Stefan Bühler
7fb0148348
[mod_gnutls] use only pin callback, don't pass pin as parameter
...
- also check for number of attempts instead of flags,
the same the gnutls internal callback is doing when a
password is passed
Change-Id: I84f5a0c7a4e3aea6f55b7b28c2f57019128351c7
7 years ago
91060ebe91
[mod_gnutls] allow pemfile to accept a key-value list of a certificate and key
...
In addition, this patch adds the ability to specify a PIN,
to be used to decrypt an encrypted key, or to login to a PKCS #11
module.
Change-Id: Iff36879926236d07be6baaa1736985a58c54d0cc
9 years ago
Stefan Bühler
dd9f052c57
[mod_gnutls] remove broken include
9 years ago
Stefan Bühler
17a5168793
[core] convert all assert() to LI_FORCE_ASSERT(), and support writing backtraces on fatal errors with libunwind
9 years ago
Stefan Bühler
23be07f40c
[mod_gnutls] don't abort if 'NORMAL:-CIPHER-ALL:+ARCFOUR-128' is not recognized, use 'NORMAL' instead
9 years ago
Stefan Bühler
f482877825
[doc] document core config and modules in tree
9 years ago
Stefan Bühler
1a7eec4aa5
[mod_gnutls] disable protect-against-beast by default now - considered mitigated on client side
10 years ago
Stefan Bühler
81ff95db84
[mod_gnutls] announce http/1.1 in ALPN
10 years ago
Stefan Bühler
a1fbaab86b
[core/modules] refactor config handling
...
* should be more robust now: taking list of wanted value, handling NULL
pointers instead of value type NONE, fixed some bugs (wrong checks,
mem leaks, ...)
* add many methods to make handling of values easier; most methods
can handle NULL value pointers safely (li_value_type(v) instead of
v->type and so on)
10 years ago
Stefan Bühler
919a8dd6d2
[mod_openssl] error out on unknown parameters
10 years ago
Stefan Bühler
8eae9f3b50
[mod_gnutls] remove ca-file option; only needed for not yet supported client cert authentication. add docs in the source
10 years ago
Stefan Bühler
c372d21f2c
[mod_gnutls] use key-value list for parameters, allows duplicate listen/pemfile parameters
10 years ago
Stefan Bühler
36b901afa7
[mod_gnutls] fix build with SNI disabled
10 years ago
Stefan Bühler
975ca1cddf
[mod_gnutls] parse client hello for sni and protocol version
...
changing priority in gnutls post_client_hello didn't work with session
resumption
10 years ago
Stefan Bühler
f3436e69f1
[gnutls] fix cleanup order (use-after-free)
10 years ago
Stefan Bühler
a1170b3aec
[mod_gnutls] fix segfault when no sni backend was configured
10 years ago
Stefan Bühler
85fc9dbb6d
[mod_gnutls,fetch api] associate sni certs with dh params, fix fetch bug
10 years ago
Stefan Bühler
92f0a5f237
[mod_gnutls] add sni-fallback-pemfile option
10 years ago
Stefan Bühler
8d417cec1b
[mod_gnutls] fix compile error when compiling without SNI
10 years ago
Stefan Bühler
392e7bb823
[mod_gnutls] add SNI
10 years ago
Stefan Bühler
86c93c6256
[mod_gnutls] use 4096-bit DH params by default
10 years ago
Stefan Bühler
2cc5eb90d6
[mod_gnutls] actually use dh params loaded from file
10 years ago
Stefan Bühler
9a70d79f66
[mod_gnutls] add memory session database
10 years ago
Stefan Bühler
c15deb44a4
[mod_gnutls] support DH parameters, use pregenerated 3247 bit parameter by default
10 years ago
Stefan Bühler
f4280dca8b
[mod_gnutls] session ticket support
10 years ago
Stefan Bühler
c49cf3696f
[mod_gnutls] fix beast workaround (force RC4 on TLS1.0 and SSL3.0)
10 years ago
Stefan Bühler
bf6470375a
flush sockets after request end by setting TCP_NODELY temporarily
10 years ago
Stefan Bühler
709296d796
fix bugs and warnings from compiler warnings (memset parameter order, shadow, ...)
10 years ago
Stefan Bühler
c61f4929cb
more asserts and checks in stream_simple_socket
10 years ago
Stefan Bühler
72ec9a432f
[throttle] rewrite
10 years ago
Stefan Bühler
b028ad841f
[mod_gnutls] stream
10 years ago
Stefan Bühler
cfd8955008
[common] implement libev wrapper
...
* need a way to mark a watcher as "don't keep the loop alive"
10 years ago
Stefan Bühler
4793e43461
[mod_gnutls] fix ca-file handling
10 years ago
Stefan Bühler
b1c45e6a8f
[chunk/network] use glib error system to report errors (instead of using virtualrequest context)
11 years ago
Stefan Bühler
c270124514
[mod_gnutls] remove \n from log messages
12 years ago
Stefan Bühler
bef05e0b2e
new module: mod_gnutls
12 years ago
Nikos Mavrogiannopoulos