Stefan Bühler
55e1dc1825
[ssl/build] some minor fixes; fix compile without ssl, cleanup ssl config buffers
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2789 152afb58-edef-0310-8abb-c4023f1b3aa9
2011-04-24 16:02:55 +00:00
Stefan Bühler
f610f894a3
ssl: Support for Diffie-Hellman and Elliptic-Curve Diffie-Hellman key exchange ( fixes #2301 , #2246 , #2239 )
...
- add ssl.use-sslv3
- load all algorithms
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2780 152afb58-edef-0310-8abb-c4023f1b3aa9
2011-03-13 18:00:09 +00:00
Stefan Bühler
7e5b0fe9ab
Rename fdevent_event_add to _set to reflect what the function does. Fix some handlers.
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2765 152afb58-edef-0310-8abb-c4023f1b3aa9
2010-08-17 09:54:42 +00:00
Stefan Bühler
e23e999089
bind to IPV6-only if ipv6 address was specified ( http://redmine.lighttpd.net/projects/lighttpd/wiki/IPv6-Config )
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2758 152afb58-edef-0310-8abb-c4023f1b3aa9
2010-08-07 13:16:16 +00:00
Stefan Bühler
4ae13c32b1
only require FDEVENT_IN bit to be set for listening connections ( fixes #2227 )
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2753 152afb58-edef-0310-8abb-c4023f1b3aa9
2010-08-06 21:57:19 +00:00
Stefan Bühler
38f2d1ddd7
cleanup fdevent code, removed linux-rtsig handler, replaced some fprintf calls
...
* use log functions
* convert flags
* fix handler callback prototype
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2752 152afb58-edef-0310-8abb-c4023f1b3aa9
2010-08-06 21:57:15 +00:00
Stefan Bühler
b3892c1410
Reset uri.authority before TLS servername handling, reset all "keep-alive" data in connection_del ( fixes #2125 )
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2724 152afb58-edef-0310-8abb-c4023f1b3aa9
2010-04-28 19:08:11 +00:00
Stefan Bühler
34fb1258e4
Fix handling return value of SSL_CTX_set_options ( fixes #2157 , thx mlcreech)
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2716 152afb58-edef-0310-8abb-c4023f1b3aa9
2010-02-28 11:48:05 +00:00
Stefan Bühler
1d5d55a484
Don't print ssl error if client didn't support TLS SNI
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2666 152afb58-edef-0310-8abb-c4023f1b3aa9
2009-10-16 22:06:22 +00:00
Stefan Bühler
b987643307
Add SSL Client Certificate verification ( #1288 )
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2654 152afb58-edef-0310-8abb-c4023f1b3aa9
2009-10-14 18:19:19 +00:00
Stefan Bühler
97cec38a3b
Fix compile error if TLS SNI isn't supported
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2652 152afb58-edef-0310-8abb-c4023f1b3aa9
2009-10-14 17:46:23 +00:00
Stefan Bühler
7322d53684
Fix some warnings in previous commit (TLS SNI)
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2650 152afb58-edef-0310-8abb-c4023f1b3aa9
2009-10-14 14:32:24 +00:00
Peter Colberg
8b6dae4139
Add TLS servername indication (SNI) support ( fixes #386 , thx Peter Colberg <peter@colberg.org>)
...
* This patch may "break" some configs, if they do stupid things. Like setting
ssl.pemfile to a not existing file in a "non-socket/non-ssl" block.
Fix them! :)
From: Peter Colberg <peter@colberg.org>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2648 152afb58-edef-0310-8abb-c4023f1b3aa9
2009-10-14 13:39:59 +00:00
Stefan Bühler
22e8b456a9
Fix header inclusion order, always include "config.h" before any system header
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2624 152afb58-edef-0310-8abb-c4023f1b3aa9
2009-10-11 14:31:42 +00:00
Stefan Bühler
f9e65e8500
Fixed some small non-critical leaks reported by cppcheck
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2618 152afb58-edef-0310-8abb-c4023f1b3aa9
2009-09-01 14:03:59 +00:00
Stefan Bühler
4df22f2a32
Fix issues found with clang analyzer
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2594 152afb58-edef-0310-8abb-c4023f1b3aa9
2009-07-21 20:35:27 +00:00
Stefan Bühler
8a24665a81
Allow all comparisons for $SERVER["socket"] - only bind for "=="
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2590 152afb58-edef-0310-8abb-c4023f1b3aa9
2009-07-16 23:23:08 +00:00
Stefan Bühler
e1645ed287
Set FD_CLOEXEC for bound sockets before pipe-logger forks ( fixes #2026 )
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2578 152afb58-edef-0310-8abb-c4023f1b3aa9
2009-07-11 09:01:18 +00:00
Stefan Bühler
0226d4bf36
Add option to enable TCP_DEFER_ACCEPT ( fixes #1447 )
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2479 152afb58-edef-0310-8abb-c4023f1b3aa9
2009-04-26 17:59:55 +00:00
Stefan Bühler
63f785a2f8
Added some extra warning options in cmake and fix the resulting warnings (unused/static functions)
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2414 152afb58-edef-0310-8abb-c4023f1b3aa9
2009-03-07 21:05:37 +00:00
Stefan Bühler
52861d77df
Replace buffer_{append,copy}_string with the _len variant where possible ( #1732 , thx crypt)
...
Replace BUFFER_{APPEND,COPY}_STRING_CONST with _len(b, CONST_STRL_LEN(x))
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2250 152afb58-edef-0310-8abb-c4023f1b3aa9
2008-07-30 19:38:32 +00:00
Marcus Rückert
8cd1471cb3
- white space cleanup part 2 this time 1.4 ;)
...
i hope it helps with merging stuff back to 1.5
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@1371 152afb58-edef-0310-8abb-c4023f1b3aa9
2006-10-04 13:26:23 +00:00
Jan Kneschke
7b4097f7ee
oops, use SSL_CTX_* if you modify the ssl_ctx
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.11-ssl-fixes@1296 152afb58-edef-0310-8abb-c4023f1b3aa9
2006-09-14 11:55:01 +00:00
Jan Kneschke
a85ca5e0ef
merged [1051], [1052], [1053], [1054], [1057], [1060], [1061], [1062]
...
added ssl.use-sslv2 and ssl.cipher-list
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.11-ssl-fixes@1279 152afb58-edef-0310-8abb-c4023f1b3aa9
2006-09-07 10:19:29 +00:00
Jan Kneschke
609a30e896
disable the ssl-write checks for a moving SSL-write-buffer
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.11-ssl-fixes@1273 152afb58-edef-0310-8abb-c4023f1b3aa9
2006-09-01 09:52:32 +00:00
Jan Kneschke
396d141efb
don't init a SERVER["socket"] if it is initialized already
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@1019 152afb58-edef-0310-8abb-c4023f1b3aa9
2006-03-04 14:53:57 +00:00
Jan Kneschke
0525ed2816
fixed calculation of socket-len if SUN_LEN is not defined
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@1009 152afb58-edef-0310-8abb-c4023f1b3aa9
2006-02-28 11:25:16 +00:00
Jan Kneschke
0f437f2c23
remove unix domain socket if it is unused before binding to it ( fixes #395 )
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@946 152afb58-edef-0310-8abb-c4023f1b3aa9
2006-01-14 17:02:44 +00:00
Jan Kneschke
b9b8a46f40
allow to bind the server to a unix-domain socket
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@878 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-11-23 10:46:21 +00:00
Jan Kneschke
95fb9a3cf7
init the fdevent-handler AFTER daemonize and AFTER the max-worker spawning
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@844 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-11-15 09:24:55 +00:00
Jan Kneschke
d0751c5a2b
fixed compile if openssl is not enabled
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@813 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-11-01 08:56:18 +00:00
Jan Kneschke
e290b119db
added startup-time selectable network-backend
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@808 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-10-31 15:34:00 +00:00
Jan Kneschke
54dea53fdf
update bytes_written in con-> ( fixed #737 )
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@751 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-09-29 13:12:34 +00:00
Jan Kneschke
bd893badb9
added the fd as parameter for the write() functions
...
- the plugins can use them now too
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@737 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-09-26 08:52:37 +00:00
Jan Kneschke
b46fa4497b
only accept 100 connection in one round to remove the starvation of waiting connections
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@732 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-09-23 16:31:49 +00:00
Jan Kneschke
7113a665b3
improved error messages
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@699 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-09-14 07:09:52 +00:00
Jan Kneschke
38b8743af3
- don't keep the full fastcgi response in memory
...
- don't cache more than 4 chunks in a queue for reuse
- on chunkqueue_reset, clean the chunks
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@696 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-09-08 10:00:32 +00:00
Jan Kneschke
5c20c426b7
added gracefull shutdown and max-connections
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@653 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-08-31 09:16:18 +00:00
Jan Kneschke
e47ae00886
let kqueue startup after daemonize is done
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@650 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-08-30 10:42:06 +00:00
Jan Kneschke
360aba360f
allow _ in env. and var. and optimized matching of conditions
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@529 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-08-08 17:25:55 +00:00
Jan Kneschke
cd4c324ff2
allow numbers in header-keys
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@523 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-08-08 16:32:17 +00:00
Jan Kneschke
8073d5fe9f
added nested conditionals (merged [298])
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@519 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-08-08 13:48:33 +00:00
Jan Kneschke
5e134da075
dropped file-cache, added stat-cache and modules ALWAYS cleanup at connection-end
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@502 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-08-08 08:22:06 +00:00
Jan Kneschke
e678d8f765
applied selective TCP_CORK from Christian von Roques ( #97 )
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.3.x@490 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-07-31 11:02:57 +00:00
Jan Kneschke
279af9590f
don't use accept-filtering if SSL is used
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.3.x@320 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-04-30 10:03:29 +00:00
Jan Kneschke
bde657648d
compile fixes for MIPSpro on IRIX
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/trunk@68 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-03-01 23:01:12 +00:00
Jan Kneschke
0cc8a5c56c
added ssl.ca-file and updated error-message if private and public key don't match
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/trunk@46 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-02-28 00:00:55 +00:00
Jan Kneschke
bcdc6a3bbc
moved everything below trunk/ and added branches/ and tags/
...
git-svn-id: svn://svn.lighttpd.net/lighttpd/trunk@30 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-02-20 14:27:00 +00:00