 Stefan Bühler
|
919a8dd6d2
|
[mod_openssl] error out on unknown parameters
|
10 years ago |
|
Stefan Bühler
|
dc2f0b7885
|
[mod_openssl] support key-value list for multiple listen parameters
|
10 years ago |
|
Stefan Bühler
|
8eae9f3b50
|
[mod_gnutls] remove ca-file option; only needed for not yet supported client cert authentication. add docs in the source
|
10 years ago |
|
Stefan Bühler
|
c372d21f2c
|
[mod_gnutls] use key-value list for parameters, allows duplicate listen/pemfile parameters
|
10 years ago |
|
Stefan Bühler
|
969818083e
|
[core] add li_value_to_key_value_list: convert value hash to key-value list
|
10 years ago |
|
Stefan Bühler
|
ab47f9b33c
|
[mod_gnutls] fix endless loop in client hello parser
|
10 years ago |
|
Stefan Bühler
|
36b901afa7
|
[mod_gnutls] fix build with SNI disabled
|
10 years ago |
|
Stefan Bühler
|
40169d5fc9
|
[autobuild] fix renamed header ssl_client_hello_parser.h
|
10 years ago |
|
Stefan Bühler
|
a7f41b9e3b
|
[core] check for disabled keep-alive early to send matching headers
|
10 years ago |
|
Stefan Bühler
|
975ca1cddf
|
[mod_gnutls] parse client hello for sni and protocol version
changing priority in gnutls post_client_hello didn't work with session
resumption
|
10 years ago |
|
Stefan Bühler
|
c51d89fe6e
|
[mod_openssl] disable SSL3 by default
|
10 years ago |
|
Stefan Bühler
|
0b8365ca29
|
[mod_openssl] enable DH and ECDH
|
10 years ago |
|
Stefan Bühler
|
b9d77f50a4
|
[core] add req_header.* actions
|
10 years ago |
|
Stefan Bühler
|
f3436e69f1
|
[gnutls] fix cleanup order (use-after-free)
|
10 years ago |
Simon Lundström
|
859da7d7eb
|
[plugin_core] docroot: show stat() errors for all entries when debug log is enabled
|
10 years ago |
|
Stefan Bühler
|
f64ba1bb72
|
[fastcgi] add debug prints before all fastcgi_reset calls, don't reset connection on stderr data if connection was already closed
|
10 years ago |
|
Stefan Bühler
|
9aafe5aa2a
|
[fetch] use signed integers for liFetchDatabase refcount
|
10 years ago |
|
Stefan Bühler
|
e762189fb5
|
[core] only use feature test macros on linux
|
10 years ago |
|
Stefan Bühler
|
bfa1395937
|
[throttle] fix connection throttling refill calculation
|
10 years ago |
|
Stefan Bühler
|
a1170b3aec
|
[mod_gnutls] fix segfault when no sni backend was configured
|
10 years ago |
|
Stefan Bühler
|
d5bb6003dc
|
include lighttpd/settings.h instead of base.h in common source
|
10 years ago |
|
Stefan Bühler
|
8f42bbe7b4
|
[gnutls filter] fix cork handling
|
10 years ago |
|
Stefan Bühler
|
b9fadd3db3
|
[ssl_sni_parser] debugging, fix parser bug (wrong shift)
|
10 years ago |
|
Stefan Bühler
|
85fc9dbb6d
|
[mod_gnutls,fetch api] associate sni certs with dh params, fix fetch bug
|
10 years ago |
|
Stefan Bühler
|
796f6b1547
|
[mod_gnutls] send alerts instead of aborting, allow safe renegotiations
|
10 years ago |
|
Stefan Bühler
|
3d86ada352
|
add ssl_sni_parser.h to make dist
|
10 years ago |
|
Stefan Bühler
|
92f0a5f237
|
[mod_gnutls] add sni-fallback-pemfile option
|
10 years ago |
|
Stefan Bühler
|
8d417cec1b
|
[mod_gnutls] fix compile error when compiling without SNI
|
10 years ago |
|
Stefan Bühler
|
05e058aa9c
|
fix bugs and warnings reported by clang
* fix memset sizeof() bugs
* fix unaligned memory access
* fix warnings for casts with alignment change
* crypt_r needs _GNU_SOURCE
|
10 years ago |
|
Stefan Bühler
|
392e7bb823
|
[mod_gnutls] add SNI
|
10 years ago |
|
Stefan Bühler
|
95f63fc0cf
|
[core] add global named fetch pool; all backends have to return strings. implement a simple backend.
|
10 years ago |
|
Stefan Bühler
|
2bcb880dc8
|
[core] implement generic "fetch" api
|
10 years ago |
|
Stefan Bühler
|
86c93c6256
|
[mod_gnutls] use 4096-bit DH params by default
|
10 years ago |
|
Stefan Bühler
|
2cc5eb90d6
|
[mod_gnutls] actually use dh params loaded from file
|
10 years ago |
|
Stefan Bühler
|
9a70d79f66
|
[mod_gnutls] add memory session database
|
10 years ago |
|
Stefan Bühler
|
c15deb44a4
|
[mod_gnutls] support DH parameters, use pregenerated 3247 bit parameter by default
|
10 years ago |
|
Stefan Bühler
|
f4280dca8b
|
[mod_gnutls] session ticket support
|
10 years ago |
|
Stefan Bühler
|
c49cf3696f
|
[mod_gnutls] fix beast workaround (force RC4 on TLS1.0 and SSL3.0)
|
10 years ago |
|
Stefan Bühler
|
97dbcf7e42
|
[core] add option to disable buffering large request bodies on disk - forward them to backend directly instead
- right now only mod_fastcgi can handle this (it won't set the CONTENT_LENGTH env var, the backend
has to support this too)
|
10 years ago |
|
Stefan Bühler
|
38aad8128e
|
[angel,tests] implement and use "one-shot" option to not restart crashed workers
|
10 years ago |
|
Stefan Bühler
|
64cabac477
|
[core] fix connection timeout handling
|
10 years ago |
|
Stefan Bühler
|
5e4a94b0c6
|
[core] handle Connection: Upgrade
|
10 years ago |
|
Stefan Bühler
|
5e0a58be53
|
[stream-http-response] support chunk encoded responses
|
10 years ago |
|
Stefan Bühler
|
3deb7c9e79
|
[core] support chunked uploads
|
10 years ago |
|
Stefan Bühler
|
4706cc5f60
|
Fix filedescriptor/socket leaking
|
10 years ago |
|
Stefan Bühler
|
00926c8049
|
[mod_openssl,mod_gnutls] fix missing disconnect (mem leak), free buffers (mem leak)
|
10 years ago |
|
Stefan Bühler
|
42b49307b9
|
[mod_fastcgi] next try to fix use after free
|
10 years ago |
|
Stefan Bühler
|
bb018b091a
|
[mod_fastcgi] fix use after free
|
10 years ago |
|
Stefan Bühler
|
6e6e8792de
|
[filter] don't run filter on stream-dest connect
|
10 years ago |
|
Stefan Bühler
|
7f61ca9dba
|
disable some debug messages
|
10 years ago |