6 Commits (fea5bdc87349b5841ff70249258a0a4b31040313)

Author	SHA1	Message	Date
Glenn Strauss	0ad57da55b	[mod_openssl,mbedtls,gnutls,nss] fdevent_load_file ... employ fdevent_load_file() to load CRL, X509 cert, and private key files into memory	3 years ago
Glenn Strauss	8422fa4573	[mod_gnutls] detect certs marked OCSP Must-Staple	3 years ago
Glenn Strauss	c0796ee1dd	[mod_gnutls] OCSP stapling (#2469)	3 years ago
Glenn Strauss	12e5e745b0	[mod_gnutls] option to override GnuTLS priority ... provide option to override GnuTLS priority string ssl.openssl.ssl-conf-cmd = ("gnutls-override" => "...") will *entirely* replace the priority string constructed by mod_gnutls. Admin is responsible to ensure that the override is complete. debugging: A non-zero value for debug.log-ssl-noise = x *in the global scope* will cause mod_gnutls to print the GnuTLS priority string to the error log at startup. debug.log-ssl-noise = 0 in $SERVER["socket"] scopes can then be used to disable runtime ssl log noise, or debug.log-ssl-noise can be removed from the global scope after debugging	3 years ago
Glenn Strauss	83fb1aed6f	[mod_gnutls] ssl.stek-file to specify encrypt key ... difference from mod_openssl: Admin should schedule an independent job to periodically generate a new STEK before prior STEK lifetime expires. Only one STEK is active at a time in mod_gnutls. (more details in prior commit message for mod_openssl)	3 years ago
Glenn Strauss	bf4054f8ec	[mod_gnutls] GnuTLS option for TLS (fixes #109) ... (experimental) mod_gnutls supports most ssl.* config options supported by mod_openssl x-ref: "GnuTLS support for the mod_ssl" https://redmine.lighttpd.net/issues/109	3 years ago