Stefan Bühler
23be07f40c
[mod_gnutls] don't abort if 'NORMAL:-CIPHER-ALL:+ARCFOUR-128' is not recognized, use 'NORMAL' instead
9 years ago
Stefan Bühler
133941c327
[mod_status] use PACKAGE_BUILD_DATE instead of __DATE__/__TIME__
9 years ago
Stefan Bühler
f482877825
[doc] document core config and modules in tree
9 years ago
Stefan Bühler
3f61b3c1b1
[mod_proxy] send Content-Length for all non GET/HEAD requests
10 years ago
Stefan Bühler
5222d524ad
[plugin_core] fix some setup parameter handling
10 years ago
Stefan Bühler
1a7eec4aa5
[mod_gnutls] disable protect-against-beast by default now - considered mitigated on client side
10 years ago
Stefan Bühler
81ff95db84
[mod_gnutls] announce http/1.1 in ALPN
10 years ago
Stefan Bühler
d65a2ffc16
[mod_redirect] fix segfault in config parsing
10 years ago
Stefan Bühler
a1fbaab86b
[core/modules] refactor config handling
...
* should be more robust now: taking list of wanted value, handling NULL
pointers instead of value type NONE, fixed some bugs (wrong checks,
mem leaks, ...)
* add many methods to make handling of values easier; most methods
can handle NULL value pointers safely (li_value_type(v) instead of
v->type and so on)
10 years ago
Stefan Bühler
061b2a4262
[core] handle differences between options/actions/setups in plugin.c
10 years ago
Stefan Bühler
cebb8df82c
[mod_vhost] fix config mem leak
10 years ago
Stefan Bühler
9f9fe72d97
[lua] fix usage of lua_typename
10 years ago
Stefan Bühler
0adefe5f18
[mod_memcached] convert to handling key-value list
10 years ago
Stefan Bühler
9430a8a112
[mod_deflate] convert to handling key-value list
10 years ago
Stefan Bühler
d825212823
[mod_lua] convert to handling key-value list
10 years ago
Stefan Bühler
a14d0d00a5
[mod_auth] convert to handling key-value list
10 years ago
Stefan Bühler
433d4da14e
[mod_vhost] convert to handling key-value list; make vhost.map_regex predictable
...
vhost.map_regex used to reorder the list to put often used entries at
the top; now it just uses the first matching entry.
new syntax now uses the default keyword for default entries instead of
the string "default".
10 years ago
Stefan Bühler
7bc6e275ef
[mod_throttle] fix refcount and double free
10 years ago
Stefan Bühler
ccd512ca57
[waf] remove waf for now, doesn't work anymore
10 years ago
Stefan Bühler
919a8dd6d2
[mod_openssl] error out on unknown parameters
10 years ago
Stefan Bühler
dc2f0b7885
[mod_openssl] support key-value list for multiple listen parameters
10 years ago
Stefan Bühler
8eae9f3b50
[mod_gnutls] remove ca-file option; only needed for not yet supported client cert authentication. add docs in the source
10 years ago
Stefan Bühler
c372d21f2c
[mod_gnutls] use key-value list for parameters, allows duplicate listen/pemfile parameters
10 years ago
Stefan Bühler
ab47f9b33c
[mod_gnutls] fix endless loop in client hello parser
10 years ago
Stefan Bühler
36b901afa7
[mod_gnutls] fix build with SNI disabled
10 years ago
Stefan Bühler
40169d5fc9
[autobuild] fix renamed header ssl_client_hello_parser.h
10 years ago
Stefan Bühler
975ca1cddf
[mod_gnutls] parse client hello for sni and protocol version
...
changing priority in gnutls post_client_hello didn't work with session
resumption
10 years ago
Stefan Bühler
c51d89fe6e
[mod_openssl] disable SSL3 by default
10 years ago
Stefan Bühler
0b8365ca29
[mod_openssl] enable DH and ECDH
10 years ago
Stefan Bühler
f3436e69f1
[gnutls] fix cleanup order (use-after-free)
10 years ago
Stefan Bühler
f64ba1bb72
[fastcgi] add debug prints before all fastcgi_reset calls, don't reset connection on stderr data if connection was already closed
10 years ago
Stefan Bühler
a1170b3aec
[mod_gnutls] fix segfault when no sni backend was configured
10 years ago
Stefan Bühler
8f42bbe7b4
[gnutls filter] fix cork handling
10 years ago
Stefan Bühler
b9fadd3db3
[ssl_sni_parser] debugging, fix parser bug (wrong shift)
10 years ago
Stefan Bühler
85fc9dbb6d
[mod_gnutls,fetch api] associate sni certs with dh params, fix fetch bug
10 years ago
Stefan Bühler
796f6b1547
[mod_gnutls] send alerts instead of aborting, allow safe renegotiations
10 years ago
Stefan Bühler
3d86ada352
add ssl_sni_parser.h to make dist
10 years ago
Stefan Bühler
92f0a5f237
[mod_gnutls] add sni-fallback-pemfile option
10 years ago
Stefan Bühler
8d417cec1b
[mod_gnutls] fix compile error when compiling without SNI
10 years ago
Stefan Bühler
392e7bb823
[mod_gnutls] add SNI
10 years ago
Stefan Bühler
86c93c6256
[mod_gnutls] use 4096-bit DH params by default
10 years ago
Stefan Bühler
2cc5eb90d6
[mod_gnutls] actually use dh params loaded from file
10 years ago
Stefan Bühler
9a70d79f66
[mod_gnutls] add memory session database
10 years ago
Stefan Bühler
c15deb44a4
[mod_gnutls] support DH parameters, use pregenerated 3247 bit parameter by default
10 years ago
Stefan Bühler
f4280dca8b
[mod_gnutls] session ticket support
10 years ago
Stefan Bühler
c49cf3696f
[mod_gnutls] fix beast workaround (force RC4 on TLS1.0 and SSL3.0)
10 years ago
Stefan Bühler
97dbcf7e42
[core] add option to disable buffering large request bodies on disk - forward them to backend directly instead
...
- right now only mod_fastcgi can handle this (it won't set the CONTENT_LENGTH env var, the backend
has to support this too)
10 years ago
Stefan Bühler
64cabac477
[core] fix connection timeout handling
10 years ago
Stefan Bühler
5e4a94b0c6
[core] handle Connection: Upgrade
10 years ago
Stefan Bühler
4706cc5f60
Fix filedescriptor/socket leaking
10 years ago
