Commit Graph

65 Commits (01f9debec31c8696d324db3d1b6a092a4e853077)

Author SHA1 Message Date
Stefan Bühler 0f96222e7e [ssl] add option to honor server cipher order, true by default (fixes #2364)
11 years ago
Stefan Bühler a94bdd07df [ssl] count renegotiations to prevent client renegotiations
11 years ago
Stefan Bühler f434d514ad Limit amount of bytes we send in one go; fixes stalling in one connection and timeouts on slow systems.
12 years ago
Stefan Bühler f610f894a3 ssl: Support for Diffie-Hellman and Elliptic-Curve Diffie-Hellman key exchange (fixes #2301, #2246, #2239)
12 years ago
Stefan Bühler e23e999089 bind to IPV6-only if ipv6 address was specified (http://redmine.lighttpd.net/projects/lighttpd/wiki/IPv6-Config)
13 years ago
Stefan Bühler f601b8028b Append to previous buffer in con read (fixes #2147, found by liming, CVE-2010-0295)
13 years ago
Stefan Bühler e430ce09bc export some SSL_CLIENT_* vars for client cert validation (fixes #1288, thx presbrey)
13 years ago
Stefan Bühler b987643307 Add SSL Client Certificate verification (#1288)
13 years ago
Peter Colberg 8b6dae4139 Add TLS servername indication (SNI) support (fixes #386, thx Peter Colberg <peter@colberg.org>)
13 years ago
Stefan Bühler 67cb38d0ca always define _GNU_SOURCE
13 years ago
Stefan Bühler 22e8b456a9 Fix header inclusion order, always include "config.h" before any system header
13 years ago
Stefan Bühler d69683ddb5 Remember keep-alive-idle in separate variable (fixes #1988)
13 years ago
Stefan Bühler fbdb305f8a Add server.breakagelog, a "special" stderr (fixes #1863)
14 years ago
Stefan Bühler 28e198d5a5 Use unsigned int (and T_CONFIG_INT) for max_request_size
14 years ago
Stefan Bühler 0d8c6accd7 Add T_CONFIG_INT for bigger integers from the config (needed for #1966)
14 years ago
Stefan Bühler 7ad4792357 Add support for "real" entropy from /dev/[u]random (fixes #1977)
14 years ago
Stefan Bühler 0226d4bf36 Add option to enable TCP_DEFER_ACCEPT (fixes #1447)
14 years ago
Stefan Bühler 1527160c69 Add support for pipe logging for server.errorlog (fixes #296)
14 years ago
Stefan Bühler def70d86e9 Remove the optional port info from SERVER_NAME (thx Mr_Bond)
14 years ago
Stefan Bühler a6218765c2 Fix some problems with more strict compilers (#1923)
14 years ago
Stefan Bühler 22bee5ad52 Silenced the annoying "request timed out" warning, enable with the "debug.log-timeouts" option (fixes #1529)
14 years ago
Stefan Bühler cb91487c8d Add option to ignore the "Expect: 100-continue" header instead of returning 417 Expectation failed (closes #1017)
14 years ago
Stefan Bühler 19588f6ee6 Hide some ssl errors per default, enable them with debug.log-ssl-noise (#397)
15 years ago
Elan Ruusamäe af4be7d0ce - HTTPS env var should be "on" when using mod_extforward and the X-Forwarded-Proto header is set. (#1499)
15 years ago
Jan Kneschke 3940c60e68 fixed aggressive caching of conditionals (#41)
16 years ago
Marcus Rückert 5a583661e3 - only generate the etag_flags once and store them in the connections
16 years ago
Jan Kneschke b2a96c959a added static-file.etags, etag.use-inode, etag.use-mtime,
16 years ago
Marcus Rückert e61146a740 - applied patch from sh@linux2go.dk (#1039)
16 years ago
Marcus Rückert 8cd1471cb3 - white space cleanup part 2 this time 1.4 ;)
17 years ago
Jan Kneschke 9de3807438 handle follow-symlink in the stat-cache
17 years ago
Jan Kneschke e9cc9ed36c fixed SSL_ERROR_WANT_READ handling
17 years ago
Marcus Rückert 657a024d53 - backport symlink patch in hard version to 1.4.11
17 years ago
Jan Kneschke a85ca5e0ef merged [1051], [1052], [1053], [1054], [1057], [1060], [1061], [1062]
17 years ago
Jan Kneschke 48ca389d89 - use a big SSL_read buffer which can read at least 16k + the pending bytes
17 years ago
Jan Kneschke 4afd2ae2af renamed server.force-lower-case-files to server.force-lowercase-filenams
17 years ago
Jan Kneschke ded1e9a834 cosmetics and added a comment about the order in the STATE enum
17 years ago
Jan Kneschke e2f4ccd343 added internals for the statistics framework
17 years ago
Jan Kneschke 2fe31be5c5 - next release is 1.4.9
17 years ago
Jan Kneschke b9b8a46f40 allow to bind the server to a unix-domain socket
17 years ago
Jan Kneschke 60ccbd89f7 fixed unsigned compares
17 years ago
Jan Kneschke 9404220490 chunkqueue can get a list of tempdirs which are tried to open a file at
17 years ago
Jan Kneschke e290b119db added startup-time selectable network-backend
17 years ago
Xuefer 9be1abfb85 an unset header is now treat as empty_string "" to make the conditional logic correct.
18 years ago
Jan Kneschke 1c09f28447 removed con->request.content (mem-buffer) by a chunk-queue
18 years ago
Jan Kneschke c440468249 max-request-size was not respected since a long time
18 years ago
Jan Kneschke b4d9d061c8 either remove include config.h or covered it in HAVE_CONFIG_H
18 years ago
Jan Kneschke 52125c82b8 check that we can really read the file
18 years ago
Jan Kneschke 5c20c426b7 added gracefull shutdown and max-connections
18 years ago
Jan Kneschke c7ec5012e0 added -m to set the location of the modules
18 years ago
Jan Kneschke d8394f7f2e moved code to mod_staticfile, mod_dirlisting and mod_indexfile
18 years ago