2
0
Fork 0
Commit Graph

1616 Commits (54d7b4677482942b0084bbb8c9bd91faf0798e97)

Author SHA1 Message Date
Stefan Bühler c372d21f2c [mod_gnutls] use key-value list for parameters, allows duplicate listen/pemfile parameters 2013-08-18 13:48:48 +02:00
Stefan Bühler 969818083e [core] add li_value_to_key_value_list: convert value hash to key-value list 2013-08-18 13:47:29 +02:00
Stefan Bühler ab47f9b33c [mod_gnutls] fix endless loop in client hello parser 2013-08-18 11:45:45 +02:00
Stefan Bühler 36b901afa7 [mod_gnutls] fix build with SNI disabled 2013-08-18 11:16:01 +02:00
Stefan Bühler 40169d5fc9 [autobuild] fix renamed header ssl_client_hello_parser.h 2013-08-18 11:15:30 +02:00
Stefan Bühler a7f41b9e3b [core] check for disabled keep-alive early to send matching headers 2013-08-18 00:58:54 +02:00
Stefan Bühler 975ca1cddf [mod_gnutls] parse client hello for sni and protocol version
changing priority in gnutls post_client_hello didn't work with session
resumption
2013-08-18 00:55:24 +02:00
Stefan Bühler 0e9871e695 [doc] update example mime-types 2013-08-15 21:26:01 +02:00
Stefan Bühler c51d89fe6e [mod_openssl] disable SSL3 by default 2013-08-09 00:23:33 +02:00
Stefan Bühler 0b8365ca29 [mod_openssl] enable DH and ECDH 2013-08-07 20:59:46 +02:00
Stefan Bühler c15b37260a [tests/mod_deflate] test removing Accept-Encoding header 2013-08-07 18:50:49 +02:00
Stefan Bühler b9d77f50a4 [core] add req_header.* actions 2013-08-07 18:05:16 +02:00
Stefan Bühler f3436e69f1 [gnutls] fix cleanup order (use-after-free) 2013-08-03 09:24:58 +02:00
Stefan Bühler 45aeb29703 [events] use smaller repeat value to trigger timer "again" (100ms was clearly too large, 0.1ms should do) 2013-08-01 18:37:59 +02:00
Simon Lundström 859da7d7eb [plugin_core] docroot: show stat() errors for all entries when debug log is enabled 2013-07-31 21:54:05 +02:00
Stefan Bühler 76cf9761ce [doc] fix wiki link to the redirect target 2013-07-31 21:44:28 +02:00
Stefan Bühler a034e05eff [tests] fix path issues 2013-07-20 14:01:14 +02:00
Stefan Bühler f64ba1bb72 [fastcgi] add debug prints before all fastcgi_reset calls, don't reset connection on stderr data if connection was already closed 2013-07-20 13:33:58 +02:00
Stefan Bühler 9aafe5aa2a [fetch] use signed integers for liFetchDatabase refcount 2013-07-20 11:49:49 +02:00
Stefan Bühler e762189fb5 [core] only use feature test macros on linux 2013-07-20 11:45:09 +02:00
Stefan Bühler 42ce5eda8f [core] cleanup settings.h - openssl not needed in global headers 2013-07-20 11:41:24 +02:00
Stefan Bühler 2301fa6835 [tests] cgi: check stderr and exit error with delayed upload 2013-07-20 11:38:51 +02:00
Stefan Bühler d27b40bed5 [tests] add /sbin and others to PATH for sha1 on FreeBSD 2013-07-20 11:26:26 +02:00
Stefan Bühler 4cdda3fb1e [tests] Fix uploadcheck for BSD (providing sha1 instead of sha1sum) 2013-07-20 10:56:47 +02:00
Stefan Bühler bfa1395937 [throttle] fix connection throttling refill calculation 2013-07-18 13:05:09 +02:00
Stefan Bühler a1170b3aec [mod_gnutls] fix segfault when no sni backend was configured 2013-07-17 20:18:52 +02:00
Stefan Bühler d5bb6003dc include lighttpd/settings.h instead of base.h in common source 2013-06-25 16:38:17 +02:00
Stefan Bühler d0d3dc3c55 define _XOPEN_SOURCE 600 for _POSIX_C_SOURCE 200112L, which should fix IPv6/sockaddr_in6 on BSD 2013-06-25 16:22:14 +02:00
Stefan Bühler 8f42bbe7b4 [gnutls filter] fix cork handling 2013-06-25 16:20:18 +02:00
Stefan Bühler b9fadd3db3 [ssl_sni_parser] debugging, fix parser bug (wrong shift) 2013-06-10 12:12:36 +02:00
Stefan Bühler 85fc9dbb6d [mod_gnutls,fetch api] associate sni certs with dh params, fix fetch bug 2013-06-09 18:10:23 +02:00
Stefan Bühler 796f6b1547 [mod_gnutls] send alerts instead of aborting, allow safe renegotiations 2013-06-09 16:15:43 +02:00
Stefan Bühler 3d86ada352 add ssl_sni_parser.h to make dist 2013-06-08 23:18:39 +02:00
Stefan Bühler 4e59d8608b [automake] workaround automake serial-tests option 2013-06-08 23:10:21 +02:00
Stefan Bühler 6f25870d4b automake: force serial-tests runs, fix USE_SNI handling 2013-06-08 22:18:36 +02:00
Stefan Bühler 92f0a5f237 [mod_gnutls] add sni-fallback-pemfile option 2013-06-08 21:36:59 +02:00
Stefan Bühler 0f9b0ee757 Fix autoconf libidn detection 2013-06-08 21:03:09 +02:00
Stefan Bühler 8d417cec1b [mod_gnutls] fix compile error when compiling without SNI 2013-06-08 20:23:06 +02:00
Stefan Bühler 05e058aa9c fix bugs and warnings reported by clang
* fix memset sizeof() bugs
 * fix unaligned memory access
 * fix warnings for casts with alignment change
 * crypt_r needs _GNU_SOURCE
2013-06-08 20:11:23 +02:00
Stefan Bühler 392e7bb823 [mod_gnutls] add SNI 2013-06-08 20:11:13 +02:00
Stefan Bühler 95f63fc0cf [core] add global named fetch pool; all backends have to return strings. implement a simple backend. 2013-06-08 20:10:47 +02:00
Stefan Bühler 2bcb880dc8 [core] implement generic "fetch" api 2013-06-04 01:12:35 +02:00
Stefan Bühler 86c93c6256 [mod_gnutls] use 4096-bit DH params by default 2013-06-02 13:31:06 +02:00
Stefan Bühler 2cc5eb90d6 [mod_gnutls] actually use dh params loaded from file 2013-06-02 12:27:36 +02:00
Stefan Bühler 9a70d79f66 [mod_gnutls] add memory session database 2013-06-02 11:43:04 +02:00
Stefan Bühler c15deb44a4 [mod_gnutls] support DH parameters, use pregenerated 3247 bit parameter by default 2013-06-02 10:44:08 +02:00
Stefan Bühler f4280dca8b [mod_gnutls] session ticket support 2013-06-01 17:40:14 +02:00
Stefan Bühler c49cf3696f [mod_gnutls] fix beast workaround (force RC4 on TLS1.0 and SSL3.0) 2013-06-01 15:28:06 +02:00
Stefan Bühler 97dbcf7e42 [core] add option to disable buffering large request bodies on disk - forward them to backend directly instead
- right now only mod_fastcgi can handle this (it won't set the CONTENT_LENGTH env var, the backend
    has to support this too)
2013-06-01 12:31:25 +02:00
Stefan Bühler 38aad8128e [angel,tests] implement and use "one-shot" option to not restart crashed workers 2013-05-31 20:47:43 +02:00