Commit Graph

48 Commits

Author SHA1 Message Date
Stefan Bühler 55e1dc1825 [ssl/build] some minor fixes; fix compile without ssl, cleanup ssl config buffers
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2789 152afb58-edef-0310-8abb-c4023f1b3aa9
2011-04-24 16:02:55 +00:00
Stefan Bühler f610f894a3 ssl: Support for Diffie-Hellman and Elliptic-Curve Diffie-Hellman key exchange (fixes #2301, #2246, #2239)
- add ssl.use-sslv3
 - load all algorithms

git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2780 152afb58-edef-0310-8abb-c4023f1b3aa9
2011-03-13 18:00:09 +00:00
Stefan Bühler 7e5b0fe9ab Rename fdevent_event_add to _set to reflect what the function does. Fix some handlers.
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2765 152afb58-edef-0310-8abb-c4023f1b3aa9
2010-08-17 09:54:42 +00:00
Stefan Bühler e23e999089 bind to IPV6-only if ipv6 address was specified (http://redmine.lighttpd.net/projects/lighttpd/wiki/IPv6-Config)
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2758 152afb58-edef-0310-8abb-c4023f1b3aa9
2010-08-07 13:16:16 +00:00
Stefan Bühler 4ae13c32b1 only require FDEVENT_IN bit to be set for listening connections (fixes #2227)
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2753 152afb58-edef-0310-8abb-c4023f1b3aa9
2010-08-06 21:57:19 +00:00
Stefan Bühler 38f2d1ddd7 cleanup fdevent code, removed linux-rtsig handler, replaced some fprintf calls
* use log functions
 * convert flags
 * fix handler callback prototype

git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2752 152afb58-edef-0310-8abb-c4023f1b3aa9
2010-08-06 21:57:15 +00:00
Stefan Bühler b3892c1410 Reset uri.authority before TLS servername handling, reset all "keep-alive" data in connection_del (fixes #2125)
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2724 152afb58-edef-0310-8abb-c4023f1b3aa9
2010-04-28 19:08:11 +00:00
Stefan Bühler 34fb1258e4 Fix handling return value of SSL_CTX_set_options (fixes #2157, thx mlcreech)
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2716 152afb58-edef-0310-8abb-c4023f1b3aa9
2010-02-28 11:48:05 +00:00
Stefan Bühler 1d5d55a484 Don't print ssl error if client didn't support TLS SNI
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2666 152afb58-edef-0310-8abb-c4023f1b3aa9
2009-10-16 22:06:22 +00:00
Stefan Bühler b987643307 Add SSL Client Certificate verification (#1288)
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2654 152afb58-edef-0310-8abb-c4023f1b3aa9
2009-10-14 18:19:19 +00:00
Stefan Bühler 97cec38a3b Fix compile error if TLS SNI isn't supported
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2652 152afb58-edef-0310-8abb-c4023f1b3aa9
2009-10-14 17:46:23 +00:00
Stefan Bühler 7322d53684 Fix some warnings in previous commit (TLS SNI)
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2650 152afb58-edef-0310-8abb-c4023f1b3aa9
2009-10-14 14:32:24 +00:00
Peter Colberg 8b6dae4139 Add TLS servername indication (SNI) support (fixes #386, thx Peter Colberg <peter@colberg.org>)
* This patch may "break" some configs, if they do stupid things. Like setting
  ssl.pemfile to a not existing file in a "non-socket/non-ssl" block.
  Fix them! :)

From: Peter Colberg <peter@colberg.org>

git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2648 152afb58-edef-0310-8abb-c4023f1b3aa9
2009-10-14 13:39:59 +00:00
Stefan Bühler 22e8b456a9 Fix header inclusion order, always include "config.h" before any system header
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2624 152afb58-edef-0310-8abb-c4023f1b3aa9
2009-10-11 14:31:42 +00:00
Stefan Bühler f9e65e8500 Fixed some small non-critical leaks reported by cppcheck
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2618 152afb58-edef-0310-8abb-c4023f1b3aa9
2009-09-01 14:03:59 +00:00
Stefan Bühler 4df22f2a32 Fix issues found with clang analyzer
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2594 152afb58-edef-0310-8abb-c4023f1b3aa9
2009-07-21 20:35:27 +00:00
Stefan Bühler 8a24665a81 Allow all comparisons for $SERVER["socket"] - only bind for "=="
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2590 152afb58-edef-0310-8abb-c4023f1b3aa9
2009-07-16 23:23:08 +00:00
Stefan Bühler e1645ed287 Set FD_CLOEXEC for bound sockets before pipe-logger forks (fixes #2026)
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2578 152afb58-edef-0310-8abb-c4023f1b3aa9
2009-07-11 09:01:18 +00:00
Stefan Bühler 0226d4bf36 Add option to enable TCP_DEFER_ACCEPT (fixes #1447)
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2479 152afb58-edef-0310-8abb-c4023f1b3aa9
2009-04-26 17:59:55 +00:00
Stefan Bühler 63f785a2f8 Added some extra warning options in cmake and fix the resulting warnings (unused/static functions)
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2414 152afb58-edef-0310-8abb-c4023f1b3aa9
2009-03-07 21:05:37 +00:00
Stefan Bühler 52861d77df Replace buffer_{append,copy}_string with the _len variant where possible (#1732, thx crypt)
Replace BUFFER_{APPEND,COPY}_STRING_CONST with _len(b, CONST_STRL_LEN(x))


git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2250 152afb58-edef-0310-8abb-c4023f1b3aa9
2008-07-30 19:38:32 +00:00
Marcus Rückert 8cd1471cb3 - white space cleanup part 2 this time 1.4 ;)
i hope it helps with merging stuff back to 1.5

git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@1371 152afb58-edef-0310-8abb-c4023f1b3aa9
2006-10-04 13:26:23 +00:00
Jan Kneschke 7b4097f7ee oops, use SSL_CTX_* if you modify the ssl_ctx
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.11-ssl-fixes@1296 152afb58-edef-0310-8abb-c4023f1b3aa9
2006-09-14 11:55:01 +00:00
Jan Kneschke a85ca5e0ef merged [1051], [1052], [1053], [1054], [1057], [1060], [1061], [1062]
added ssl.use-sslv2 and ssl.cipher-list


git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.11-ssl-fixes@1279 152afb58-edef-0310-8abb-c4023f1b3aa9
2006-09-07 10:19:29 +00:00
Jan Kneschke 609a30e896 disable the ssl-write checks for a moving SSL-write-buffer
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.11-ssl-fixes@1273 152afb58-edef-0310-8abb-c4023f1b3aa9
2006-09-01 09:52:32 +00:00
Jan Kneschke 396d141efb don't init a SERVER["socket"] if it is initialized already
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@1019 152afb58-edef-0310-8abb-c4023f1b3aa9
2006-03-04 14:53:57 +00:00
Jan Kneschke 0525ed2816 fixed calculation of socket-len if SUN_LEN is not defined
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@1009 152afb58-edef-0310-8abb-c4023f1b3aa9
2006-02-28 11:25:16 +00:00
Jan Kneschke 0f437f2c23 remove unix domain socket if it is unused before binding to it (fixes #395)
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@946 152afb58-edef-0310-8abb-c4023f1b3aa9
2006-01-14 17:02:44 +00:00
Jan Kneschke b9b8a46f40 allow to bind the server to a unix-domain socket
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@878 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-11-23 10:46:21 +00:00
Jan Kneschke 95fb9a3cf7 init the fdevent-handler AFTER daemonize and AFTER the max-worker spawning
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@844 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-11-15 09:24:55 +00:00
Jan Kneschke d0751c5a2b fixed compile if openssl is not enabled
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@813 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-11-01 08:56:18 +00:00
Jan Kneschke e290b119db added startup-time selectable network-backend
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@808 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-10-31 15:34:00 +00:00
Jan Kneschke 54dea53fdf update bytes_written in con-> (fixed #737)
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@751 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-09-29 13:12:34 +00:00
Jan Kneschke bd893badb9 added the fd as parameter for the write() functions
- the plugins can use them now too


git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@737 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-09-26 08:52:37 +00:00
Jan Kneschke b46fa4497b only accept 100 connection in one round to remove the starvation of waiting connections
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@732 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-09-23 16:31:49 +00:00
Jan Kneschke 7113a665b3 improved error messages
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@699 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-09-14 07:09:52 +00:00
Jan Kneschke 38b8743af3 - don't keep the full fastcgi response in memory
- don't cache more than 4 chunks in a queue for reuse
- on chunkqueue_reset, clean the chunks


git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@696 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-09-08 10:00:32 +00:00
Jan Kneschke 5c20c426b7 added gracefull shutdown and max-connections
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@653 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-08-31 09:16:18 +00:00
Jan Kneschke e47ae00886 let kqueue startup after daemonize is done
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@650 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-08-30 10:42:06 +00:00
Jan Kneschke 360aba360f allow _ in env. and var. and optimized matching of conditions
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@529 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-08-08 17:25:55 +00:00
Jan Kneschke cd4c324ff2 allow numbers in header-keys
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@523 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-08-08 16:32:17 +00:00
Jan Kneschke 8073d5fe9f added nested conditionals (merged [298])
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@519 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-08-08 13:48:33 +00:00
Jan Kneschke 5e134da075 dropped file-cache, added stat-cache and modules ALWAYS cleanup at connection-end
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@502 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-08-08 08:22:06 +00:00
Jan Kneschke e678d8f765 applied selective TCP_CORK from Christian von Roques (#97)
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.3.x@490 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-07-31 11:02:57 +00:00
Jan Kneschke 279af9590f don't use accept-filtering if SSL is used
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.3.x@320 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-04-30 10:03:29 +00:00
Jan Kneschke bde657648d compile fixes for MIPSpro on IRIX
git-svn-id: svn://svn.lighttpd.net/lighttpd/trunk@68 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-03-01 23:01:12 +00:00
Jan Kneschke 0cc8a5c56c added ssl.ca-file and updated error-message if private and public key don't match
git-svn-id: svn://svn.lighttpd.net/lighttpd/trunk@46 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-02-28 00:00:55 +00:00
Jan Kneschke bcdc6a3bbc moved everything below trunk/ and added branches/ and tags/
git-svn-id: svn://svn.lighttpd.net/lighttpd/trunk@30 152afb58-edef-0310-8abb-c4023f1b3aa9
2005-02-20 14:27:00 +00:00