2
0
Fork 0
Commit Graph

1244 Commits (40169d5fc93305b7d6d5e0caee83ba7cb16c89f6)

Author SHA1 Message Date
Stefan Bühler 40169d5fc9 [autobuild] fix renamed header ssl_client_hello_parser.h 2013-08-18 11:15:30 +02:00
Stefan Bühler a7f41b9e3b [core] check for disabled keep-alive early to send matching headers 2013-08-18 00:58:54 +02:00
Stefan Bühler 975ca1cddf [mod_gnutls] parse client hello for sni and protocol version
changing priority in gnutls post_client_hello didn't work with session
resumption
2013-08-18 00:55:24 +02:00
Stefan Bühler c51d89fe6e [mod_openssl] disable SSL3 by default 2013-08-09 00:23:33 +02:00
Stefan Bühler 0b8365ca29 [mod_openssl] enable DH and ECDH 2013-08-07 20:59:46 +02:00
Stefan Bühler b9d77f50a4 [core] add req_header.* actions 2013-08-07 18:05:16 +02:00
Stefan Bühler f3436e69f1 [gnutls] fix cleanup order (use-after-free) 2013-08-03 09:24:58 +02:00
Simon Lundström 859da7d7eb [plugin_core] docroot: show stat() errors for all entries when debug log is enabled 2013-07-31 21:54:05 +02:00
Stefan Bühler f64ba1bb72 [fastcgi] add debug prints before all fastcgi_reset calls, don't reset connection on stderr data if connection was already closed 2013-07-20 13:33:58 +02:00
Stefan Bühler 9aafe5aa2a [fetch] use signed integers for liFetchDatabase refcount 2013-07-20 11:49:49 +02:00
Stefan Bühler e762189fb5 [core] only use feature test macros on linux 2013-07-20 11:45:09 +02:00
Stefan Bühler bfa1395937 [throttle] fix connection throttling refill calculation 2013-07-18 13:05:09 +02:00
Stefan Bühler a1170b3aec [mod_gnutls] fix segfault when no sni backend was configured 2013-07-17 20:18:52 +02:00
Stefan Bühler d5bb6003dc include lighttpd/settings.h instead of base.h in common source 2013-06-25 16:38:17 +02:00
Stefan Bühler 8f42bbe7b4 [gnutls filter] fix cork handling 2013-06-25 16:20:18 +02:00
Stefan Bühler b9fadd3db3 [ssl_sni_parser] debugging, fix parser bug (wrong shift) 2013-06-10 12:12:36 +02:00
Stefan Bühler 85fc9dbb6d [mod_gnutls,fetch api] associate sni certs with dh params, fix fetch bug 2013-06-09 18:10:23 +02:00
Stefan Bühler 796f6b1547 [mod_gnutls] send alerts instead of aborting, allow safe renegotiations 2013-06-09 16:15:43 +02:00
Stefan Bühler 3d86ada352 add ssl_sni_parser.h to make dist 2013-06-08 23:18:39 +02:00
Stefan Bühler 92f0a5f237 [mod_gnutls] add sni-fallback-pemfile option 2013-06-08 21:36:59 +02:00
Stefan Bühler 8d417cec1b [mod_gnutls] fix compile error when compiling without SNI 2013-06-08 20:23:06 +02:00
Stefan Bühler 05e058aa9c fix bugs and warnings reported by clang
* fix memset sizeof() bugs
 * fix unaligned memory access
 * fix warnings for casts with alignment change
 * crypt_r needs _GNU_SOURCE
2013-06-08 20:11:23 +02:00
Stefan Bühler 392e7bb823 [mod_gnutls] add SNI 2013-06-08 20:11:13 +02:00
Stefan Bühler 95f63fc0cf [core] add global named fetch pool; all backends have to return strings. implement a simple backend. 2013-06-08 20:10:47 +02:00
Stefan Bühler 2bcb880dc8 [core] implement generic "fetch" api 2013-06-04 01:12:35 +02:00
Stefan Bühler 86c93c6256 [mod_gnutls] use 4096-bit DH params by default 2013-06-02 13:31:06 +02:00
Stefan Bühler 2cc5eb90d6 [mod_gnutls] actually use dh params loaded from file 2013-06-02 12:27:36 +02:00
Stefan Bühler 9a70d79f66 [mod_gnutls] add memory session database 2013-06-02 11:43:04 +02:00
Stefan Bühler c15deb44a4 [mod_gnutls] support DH parameters, use pregenerated 3247 bit parameter by default 2013-06-02 10:44:08 +02:00
Stefan Bühler f4280dca8b [mod_gnutls] session ticket support 2013-06-01 17:40:14 +02:00
Stefan Bühler c49cf3696f [mod_gnutls] fix beast workaround (force RC4 on TLS1.0 and SSL3.0) 2013-06-01 15:28:06 +02:00
Stefan Bühler 97dbcf7e42 [core] add option to disable buffering large request bodies on disk - forward them to backend directly instead
- right now only mod_fastcgi can handle this (it won't set the CONTENT_LENGTH env var, the backend
    has to support this too)
2013-06-01 12:31:25 +02:00
Stefan Bühler 38aad8128e [angel,tests] implement and use "one-shot" option to not restart crashed workers 2013-05-31 20:47:43 +02:00
Stefan Bühler 64cabac477 [core] fix connection timeout handling 2013-05-31 20:28:53 +02:00
Stefan Bühler 5e4a94b0c6 [core] handle Connection: Upgrade 2013-05-31 20:28:53 +02:00
Stefan Bühler 5e0a58be53 [stream-http-response] support chunk encoded responses 2013-05-31 20:28:53 +02:00
Stefan Bühler 3deb7c9e79 [core] support chunked uploads 2013-05-31 16:41:32 +02:00
Stefan Bühler 4706cc5f60 Fix filedescriptor/socket leaking 2013-05-28 11:46:41 +02:00
Stefan Bühler 00926c8049 [mod_openssl,mod_gnutls] fix missing disconnect (mem leak), free buffers (mem leak) 2013-05-28 10:05:34 +02:00
Stefan Bühler 42b49307b9 [mod_fastcgi] next try to fix use after free 2013-05-28 10:05:34 +02:00
Stefan Bühler bb018b091a [mod_fastcgi] fix use after free 2013-05-27 10:04:01 +02:00
Stefan Bühler 6e6e8792de [filter] don't run filter on stream-dest connect 2013-05-26 20:14:49 +02:00
Stefan Bühler 7f61ca9dba disable some debug messages 2013-05-26 18:59:44 +02:00
Stefan Bühler 44f56b034f [filters] fix memleak 2013-05-26 18:54:52 +02:00
Stefan Bühler 8a65b5e7aa [throttle] fix memory leak 2013-05-26 18:50:21 +02:00
Stefan Bühler 0857befb7f fix handling of new connection state 2013-05-26 17:37:33 +02:00
Stefan Bühler db36f6a78b [mod_cache_disk_etag] fix use after free 2013-05-26 15:46:36 +02:00
Stefan Bühler abdb238f21 [core] fix half cleaned connection objects 2013-05-25 19:14:02 +02:00
Stefan Bühler d90774c330 [mod_cache_disk_etag] fix segfault 2013-05-25 18:10:21 +02:00
Stefan Bühler 7c003a5505 [mod_throttle] build with automake/wscript too 2013-05-25 16:21:31 +02:00