1538 Commits (93d04a3514428f47e026bb758e654a85e3023ceb)
 

Author SHA1 Message Date
Stefan Bühler 93d04a3514 [tests] use gnutls certtool to create test ca
also supports generating ecc (ecdsa) keys and selecting a hash

Change-Id: Iafa6557a4f0a97885a3300861b842289b73ea1de
9 years ago
Stefan Bühler f144349c72 [mod_openssl] allow all authentication methods in default cipher string
The details depend on the server key anyway; with the new default string
ecdsa keys work out of the box.

Change-Id: I7229f899ffd8dca5740767f9832980198b4f7bee
9 years ago
Stefan Bühler fc02dcf9e2 [mod_gnutls] improve alert handling
* print alerts with numerical value
* show non-fatal alerts
* use log level info for all alerts
* use log level warning for non-fatal "unknown" errors

Change-Id: Ibaa33743bfe809579981fdeb121955ef5c6d0ab2
9 years ago
Stefan Bühler f7155d5972 [doc] mod_gnutls: add comment that reusing keys in DH is not recommended anyway
Change-Id: I392b2913ca5f7fdc88bf773032b27d2417211a58
9 years ago
Stefan Bühler 6954c4563b [doc] improve section about DH/DSA parameters in mod_gnutls
Change-Id: I9665691ff3c6dbb24defc02ae3f9a2f8efe8264d
9 years ago
Nikos Mavrogiannopoulos 91060ebe91 [mod_gnutls] allow pemfile to accept a key-value list of a certificate and key
In addition, this patch adds the ability to specify a PIN,
to be used to decrypt an encrypted key, or to login to a PKCS #11
module.

Change-Id: Iff36879926236d07be6baaa1736985a58c54d0cc
9 years ago
Nikos Mavrogiannopoulos 344e918f05 [mod_gnutls] when an alert is received print its actual value
Change-Id: I89b12cb5e53cbd0d36d9b30d9a7e99aa70836717
9 years ago
Stefan Bühler aa44c63f59 [doc] clarify "physical.exists" semantic
Change-Id: I8212e4e66c2666579a8726c35f6840e3eddf4366
9 years ago
Stefan Bühler 912b460145 [autobuild] fix configure to search for openssl in the specified paths 9 years ago
Stefan Bühler 72011fbede [mox_rewrite,mod_proxy,docs] fix request.raw_path handling (includes query-string) 9 years ago
Stefan Bühler 2fe2af2022 [docs] generate link back to index in sub pages 9 years ago
Stefan Bühler ab60804b9c [docs] fix typo 9 years ago
Stefan Bühler b5eac15433 [mod_proxy] use raw_path instead of re-encoded path 9 years ago
Stefan Bühler 6e2ca4b80c [tests] small cleanups: use req_header.overwrite, no_docroot option 9 years ago
Stefan Bühler 76c12e4077 [mod_rewrite] rewrite_raw result gets decoded 9 years ago
Stefan Bühler 4c741ce853 [core] expose request.raw_path as condition variable 9 years ago
Stefan Bühler e168e0653c [docs] fix typos, add some details, add rewrite_raw action 9 years ago
Stefan Bühler 9acfe515f7 [docs] fix xml error 9 years ago
Stefan Bühler 4741120b74 [docs] fix links, add index page, add small introduction, add lua config / api 9 years ago
Stefan Bühler 5c9a9bbaba [docs] some small fixes 9 years ago
Stefan Bühler dd9f052c57 [mod_gnutls] remove broken include 9 years ago
Stefan Bühler 47c1cf1c20 [tests] increase timeout for https requests 9 years ago
Stefan Bühler d58d98a62d [value] move value functions that depend on angel / main implementations into separate file, included in the other implementations
this fixes building with --no-undefined. also link with libm in cmake.
9 years ago
Stefan Bühler 55042a89a9 [tests] add a 0.2 second sleep before testing memcache lookup after store 9 years ago
Stefan Bühler 928d5dcb5e [angel] don't load angel core plugin for shut down, so the core plugin doesn't respawn a worker with default settings 9 years ago
Stefan Bühler c30060e0eb [angel] check setgid/setuid/... return values and abort on failure 9 years ago
Stefan Bühler 09002ad827 [mod_openssl] fix default cipher string 9 years ago
Stefan Bühler 5e30919291 [mod_openssl] wrap all options in #ifdef 9 years ago
Stefan Bühler 8596f874a7 [autobuild] fix duplicate config.h install and remove config.h from dist tarball 9 years ago
Stefan Bühler 72d4578e70 [doc] add script to generate mimetypes.conf 9 years ago
Stefan Bühler b6ee9241ad [angel_fake] use li_sockaddr_from_string in li_angel_fake_listen 9 years ago
Stefan Bühler 5f4019359e [config parser] copy fixes from angel config parser 9 years ago
Stefan Bühler 63f4b78353 fix some socket address handlings - limit unix socket path names to struct size 9 years ago
Stefan Bühler 5b706ac033 [simple-stream] fix double assignment 9 years ago
Stefan Bühler 21e18176f2 fix wrong operator to check for set bit in events 9 years ago
Stefan Bühler ed7e70d0b4 [angel] fix missing break in switch statement in config parser for casting string to int 9 years ago
Stefan Bühler 3ad9e4cb01 [actions] fix dereference before null check 9 years ago
Stefan Bühler acd2967534 assert many previously unchecked return values, handle some explicitly, remove FD_CLOEXEC in worker - mustn't fork 9 years ago
Stefan Bühler 582a8585ff [fastcgi] assert pointer is not NULL before dereference before NULL check in a loop 9 years ago
Stefan Bühler 118844573c [angel] fix memory leak on error in angel config parser 9 years ago
Stefan Bühler 176d6099aa [liValue] fix missing break in switch statement 9 years ago
Stefan Bühler e5e37b8369 [idlist] fix bad shift operations 9 years ago
Stefan Bühler e0ed289c1a [liValue] fix dereference after NULL check 9 years ago
Stefan Bühler c971749381 [autotools] support libunwind without pkg-config 9 years ago
Stefan Bühler 419d60dd83 [profile] add missing utils.h include 9 years ago
Stefan Bühler deb0dd2428 [doc] always show angel doc in toc 9 years ago
Stefan Bühler 17a5168793 [core] convert all assert() to LI_FORCE_ASSERT(), and support writing backtraces on fatal errors with libunwind 9 years ago
Stefan Bühler e2992d7b6b [ip-parser] allow [ipv6]/net:port and [ipv6/net]:port for IPv6 address + network + port 9 years ago
Stefan Bühler 074f53744a [angel] merge allow_listen_* items
* allow_listen_ip ".." -> allow_listen ".."
 * allow_listen_unix ".." -> allow_listen "unix:.."
 * allow_listen also takes lists of strings
9 years ago
Stefan Bühler 22d186cecc [angel] rewrite config handling, rename items, document it
* remove "instance { ... }" wrapping
  * use "_" instead of "-"
  * modules -> modules_path
  * allow_listen { ip "..."; } -> allow_listen_ip "...";
  * allow_listen { unix "..."; } -> allow_listen_unix "...";
9 years ago