39 Commits (master)

Author SHA1 Message Date
Stefan Bühler 8c68b120da [mod_gnutls] support OCSP responses in sni backends 4 years ago
Stefan Bühler 3d2880258d [mod_gnutls] workaround gnutls API breakage, and prepare for future ones 5 years ago
Stefan Bühler d72a3c2940 [mod_gnutls] add basic OCSP response stapling support 5 years ago
Stefan Bühler 7fb0148348 [mod_gnutls] use only pin callback, don't pass pin as parameter 5 years ago
Nikos Mavrogiannopoulos 91060ebe91 [mod_gnutls] allow pemfile to accept a key-value list of a certificate and key 7 years ago
Stefan Bühler dd9f052c57 [mod_gnutls] remove broken include 8 years ago
Stefan Bühler 17a5168793 [core] convert all assert() to LI_FORCE_ASSERT(), and support writing backtraces on fatal errors with libunwind 8 years ago
Stefan Bühler 23be07f40c [mod_gnutls] don't abort if 'NORMAL:-CIPHER-ALL:+ARCFOUR-128' is not recognized, use 'NORMAL' instead 8 years ago
Stefan Bühler f482877825 [doc] document core config and modules in tree 8 years ago
Stefan Bühler 1a7eec4aa5 [mod_gnutls] disable protect-against-beast by default now - considered mitigated on client side 8 years ago
Stefan Bühler 81ff95db84 [mod_gnutls] announce http/1.1 in ALPN 8 years ago
Stefan Bühler a1fbaab86b [core/modules] refactor config handling 8 years ago
Stefan Bühler 919a8dd6d2 [mod_openssl] error out on unknown parameters 8 years ago
Stefan Bühler 8eae9f3b50 [mod_gnutls] remove ca-file option; only needed for not yet supported client cert authentication. add docs in the source 8 years ago
Stefan Bühler c372d21f2c [mod_gnutls] use key-value list for parameters, allows duplicate listen/pemfile parameters 8 years ago
Stefan Bühler 36b901afa7 [mod_gnutls] fix build with SNI disabled 8 years ago
Stefan Bühler 975ca1cddf [mod_gnutls] parse client hello for sni and protocol version 8 years ago
Stefan Bühler f3436e69f1 [gnutls] fix cleanup order (use-after-free) 8 years ago
Stefan Bühler a1170b3aec [mod_gnutls] fix segfault when no sni backend was configured 9 years ago
Stefan Bühler 85fc9dbb6d [mod_gnutls,fetch api] associate sni certs with dh params, fix fetch bug 9 years ago
Stefan Bühler 92f0a5f237 [mod_gnutls] add sni-fallback-pemfile option 9 years ago
Stefan Bühler 8d417cec1b [mod_gnutls] fix compile error when compiling without SNI 9 years ago
Stefan Bühler 392e7bb823 [mod_gnutls] add SNI 9 years ago
Stefan Bühler 86c93c6256 [mod_gnutls] use 4096-bit DH params by default 9 years ago
Stefan Bühler 2cc5eb90d6 [mod_gnutls] actually use dh params loaded from file 9 years ago
Stefan Bühler 9a70d79f66 [mod_gnutls] add memory session database 9 years ago
Stefan Bühler c15deb44a4 [mod_gnutls] support DH parameters, use pregenerated 3247 bit parameter by default 9 years ago
Stefan Bühler f4280dca8b [mod_gnutls] session ticket support 9 years ago
Stefan Bühler c49cf3696f [mod_gnutls] fix beast workaround (force RC4 on TLS1.0 and SSL3.0) 9 years ago
Stefan Bühler bf6470375a flush sockets after request end by setting TCP_NODELY temporarily 9 years ago
Stefan Bühler 709296d796 fix bugs and warnings from compiler warnings (memset parameter order, shadow, ...) 9 years ago
Stefan Bühler c61f4929cb more asserts and checks in stream_simple_socket 9 years ago
Stefan Bühler 72ec9a432f [throttle] rewrite 9 years ago
Stefan Bühler b028ad841f [mod_gnutls] stream 9 years ago
Stefan Bühler cfd8955008 [common] implement libev wrapper 9 years ago
Stefan Bühler 4793e43461 [mod_gnutls] fix ca-file handling 9 years ago
Stefan Bühler b1c45e6a8f [chunk/network] use glib error system to report errors (instead of using virtualrequest context) 10 years ago
Stefan Bühler c270124514 [mod_gnutls] remove \n from log messages 10 years ago
Stefan Bühler bef05e0b2e new module: mod_gnutls 10 years ago