years |
fiona.klute |
Test suite: Use ciphers, not protocol versions for priority mismatch …
asynciodebian/mastermainproxy-ticket
|
|
|
@514d4d6
|
4 years |
fiona.klute |
Test suite: Two more compatibility fixes for GnuTLS 3.6.4
asynciodebian/mastermainproxy-ticket
|
|
|
@2ec3e54
|
4 years |
fiona.klute |
Test suite: Remove size of DH prime from variable dump
The variable …
asynciodebian/mastermainproxy-ticket
|
|
|
@cb6476c
|
4 years |
fiona.klute |
Enable OCSP stapling by default if possible
If the user hasn't …
asynciodebian/mastermainproxy-ticket
|
|
|
@994200a
|
4 years |
fiona.klute |
Set up shmcb OCSP cache by default
The shmcb socache doesn't require …
asynciodebian/mastermainproxy-ticket
|
|
|
@d036f96
|
5 years |
fiona.klute |
Add configuration directive GnuTLSOCSPCache (no-op for now)
First …
asynciodebian/mastermainproxy-ticket
|
|
|
@eaa8a9d
|
5 years |
fiona.klute |
Test suite: Fix list of dist files for test 03_cachetimeout_in_vhost
asynciodebian/mastermainproxy-ticket
|
|
|
@a6aa387
|
5 years |
fiona.klute |
Test suite: Update cache configuration, ensure unique cache paths
asynciodebian/mastermainproxy-ticket
|
|
|
@f52f1b4
|
5 years |
fiona.klute |
Allow GnuTLSCacheTimeout in virtual host config
I'm not sure if …
asynciodebian/mastermainproxy-ticket
|
|
|
@6c5c2ec
|
5 years |
fiona.klute |
Test for session resumption
asynciodebian/mastermainproxy-ticket
|
|
|
@de1ceab
|
5 years |
fiona.klute |
Replace internal cache implementation with mod_socache
Massively …
asynciodebian/mastermainproxy-ticket
|
|
|
@0470e44
|
5 years |
fiona.klute |
Support common socache "type:config" style for GnuTLSCache directive
asynciodebian/mastermainproxy-ticket
|
|
|
@7921dc7
|
5 years |
fiona.klute |
Remove OpenPGP authentication
OpenPGP authentication was removed from …
asynciodebian/mastermainproxy-ticket
|
|
|
@d50dac5
|
5 years |
fiona.klute |
New test case for HTTP/2 support
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@97d7c63
|
5 years |
thomas2.klute |
Test suite: Port config for proxy backend in Makefile and Apache …
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@94430e6
|
5 years |
thomas2.klute |
Test suite: Run a separate Apache instance for the OCSP responder
…
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@b8b1990
|
6 years |
thomas2.klute |
Use fixed DH parameters for tests that log DH prime length in CGI …
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@26ae700
|
6 years |
thomas2.klute |
Test suite: Remove NameVirtualHost? directives
According to the Apache …
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@e1c094c
|
6 years |
thomas2.klute |
Replace GnuTLSOCSPGraceTime with GnuTLSOCSPCacheTimeout
Configuring a …
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@4d4a406
|
7 years |
thomas2.klute |
New config option: GnuTLSOCSPStapling
This flag option …
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@4cc1edc
|
7 years |
thomas2.klute |
Remove pointless <If> from test server config
Apparently <If> is …
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@20f8e99
|
7 years |
thomas2.klute |
Provide full certificate chain to the server
The server will need CA …
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@94cb972
|
7 years |
thomas2.klute |
Minimal OCSP stapling implementation using externally provided …
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@c4d6e77
|
7 years |
thomas2.klute |
Test suite: New test case for simple HTTPS access with OCSP status check
asynciodebian/masterdebian/stretch-backportsmainproxy-ticketupstream
|
|
|
@5eb4544
|
7 years |
thomas2.klute |
Test suite: Search SoftHSM during ./configure, detect module for v1 or …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@7c0ccaf
|
7 years |
thomas2.klute |
Rename test "26_HTTPS_server_var" to "redirect_HTTP_to_HTTPS"
The new …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@8ac7c0d
|
7 years |
thomas2.klute |
Register "ssl_is_https" function for compatibility with mod_rewrite
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@06f8005
|
7 years |
thomas2.klute |
Test suite: Fix file lists for distribution archive creation
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@db6bac4
|
7 years |
thomas2.klute |
PKCS #11 test case: Generate temporary SoftHSM config from …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@dc55c77
|
7 years |
thomas2.klute |
Test suite: Update priorities in status test for GnuTLS 3.4 …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@c0bb823
|
7 years |
thomas2.klute |
Test suite: Create rogue client certificate for client auth test
Test …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@29d3311
|
7 years |
thomas2.klute |
New test case regarding priorities: Disable TLS 1.0
This test case is …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@bc539d5
|
7 years |
thomas2.klute |
Implement short message for mod_status reports
Until now the flags …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@948c181
|
7 years |
thomas2.klute |
Test suite: Fix include path for proxy_backend.conf
The file is …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@62ba7f0
|
7 years |
thomas2.klute |
Test suite: Move common config for proxy backend servers into a shared file
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@3e04c0b
|
7 years |
thomas2.klute |
Test suite: Don't restrict IP addresses of virtual hosts
The IP …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@a733a90
|
8 years |
thomas2.klute |
Test suite: Use HTTP/1.0 for CGI and mod_status tests
These tests …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@a2e3c33
|
8 years |
thomas2.klute |
Rename option SSLProxyEngine to GnuTLSProxyEngine
This matches the …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@7813802
|
8 years |
thomas2.klute |
Test suite: Use AP_LIBEXECDIR to find Apache modules
Distributions …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@33af2b7
|
8 years |
thomas2.klute |
Test suite: Add tests to "dist" target and support VPATH builds
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@3f00958
|
8 years |
thomas2.klute |
New test case: PKCS #11 URLs for server key and certificate
The new …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@f030883
|
8 years |
thomas2.klute |
Set GnuTLS priorities for proxy connections separately
Until now, …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@8b472af
|
8 years |
thomas2.klute |
Use server root for file paths in TLS proxy config
This is what users …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@907ae8f
|
8 years |
thomas2.klute |
New test case: Proxy server detects revoked back end cert using CRL
…
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@a213967
|
8 years |
thomas2.klute |
Test suite: Filter "Server" header when checking output
Like "Date", …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@ed82a6a
|
8 years |
thomas2.klute |
Two more test cases for TLS reverse proxy and test locking fix
New …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@6e6a4e4
|
8 years |
thomas2.klute |
Test case for TLS reverse proxy
This commit adds a simple test for a …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|
@eea8a16
|
8 years |
thomas2.klute |
New test case: TLS client auth with invalid certificate
Commit …
asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
|
|
|