 Stefan Bühler
|
8eae9f3b50
|
[mod_gnutls] remove ca-file option; only needed for not yet supported client cert authentication. add docs in the source
|
10 years ago |
|
Stefan Bühler
|
c372d21f2c
|
[mod_gnutls] use key-value list for parameters, allows duplicate listen/pemfile parameters
|
10 years ago |
|
Stefan Bühler
|
ab47f9b33c
|
[mod_gnutls] fix endless loop in client hello parser
|
10 years ago |
|
Stefan Bühler
|
36b901afa7
|
[mod_gnutls] fix build with SNI disabled
|
10 years ago |
|
Stefan Bühler
|
40169d5fc9
|
[autobuild] fix renamed header ssl_client_hello_parser.h
|
10 years ago |
|
Stefan Bühler
|
975ca1cddf
|
[mod_gnutls] parse client hello for sni and protocol version
changing priority in gnutls post_client_hello didn't work with session
resumption
|
10 years ago |
|
Stefan Bühler
|
c51d89fe6e
|
[mod_openssl] disable SSL3 by default
|
10 years ago |
|
Stefan Bühler
|
0b8365ca29
|
[mod_openssl] enable DH and ECDH
|
10 years ago |
|
Stefan Bühler
|
f3436e69f1
|
[gnutls] fix cleanup order (use-after-free)
|
10 years ago |
|
Stefan Bühler
|
f64ba1bb72
|
[fastcgi] add debug prints before all fastcgi_reset calls, don't reset connection on stderr data if connection was already closed
|
10 years ago |
|
Stefan Bühler
|
a1170b3aec
|
[mod_gnutls] fix segfault when no sni backend was configured
|
10 years ago |
|
Stefan Bühler
|
8f42bbe7b4
|
[gnutls filter] fix cork handling
|
10 years ago |
|
Stefan Bühler
|
b9fadd3db3
|
[ssl_sni_parser] debugging, fix parser bug (wrong shift)
|
10 years ago |
|
Stefan Bühler
|
85fc9dbb6d
|
[mod_gnutls,fetch api] associate sni certs with dh params, fix fetch bug
|
10 years ago |
|
Stefan Bühler
|
796f6b1547
|
[mod_gnutls] send alerts instead of aborting, allow safe renegotiations
|
10 years ago |
|
Stefan Bühler
|
3d86ada352
|
add ssl_sni_parser.h to make dist
|
10 years ago |
|
Stefan Bühler
|
92f0a5f237
|
[mod_gnutls] add sni-fallback-pemfile option
|
10 years ago |
|
Stefan Bühler
|
8d417cec1b
|
[mod_gnutls] fix compile error when compiling without SNI
|
10 years ago |
|
Stefan Bühler
|
392e7bb823
|
[mod_gnutls] add SNI
|
10 years ago |
|
Stefan Bühler
|
86c93c6256
|
[mod_gnutls] use 4096-bit DH params by default
|
10 years ago |
|
Stefan Bühler
|
2cc5eb90d6
|
[mod_gnutls] actually use dh params loaded from file
|
10 years ago |
|
Stefan Bühler
|
9a70d79f66
|
[mod_gnutls] add memory session database
|
10 years ago |
|
Stefan Bühler
|
c15deb44a4
|
[mod_gnutls] support DH parameters, use pregenerated 3247 bit parameter by default
|
10 years ago |
|
Stefan Bühler
|
f4280dca8b
|
[mod_gnutls] session ticket support
|
10 years ago |
|
Stefan Bühler
|
c49cf3696f
|
[mod_gnutls] fix beast workaround (force RC4 on TLS1.0 and SSL3.0)
|
10 years ago |
|
Stefan Bühler
|
97dbcf7e42
|
[core] add option to disable buffering large request bodies on disk - forward them to backend directly instead
- right now only mod_fastcgi can handle this (it won't set the CONTENT_LENGTH env var, the backend
has to support this too)
|
10 years ago |
|
Stefan Bühler
|
64cabac477
|
[core] fix connection timeout handling
|
10 years ago |
|
Stefan Bühler
|
5e4a94b0c6
|
[core] handle Connection: Upgrade
|
10 years ago |
|
Stefan Bühler
|
4706cc5f60
|
Fix filedescriptor/socket leaking
|
10 years ago |
|
Stefan Bühler
|
00926c8049
|
[mod_openssl,mod_gnutls] fix missing disconnect (mem leak), free buffers (mem leak)
|
10 years ago |
|
Stefan Bühler
|
42b49307b9
|
[mod_fastcgi] next try to fix use after free
|
10 years ago |
|
Stefan Bühler
|
bb018b091a
|
[mod_fastcgi] fix use after free
|
10 years ago |
|
Stefan Bühler
|
7f61ca9dba
|
disable some debug messages
|
10 years ago |
|
Stefan Bühler
|
0857befb7f
|
fix handling of new connection state
|
10 years ago |
|
Stefan Bühler
|
db36f6a78b
|
[mod_cache_disk_etag] fix use after free
|
10 years ago |
|
Stefan Bühler
|
d90774c330
|
[mod_cache_disk_etag] fix segfault
|
10 years ago |
|
Stefan Bühler
|
7c003a5505
|
[mod_throttle] build with automake/wscript too
|
10 years ago |
|
Stefan Bühler
|
bf6470375a
|
flush sockets after request end by setting TCP_NODELY temporarily
|
10 years ago |
|
Stefan Bühler
|
11b4bdd8c5
|
replace unneeded ev_/EV_ references
|
10 years ago |
|
Stefan Bühler
|
75e0c442f7
|
[mod_gnutls] fix issues with giovec_t present before 2.12.0
|
10 years ago |
|
Stefan Bühler
|
3194226966
|
[mod_gnutls] use vec_push only if version >= 2.12.0
|
10 years ago |
|
Stefan Bühler
|
709296d796
|
fix bugs and warnings from compiler warnings (memset parameter order, shadow, ...)
|
10 years ago |
|
Stefan Bühler
|
0ff0df8e12
|
[mod_fastcgi] show stderr messages
|
10 years ago |
|
Stefan Bühler
|
018baa0375
|
[mod_fastcgi] abort request only if headers aren't sent; otherwise stream disconnect will handle it
out stream disconnects will lead to fastcgi_reset too, but the vrequest is fine in that case
|
10 years ago |
|
Stefan Bühler
|
ff28617976
|
[mod_fastcgi] disable keep-alive for now
|
10 years ago |
|
Stefan Bühler
|
c61f4929cb
|
more asserts and checks in stream_simple_socket
|
10 years ago |
|
Stefan Bühler
|
ba46b595ae
|
[mod_fastcgi] fix broken asserts
|
10 years ago |
|
Stefan Bühler
|
d59cbf3f4e
|
[mod_fastcgi] add some asserts
|
10 years ago |
|
Stefan Bühler
|
5c2cc7143d
|
fix filters (deflate, memcached, cache_disk_etag)
|
10 years ago |
|
Stefan Bühler
|
f33a7fd3fa
|
[lua] check values for NULL before pushing to stack
|
10 years ago |
