2
0
Fork 0
Commit Graph

1616 Commits (54d7b4677482942b0084bbb8c9bd91faf0798e97)

Author SHA1 Message Date
Stefan Bühler 85f3a1da1a [doc] decode HTML entities in code/markdown/textile blocks
- simulates an implicit "<![CDATA[ ... ]]>" mode
- if the blocks consists of a single CDATA node entities are not decoded;
  instead the CDATA content is used directly.

Change-Id: Ifc25d4ae49518d6d219a70d5760c214cafe0ed46
2016-09-02 12:07:13 +02:00
Stefan Bühler 98a14017a5 [mod_gnutls/docs] ocsptool is the ocsp tool
Change-Id: Iffd5e1488131c99877971e935c798a2371fe3209
2016-08-28 01:11:12 +02:00
Stefan Bühler fc0119720e [mod_gnutls] use gnutls_pem_base64_decode_alloc instead of gnutls_pem_base64_decode2 (compat name for old versions)
Change-Id: Id07d9d38ac809b4116b04debba41cd7351ebd40b
2016-08-27 20:19:53 +02:00
Stefan Bühler dca42093b1 [core] disable strict-alias warnings for libev wrappers
Change-Id: I6bea24eb35838e91cc3c3cc6a6f94664c7446533
2016-08-27 20:00:09 +02:00
Stefan Bühler d72a3c2940 [mod_gnutls] add basic OCSP response stapling support
Change-Id: I700b2afd0e0fc60ce4f864e77166e3fa2e36aaae
2016-08-27 19:55:25 +02:00
Stefan Bühler 7fb0148348 [mod_gnutls] use only pin callback, don't pass pin as parameter
- also check for number of attempts instead of flags,
  the same the gnutls internal callback is doing when a
  password is passed

Change-Id: I84f5a0c7a4e3aea6f55b7b28c2f57019128351c7
2016-08-27 14:00:43 +02:00
Stefan Bühler 6a0e57ec8f [parsers] fix unused variable warnings
Change-Id: Ifc0210235ada102e2dbcba23e1179e87b973510f
2016-08-27 11:32:23 +02:00
Stefan Bühler f17a221cd8 use _DEFAULT_SOURCE instead of _BSD_SOURCE
Change-Id: Iecd6f2b4d31cd8f64f1c7ed491650a9b2a35be28
2016-08-27 11:32:19 +02:00
Stefan Bühler 130f14a3ea [config] expect exactly one comma between list entries
- the parser didn't require a comma before, and accepted multiple ones
- comma at end of list still optional

Change-Id: I4bb07ceed9aaceb43a14f7eeb5d364d6718e7acc
2015-12-04 14:17:29 +01:00
Stefan Bühler a1340123be [cmake] handle include directories separately
- update cmake required version to 3.0
- should workaround cmake CodeBlocks generator (-> qtcreator) bug with not finding the include paths

Change-Id: I95a6741ff9fc6cc75ae62774ad53d438bfd67b90
2015-12-04 14:17:29 +01:00
Stefan Bühler 3a4698d6b9 [pattern] fix all calls of li_pattern_eval to provide latest regex match
Change-Id: I7aeaf908eab9da3fe24e9871f648e3fd58fddbe1
2015-12-04 13:36:27 +01:00
Stefan Bühler d2c6a28d97 use g_assert instead of g_assert_true for older glib2 versions
Change-Id: Ie2a4e7b723d7a123f08c9c79503425b40a76a5b7
2015-08-10 11:52:11 +02:00
Stefan Bühler c9a3764f12 [ssl] don't exit early when there is no data to write; otherwise EOS stream handling is not triggered
Change-Id: Ie49fa1e7062f91c5708ae72db48c8e2144570f20
2015-08-10 11:41:47 +02:00
Stefan Bühler 909626691e ignore CMakeLists.txt.user (qtcreator)
Change-Id: If42de6186888a301e1276c48182bd5bbb7e826bb
2015-08-09 10:13:08 +02:00
Stefan Bühler f527a16138 [debug] provide more unique event names for waitqueues
Change-Id: Iddf9e10b3902fbfe4fa7e97b7a172018d0d70b54
2015-08-09 10:12:21 +02:00
Stefan Bühler 535f6b4afb [streams] improve stream handling, hopefully fixes bug with lingering backend connections
- reset backend_source before backend_drain; first tell the backend we
  are not interested in data anymore, then force closing the outgoing
  data
- as backend_drain might get reopened for a Connection: upgrade, the
  backend cannot rely on backend_drain->out.is_closed, but waits for a
  disconnect (which will also release the last reference).  the same is
  done for backend_source, so a backend can just wait for both reference
  counts to drop to zero before actually closing the backend connection
  (unless it keeps the streams alive itself).

Change-Id: Ibfe7985debd71580dbb78b985abaf946f59e3024
2015-08-08 16:12:59 +02:00
Stefan Bühler 4375aba174 [request parser] adapt whitespace removal from response parser, fixes bug removing last character if CR was missing
Change-Id: Idd39363b460f1141aa2bebde187f3ca10a7bb344
2015-08-06 23:19:37 +02:00
Stefan Bühler f6def17999 [common] format IPv6 addresses with port as [addr]:port (added the square brackets)
Change-Id: Ic5246c6cf9e1762b8e8ea4c020983289c4e071c6
2015-08-06 21:49:06 +02:00
Stefan Bühler 3cfc0aa82c [automake] add missing files to dist tar
Change-Id: I2c53b97415301931ca9530ac8d54701daef59ec8
2015-08-06 00:29:36 +02:00
Stefan Bühler 811e13cfcd [common] fix out-of-bounds read in li_sockaddr_to_string
Change-Id: I8984b6b170a43eb8c0f648c31957c5ae441cf93f
2015-08-06 00:05:09 +02:00
Stefan Bühler 78ac96cc04 [mod_debug] show more details for events
Change-Id: I245cff8a95839fa961ec32a8a8b2f3da39edb777
2015-08-05 21:57:12 +02:00
Stefan Bühler 3f7de3b51a mimetypes.conf: add some new mime types, remove .dat, .sha1, .md5, update .vcf
- create-mimetypes.conf.pl: also parse lines with upper case characters
- rerun create-mimetypes.conf.pl with debian mime-support 3.58

Change-Id: I8a6e91b8cc879158d5cd8931630a67db4d5a0dd2
2015-07-11 14:04:34 +02:00
Stefan Bühler b37d95facf [lua] handle filter->vr == NULL in lua filters, handle filter->in == NULL in xsendfile
Change-Id: I5326ce72f1b45bf0b64194e6ec8935b6261d18d2
2015-06-13 22:57:54 +02:00
Stefan Bühler 6b22f2f104 [mod_debug] debug events
Change-Id: Ib776e950902a36f13ed766a78a92f6971310e87d
2015-01-25 13:27:59 +01:00
Stefan Bühler 66bd6b22a2 track event "names" for debugging
Change-Id: Ib8f2b589a6087de2355906a87bd2cd0c84bafcba
2015-01-17 15:16:29 +01:00
Marcus Rückert 17d066bc57 Add systemd unit file
Change-Id: I680ab136870a8474e4979517fe46f2c9eff8ce34
2015-01-06 16:33:06 +01:00
Stefan Bühler a5886b3a81 [mod_openssl] various fixes, fix error handling
- update docs with default options
- always set "session_id_context"
- load all algorithms
- cleanup error handling (abort on fatal errors, not the other way
  round, log non fatal errors in debug log-level)

Change-Id: I2b6028bbe97a237ab94ad00d58c7773d9d3d8830
2014-12-22 15:12:48 +01:00
Stefan Bühler 10305546cb [core] close out stream nicely on regular shutdown (fixes openssl session problem)
Change-Id: Iaac73fa64c03225751c4492b5c690094f3d6e97f
2014-12-22 15:11:31 +01:00
Stefan Bühler 93d04a3514 [tests] use gnutls certtool to create test ca
also supports generating ecc (ecdsa) keys and selecting a hash

Change-Id: Iafa6557a4f0a97885a3300861b842289b73ea1de
2014-11-09 11:26:15 +01:00
Stefan Bühler f144349c72 [mod_openssl] allow all authentication methods in default cipher string
The details depend on the server key anyway; with the new default string
ecdsa keys work out of the box.

Change-Id: I7229f899ffd8dca5740767f9832980198b4f7bee
2014-11-09 11:14:03 +01:00
Stefan Bühler fc02dcf9e2 [mod_gnutls] improve alert handling
* print alerts with numerical value
* show non-fatal alerts
* use log level info for all alerts
* use log level warning for non-fatal "unknown" errors

Change-Id: Ibaa33743bfe809579981fdeb121955ef5c6d0ab2
2014-11-09 08:45:43 +01:00
Stefan Bühler f7155d5972 [doc] mod_gnutls: add comment that reusing keys in DH is not recommended anyway
Change-Id: I392b2913ca5f7fdc88bf773032b27d2417211a58
2014-11-08 20:02:42 +01:00
Stefan Bühler 6954c4563b [doc] improve section about DH/DSA parameters in mod_gnutls
Change-Id: I9665691ff3c6dbb24defc02ae3f9a2f8efe8264d
2014-11-08 15:33:15 +01:00
Nikos Mavrogiannopoulos 91060ebe91 [mod_gnutls] allow pemfile to accept a key-value list of a certificate and key
In addition, this patch adds the ability to specify a PIN,
to be used to decrypt an encrypted key, or to login to a PKCS #11
module.

Change-Id: Iff36879926236d07be6baaa1736985a58c54d0cc
2014-11-02 08:27:20 +01:00
Nikos Mavrogiannopoulos 344e918f05 [mod_gnutls] when an alert is received print its actual value
Change-Id: I89b12cb5e53cbd0d36d9b30d9a7e99aa70836717
2014-11-01 12:25:03 +01:00
Stefan Bühler aa44c63f59 [doc] clarify "physical.exists" semantic
Change-Id: I8212e4e66c2666579a8726c35f6840e3eddf4366
2014-08-24 18:32:50 +02:00
Stefan Bühler 912b460145 [autobuild] fix configure to search for openssl in the specified paths 2014-08-17 09:45:52 +02:00
Stefan Bühler 72011fbede [mox_rewrite,mod_proxy,docs] fix request.raw_path handling (includes query-string) 2014-06-06 13:41:30 +02:00
Stefan Bühler 2fe2af2022 [docs] generate link back to index in sub pages 2014-06-06 12:18:50 +02:00
Stefan Bühler ab60804b9c [docs] fix typo 2014-06-06 12:18:46 +02:00
Stefan Bühler b5eac15433 [mod_proxy] use raw_path instead of re-encoded path 2014-06-06 12:08:16 +02:00
Stefan Bühler 6e2ca4b80c [tests] small cleanups: use req_header.overwrite, no_docroot option 2014-06-06 11:57:41 +02:00
Stefan Bühler 76c12e4077 [mod_rewrite] rewrite_raw result gets decoded 2014-06-06 11:43:40 +02:00
Stefan Bühler 4c741ce853 [core] expose request.raw_path as condition variable 2014-06-06 11:16:22 +02:00
Stefan Bühler e168e0653c [docs] fix typos, add some details, add rewrite_raw action 2014-05-27 20:07:12 +02:00
Stefan Bühler 9acfe515f7 [docs] fix xml error 2014-05-26 15:26:10 +02:00
Stefan Bühler 4741120b74 [docs] fix links, add index page, add small introduction, add lua config / api 2014-05-26 15:04:46 +02:00
Stefan Bühler 5c9a9bbaba [docs] some small fixes 2014-05-23 16:03:54 +02:00
Stefan Bühler dd9f052c57 [mod_gnutls] remove broken include 2014-05-23 11:24:43 +02:00
Stefan Bühler 47c1cf1c20 [tests] increase timeout for https requests 2014-05-22 18:31:33 +02:00