Timeline



Feb 3, 2020:

2:37 AM Changeset in mod_gnutls [6e41fcb]proxy-ticketmod_gnutls/0.10.0 by Fiona Klute <fiona.klute@…>
Release version 0.10.0

Feb 2, 2020:

9:01 AM Changeset in mod_gnutls [c4a6889]proxy-ticket by Fiona Klute <fiona.klute@…>
CI: Add a Debian Sid (unstable) build
7:19 AM Changeset in mod_gnutls [bfef00c]proxy-ticket by Fiona Klute <fiona.klute@…>
Show the right GnuTLS version when using ./configure --with-gnutls-dev …

Feb 1, 2020:

12:33 PM Changeset in mod_gnutls [1a6eeae]proxy-ticket by Fiona Klute <fiona.klute@…>
Allow overriding the default HTTPD mutex via configure The custom …
12:11 PM Changeset in mod_gnutls [2794787]proxy-ticket by Fiona Klute <fiona.klute@…>
Pass TEST_IP and TEST_HOST to "make distcheck" This should allow …
11:17 AM Changeset in mod_gnutls [bfb0168]proxy-ticket by Fiona Klute <fiona.klute@…>
CI: Don't run Valgrind tests on Markdown-only changes outside doc/
11:02 AM Changeset in mod_gnutls [883efd2]proxy-ticket by Fiona Klute <fiona.klute@…>
Document how to override which Valgrind suppressions to use
10:51 AM Changeset in mod_gnutls [221e6b9]proxy-ticket by Fiona Klute <fiona.klute@…>
Valgrind: Remove suppression for local SoftHSM build
10:49 AM Changeset in mod_gnutls [451ca3e]proxy-ticket by Fiona Klute <fiona.klute@…>
Valgrind: Suppression for leak from p11_kit_module_load in child processes
10:47 AM Changeset in mod_gnutls [931da2d]proxy-ticket by Fiona Klute <fiona.klute@…>
Get deeper stack traces from Valgrind
8:27 AM Changeset in mod_gnutls [10100a2]proxy-ticket by Fiona Klute <fiona.klute@…>
Remove keyEncipherment flag from test certificates The days of plain …

Jan 31, 2020:

3:21 PM Changeset in mod_gnutls [9071889]proxy-ticket by Fiona Klute <fiona.klute@…>
Remove pointless set-once process pool userdata I know some modules …
12:53 PM Changeset in mod_gnutls [4b1687d]proxy-ticket by Fiona Klute <fiona.klute@…>
Changelog: Note libmsv/libcurl memory issue as known

Jan 30, 2020:

10:37 AM Changeset in mod_gnutls [38bf158]proxy-ticket by Fiona Klute <fiona.klute@…>
Documentation for testing with Valgrind
10:13 AM Changeset in mod_gnutls [0fc654d]proxy-ticket by Fiona Klute <fiona.klute@…>
Update README * Include "make check" in build instructions * Fix …
8:28 AM Changeset in mod_gnutls [8b14b13]proxy-ticket by Fiona Klute <fiona.klute@…>
Small .gitignore cleanup
7:46 AM Changeset in mod_gnutls [ee6351d]proxy-ticket by Fiona Klute <fiona.klute@…>
Test suite: Use mod_mpm_event by default The "event" MPM module is …

Jan 29, 2020:

10:00 AM Changeset in mod_gnutls [57dec86]proxy-ticket by Fiona Klute <fiona.klute@…>
CI: Use matrix instead of container-specific jobs
9:26 AM Changeset in mod_gnutls [8c63a1c]proxy-ticket by Fiona Klute <fiona.klute@…>
Another round of the getaddrinfo Valgrind suppression
9:05 AM Changeset in mod_gnutls [4482da4]proxy-ticket by Fiona Klute <fiona.klute@…>
Test suite: Set global ServerName? This gets rid of the annoying …
9:03 AM Changeset in mod_gnutls [c756f08]proxy-ticket by Fiona Klute <fiona.klute@…>
Make apr_getaddrinfo_leak Valgrind suppression more generic This …
8:42 AM Changeset in mod_gnutls [4f81704]proxy-ticket by Fiona Klute <fiona.klute@…>
CI: Use "pthread" mutex for non-Valgrind builds, too I've switched …
8:34 AM Changeset in mod_gnutls [732cdb11]proxy-ticket by Fiona Klute <fiona.klute@…>
CI: Run Valgrind tests
7:47 AM Changeset in mod_gnutls [1d778ce]proxy-ticket by Fiona Klute <fiona.klute@…>
Run Valgrind with "--gen-suppressions=all" This makes it easier to …
7:44 AM Changeset in mod_gnutls [cfb43fc]proxy-ticket by Fiona Klute <fiona.klute@…>
Use Valgrind "-v" instead of "-s" for compatibility with Debian Buster …
7:15 AM Changeset in mod_gnutls [7c89e8a]proxy-ticket by Fiona Klute <fiona.klute@…>
Make Valgrind suppressions work without Apache and GnuTLS debug …

Jan 28, 2020:

4:50 PM Changeset in mod_gnutls [fe3564a]proxy-ticket by Fiona Klute <fiona.klute@…>
configure.as: Use AS_IF instead of shell if-blocks around macros Some …
5:23 AM Changeset in mod_gnutls [d1d1e3a]proxy-ticket by Fiona Klute <fiona.klute@…>
Valgrind tests: Use --keep-debuginfo=yes By default Valgrind drops …
5:01 AM Changeset in mod_gnutls [f73eeb7]proxy-ticket by Fiona Klute <fiona.klute@…>
Valgrind tests: More suppressions for issues outside mod_gnutls
4:14 AM Changeset in mod_gnutls [005b185]proxy-ticket by Fiona Klute <fiona.klute@…>
Fail tests running with Valgrind if Valgrind reports errors
4:06 AM Changeset in mod_gnutls [e46d203]proxy-ticket by Fiona Klute <fiona.klute@…>
Update forgotten license headers
3:37 AM Changeset in mod_gnutls [99c61f9]proxy-ticket by Fiona Klute <fiona.klute@…>
Add configure option --enable-valgrind-test to run tests with Valgrind …

Jan 27, 2020:

2:25 PM Changeset in mod_gnutls [c5f8e85]proxy-ticket by Fiona Klute <fiona.klute@…>
Manual: Fix circular reference in GnuTLSOCSPCache section Thanks to …
2:25 AM Changeset in mod_gnutls [c4ba2b60]proxy-ticket by Fiona Klute <fiona.klute@…>
Test suite: Automatically detect required modules Which modules are …

Jan 26, 2020:

3:36 PM Changeset in mod_gnutls [c05b8c5]proxy-ticket by Fiona Klute <fiona.klute@…>
TestService?: Preserve the child process' return code
1:42 PM Changeset in mod_gnutls [422eade]proxy-ticket by Fiona Klute <fiona.klute@…>
Support optional timeout for TestService?.wait()
1:36 PM Changeset in mod_gnutls [264ab17]proxy-ticket by Fiona Klute <fiona.klute@…>
mgstest.services: Remove code for handling forking services No longer …
1:23 PM Changeset in mod_gnutls [e2200db]proxy-ticket by Fiona Klute <fiona.klute@…>
Test suite: Always run Apache with "-DFOREGROUND" This simplifies …
12:56 PM Changeset in mod_gnutls [72ebe64]proxy-ticket by Fiona Klute <fiona.klute@…>
runtest.py: Support for running Apache with Valgrind Not used by …
8:11 AM Changeset in mod_gnutls [f042405]proxy-ticket by Fiona Klute <fiona.klute@…>
Update changelog and version for 0.10.0
8:01 AM Changeset in mod_gnutls [47c2384]proxy-ticket by Fiona Klute <fiona.klute@…>
Documentation: OCSP multi-stapling works only for consecutive certificates

Jan 25, 2020:

5:04 PM Changeset in mod_gnutls [8daef10]proxy-ticket by Fiona Klute <fiona.klute@…>
Update documentation on client authentication
4:15 PM Changeset in mod_gnutls [f51d359]proxy-ticket by Fiona Klute <fiona.klute@…>
Remove obsolete restrictions on HTTP/2 from documentation GnuTLS …
11:03 AM Changeset in mod_gnutls [e819f13]proxy-ticket by Fiona Klute <fiona.klute@…>
Unconditionally enable early SNI parsing All supported GnuTLS …
10:29 AM Changeset in mod_gnutls [f4f837a]proxy-ticket by Fiona Klute <fiona.klute@…>
CI: Ignore packaging branches for simple build If anything they …
9:15 AM Changeset in mod_gnutls [07fc5d3]proxy-ticket by Fiona Klute <fiona.klute@…>
CI: Use job-specific names for debug artifacts
8:51 AM Changeset in mod_gnutls [c33b0ea]proxy-ticket by Fiona Klute <fiona.klute@…>
Test per-directory "GnuTLSClientVerify request" The request must …
8:48 AM Changeset in mod_gnutls [0be2505]proxy-ticket by Fiona Klute <fiona.klute@…>
Nice names for log storage actions
7:40 AM Changeset in mod_gnutls [2cc53cb]proxy-ticket by Fiona Klute <fiona.klute@…>
Add Fedora CI build
6:38 AM Changeset in mod_gnutls [f4ac390e]proxy-ticket by Fiona Klute <fiona.klute@…>
Simple CI build
6:26 AM Changeset in mod_gnutls [442c6a6]proxy-ticket by Fiona Klute <fiona.klute@…>
Test suite: Detect Apache shutdown by PID file Wait for the PID file …

Jan 24, 2020:

4:22 PM Changeset in mod_gnutls [7543db4]proxy-ticket by Fiona Klute <fiona.klute@…>
Remove debug output of raw test connection config
4:19 PM Changeset in mod_gnutls [44188aa]proxy-ticket by Fiona Klute <fiona.klute@…>
Test post-handshake authentication with an untrusted certificate
3:53 PM Changeset in mod_gnutls [4f2c988]proxy-ticket by Fiona Klute <fiona.klute@…>
Send 403 if required client post-handshake authentication fails This …

Jan 23, 2020:

8:02 AM Changeset in mod_gnutls [4fe52e6]proxy-ticket by Fiona Klute <fiona.klute@…>
Use gnutls-cli inline command to test TLS session resumption This …

Jan 22, 2020:

12:39 PM Changeset in mod_gnutls [f94938c]proxy-ticket by Fiona Klute <fiona.klute@…>
Nicer logging for post-handshake authentication

Jan 21, 2020:

3:41 PM Changeset in mod_gnutls [fcad37b]proxy-ticket by Fiona Klute <fiona.klute@…>
Retry gnutls_reauth() on transport interruptions
3:24 PM Changeset in mod_gnutls [9db4dcd]proxy-ticket by Fiona Klute <fiona.klute@…>
Handle GNUTLS_E_GOT_APPLICATION_DATA on gnutls_reauth() Pending …
2:53 PM Changeset in mod_gnutls [4a22ee6]proxy-ticket by Fiona Klute <fiona.klute@…>
Fix speculative reads using cached data The rollback buffer …
2:21 PM Changeset in mod_gnutls [1c76ea7]proxy-ticket by Fiona Klute <fiona.klute@…>
mgstest.tests: Encode request body as utf-8 HTTPConnection.request() …
2:29 AM Changeset in mod_gnutls [6fa6095]proxy-ticket by Fiona Klute <fiona.klute@…>
Partial post-handshake auth support Needs proper error handling, …
12:55 AM Changeset in mod_gnutls [e24e3bf9]proxy-ticket by Fiona Klute <fiona.klute@…>
Rewrite authz hook Using the effective mode simplifies the code a …

Jan 16, 2020:

2:50 PM Changeset in mod_gnutls [3b2edd6]proxy-ticket by Fiona Klute <fiona.klute@…>
Use GnuTLS' certificate status text instead of hard-coded cases …
2:16 PM Changeset in mod_gnutls [ee2854b]proxy-ticket by Fiona Klute <fiona.klute@…>
Remove a forgotten "return OK" in mgs_cert_verify See …
12:38 PM Changeset in mod_gnutls [99196d9]proxy-ticket by Fiona Klute <fiona.klute@…>
Reauthentication: Much simpler check for HTTP/2 Integer comparison …
12:35 PM Changeset in mod_gnutls [a9e0738]proxy-ticket by Fiona Klute <fiona.klute@…>
Test 28_HTTP2_support: Log curl output regardless of failure

Jan 15, 2020:

11:14 AM Changeset in mod_gnutls [0dc1a31]proxy-ticket by Fiona Klute <fiona.klute@…>
Always return DECLINED instead of OK from mgs_cert_verify The return …
3:44 AM Changeset in mod_gnutls [346c03b]proxy-ticket by Fiona Klute <fiona.klute@…>
Prohibit TLS renegotiation for HTTP/2 connections (RFC 7540, section 9.2.1)

Jan 14, 2020:

4:25 PM Changeset in mod_gnutls [407ca6e]proxy-ticket by Fiona Klute <fiona.klute@…>
TestRequest? and TestReq10: Support request body This will allow …
4:21 AM Changeset in mod_gnutls [b22def6]proxy-ticket by Fiona Klute <fiona.klute@…>
Remove SIGPIPE signal block There's no discernible reason to keep …
4:04 AM Changeset in mod_gnutls [05e2d9e]proxy-ticket by Fiona Klute <fiona.klute@…>
Move function declarations for gnutls_io.c into a separate header
3:30 AM Changeset in mod_gnutls [cc748329]proxy-ticket by Fiona Klute <fiona.klute@…>
Update Changelog

Jan 13, 2020:

1:08 PM Changeset in mod_gnutls [adcd021]proxy-ticket by Fiona Klute <fiona.klute@…>
Small documentation updates
10:52 AM Changeset in mod_gnutls [546bf35]proxy-ticket by Fiona Klute <fiona.klute@…>
Update documentation on OCSP stapling
6:55 AM Changeset in mod_gnutls [9bc842e]proxy-ticket by Fiona Klute <fiona.klute@…>
Update documentation for GnuTLSOCSPResponseFile

Jan 12, 2020:

4:34 PM Changeset in mod_gnutls [33fa7d5]proxy-ticket by Fiona Klute <fiona.klute@…>
Ensure stapling is active for server certificates with "must-staple" …
10:02 AM Changeset in mod_gnutls [5c9ca6b]proxy-ticket by Fiona Klute <fiona.klute@…>
Ensure sc->ocsp and sc->ocsp_num are always initialized They should …
10:01 AM Changeset in mod_gnutls [a3e0f7b]proxy-ticket by Fiona Klute <fiona.klute@…>
Support a list of files for the GnuTLSOCSPResponseFile option This …
5:27 AM Changeset in mod_gnutls [845c112]proxy-ticket by Fiona Klute <fiona.klute@…>
Async OCSP updates for multi-stapling There's now one mod_watchdog …
3:54 AM Changeset in mod_gnutls [587642d]proxy-ticket by Fiona Klute <fiona.klute@…>
OCSP test: Prevent single-second refresh intervals With the default …

Jan 11, 2020:

5:37 PM Changeset in mod_gnutls [c446ca5]proxy-ticket by Fiona Klute <fiona.klute@…>
Small cleanups (use mgs_ocsp_data_t, update copyright header)
4:49 PM Changeset in mod_gnutls [ce987dc]proxy-ticket by Fiona Klute <fiona.klute@…>
Log number of certificates in chain that OCSP stapling is enabled for
4:41 PM Changeset in mod_gnutls [1aad1d7]proxy-ticket by Fiona Klute <fiona.klute@…>
Consider stapling configured if it's configured for one certificate …
3:30 PM Changeset in mod_gnutls [1c3853a]proxy-ticket by Fiona Klute <fiona.klute@…>
Minimal multi-staple implementation Works, but has limitations: * …
12:59 PM Changeset in mod_gnutls [08ba205]proxy-ticket by Fiona Klute <fiona.klute@…>
Turn per-vhost OCSP data into an array Size 1 for now, but it's a …
12:05 PM Changeset in mod_gnutls [4e60dd8]proxy-ticket by Fiona Klute <fiona.klute@…>
Handle initialization of the OCSP data structure in one place This …
11:49 AM Changeset in mod_gnutls [de9b100]proxy-ticket by Fiona Klute <fiona.klute@…>
OCSP config: Check if cache is available before processing certificate …
11:39 AM Changeset in mod_gnutls [cf6f974]proxy-ticket by Fiona Klute <fiona.klute@…>
mgs_get_ocsp_response: Accept request information from …
11:26 AM Changeset in mod_gnutls [98b37a1]proxy-ticket by Fiona Klute <fiona.klute@…>
mgs_get_ocsp_response: Consistently use "sc" variable The "sc = …
10:57 AM Changeset in mod_gnutls [9418c1e]proxy-ticket by Fiona Klute <fiona.klute@…>
mgs_cache_ocsp_failure: Require explicit struct mgs_ocsp_data
10:53 AM Changeset in mod_gnutls [06dcf89]proxy-ticket by Fiona Klute <fiona.klute@…>
mgs_cache_ocsp_response: Require explicit struct mgs_ocsp_data
10:45 AM Changeset in mod_gnutls [75f2d96]proxy-ticket by Fiona Klute <fiona.klute@…>
check_ocsp_response: Require explicit struct mgs_ocsp_data The …
10:40 AM Changeset in mod_gnutls [e798149]proxy-ticket by Fiona Klute <fiona.klute@…>
do_ocsp_request: Require responder URI This method just handles a …
10:40 AM Changeset in mod_gnutls [bdd10be]proxy-ticket by Fiona Klute <fiona.klute@…>
mgs_create_ocsp_request: Require explicit struct mgs_ocsp_data This …
9:51 AM Changeset in mod_gnutls [a8374f7]proxy-ticket by Fiona Klute <fiona.klute@…>
Keep a reference to the certificate with OCSP data When implementing …

Jan 10, 2020:

5:03 PM Changeset in mod_gnutls [20a3915]proxy-ticket by Fiona Klute <fiona.klute@…>
mgstest.softhsm: Remove unnecessary import

Jan 9, 2020:

5:44 PM Changeset in mod_gnutls [b2546f0]proxy-ticket by Fiona Klute <fiona.klute@…>
mgstest.softhsm: Include type when searching object URLs The p11tool …
5:21 PM Changeset in mod_gnutls [221ffe5]proxy-ticket by Fiona Klute <fiona.klute@…>
Test 28_HTTP2_support: Fix skip message in case of missing curl
4:37 PM Changeset in mod_gnutls [0da2c5d]proxy-ticket by Fiona Klute <fiona.klute@…>
Test suite: Update README and newtest script
3:26 PM Changeset in mod_gnutls [478767a]proxy-ticket by Fiona Klute <fiona.klute@…>
Generate test scripts instead of carrying static files
3:03 PM Changeset in mod_gnutls [ff039b1]proxy-ticket by Fiona Klute <fiona.klute@…>
Test suite: Replace softhsm.bash with Python code With this all test …
11:43 AM Changeset in mod_gnutls [60ed7d1]proxy-ticket by Fiona Klute <fiona.klute@…>
Allow the prepare_env hook to return a cleanup callback
9:49 AM Changeset in mod_gnutls [7e10018]proxy-ticket by Fiona Klute <fiona.klute@…>
runtest.py: Get Apache debug info before running prepare_env hook …
2:47 AM Changeset in mod_gnutls [573b810]proxy-ticket by Fiona Klute <fiona.klute@…>
mgstest.services: Use pathlib and conditional expressions Just a …
1:54 AM Changeset in mod_gnutls [278381d]proxy-ticket by Fiona Klute <fiona.klute@…>
Remove code for SoftHSM 1 support SoftHSM 1 has been unsupported for …
Note: See TracTimeline for information about the timeline view.