Stefan Bühler
d72a3c2940
[mod_gnutls] add basic OCSP response stapling support
...
Change-Id: I700b2afd0e0fc60ce4f864e77166e3fa2e36aaae
7 years ago
Stefan Bühler
7fb0148348
[mod_gnutls] use only pin callback, don't pass pin as parameter
...
- also check for number of attempts instead of flags,
the same the gnutls internal callback is doing when a
password is passed
Change-Id: I84f5a0c7a4e3aea6f55b7b28c2f57019128351c7
7 years ago
Stefan Bühler
6a0e57ec8f
[parsers] fix unused variable warnings
...
Change-Id: Ifc0210235ada102e2dbcba23e1179e87b973510f
7 years ago
Stefan Bühler
f17a221cd8
use _DEFAULT_SOURCE instead of _BSD_SOURCE
...
Change-Id: Iecd6f2b4d31cd8f64f1c7ed491650a9b2a35be28
7 years ago
Stefan Bühler
130f14a3ea
[config] expect exactly one comma between list entries
...
- the parser didn't require a comma before, and accepted multiple ones
- comma at end of list still optional
Change-Id: I4bb07ceed9aaceb43a14f7eeb5d364d6718e7acc
8 years ago
Stefan Bühler
a1340123be
[cmake] handle include directories separately
...
- update cmake required version to 3.0
- should workaround cmake CodeBlocks generator (-> qtcreator) bug with not finding the include paths
Change-Id: I95a6741ff9fc6cc75ae62774ad53d438bfd67b90
8 years ago
Stefan Bühler
3a4698d6b9
[pattern] fix all calls of li_pattern_eval to provide latest regex match
...
Change-Id: I7aeaf908eab9da3fe24e9871f648e3fd58fddbe1
8 years ago
Stefan Bühler
d2c6a28d97
use g_assert instead of g_assert_true for older glib2 versions
...
Change-Id: Ie2a4e7b723d7a123f08c9c79503425b40a76a5b7
8 years ago
Stefan Bühler
c9a3764f12
[ssl] don't exit early when there is no data to write; otherwise EOS stream handling is not triggered
...
Change-Id: Ie49fa1e7062f91c5708ae72db48c8e2144570f20
8 years ago
Stefan Bühler
909626691e
ignore CMakeLists.txt.user (qtcreator)
...
Change-Id: If42de6186888a301e1276c48182bd5bbb7e826bb
8 years ago
Stefan Bühler
f527a16138
[debug] provide more unique event names for waitqueues
...
Change-Id: Iddf9e10b3902fbfe4fa7e97b7a172018d0d70b54
8 years ago
Stefan Bühler
535f6b4afb
[streams] improve stream handling, hopefully fixes bug with lingering backend connections
...
- reset backend_source before backend_drain; first tell the backend we
are not interested in data anymore, then force closing the outgoing
data
- as backend_drain might get reopened for a Connection: upgrade, the
backend cannot rely on backend_drain->out.is_closed, but waits for a
disconnect (which will also release the last reference). the same is
done for backend_source, so a backend can just wait for both reference
counts to drop to zero before actually closing the backend connection
(unless it keeps the streams alive itself).
Change-Id: Ibfe7985debd71580dbb78b985abaf946f59e3024
8 years ago
Stefan Bühler
4375aba174
[request parser] adapt whitespace removal from response parser, fixes bug removing last character if CR was missing
...
Change-Id: Idd39363b460f1141aa2bebde187f3ca10a7bb344
8 years ago
Stefan Bühler
f6def17999
[common] format IPv6 addresses with port as [addr]:port (added the square brackets)
...
Change-Id: Ic5246c6cf9e1762b8e8ea4c020983289c4e071c6
8 years ago
Stefan Bühler
3cfc0aa82c
[automake] add missing files to dist tar
...
Change-Id: I2c53b97415301931ca9530ac8d54701daef59ec8
8 years ago
Stefan Bühler
811e13cfcd
[common] fix out-of-bounds read in li_sockaddr_to_string
...
Change-Id: I8984b6b170a43eb8c0f648c31957c5ae441cf93f
8 years ago
Stefan Bühler
78ac96cc04
[mod_debug] show more details for events
...
Change-Id: I245cff8a95839fa961ec32a8a8b2f3da39edb777
8 years ago
Stefan Bühler
3f7de3b51a
mimetypes.conf: add some new mime types, remove .dat, .sha1, .md5, update .vcf
...
- create-mimetypes.conf.pl: also parse lines with upper case characters
- rerun create-mimetypes.conf.pl with debian mime-support 3.58
Change-Id: I8a6e91b8cc879158d5cd8931630a67db4d5a0dd2
8 years ago
Stefan Bühler
b37d95facf
[lua] handle filter->vr == NULL in lua filters, handle filter->in == NULL in xsendfile
...
Change-Id: I5326ce72f1b45bf0b64194e6ec8935b6261d18d2
8 years ago
Stefan Bühler
6b22f2f104
[mod_debug] debug events
...
Change-Id: Ib776e950902a36f13ed766a78a92f6971310e87d
8 years ago
Stefan Bühler
66bd6b22a2
track event "names" for debugging
...
Change-Id: Ib8f2b589a6087de2355906a87bd2cd0c84bafcba
8 years ago
17d066bc57
Add systemd unit file
...
Change-Id: I680ab136870a8474e4979517fe46f2c9eff8ce34
9 years ago
Stefan Bühler
a5886b3a81
[mod_openssl] various fixes, fix error handling
...
- update docs with default options
- always set "session_id_context"
- load all algorithms
- cleanup error handling (abort on fatal errors, not the other way
round, log non fatal errors in debug log-level)
Change-Id: I2b6028bbe97a237ab94ad00d58c7773d9d3d8830
9 years ago
Stefan Bühler
10305546cb
[core] close out stream nicely on regular shutdown (fixes openssl session problem)
...
Change-Id: Iaac73fa64c03225751c4492b5c690094f3d6e97f
9 years ago
Stefan Bühler
93d04a3514
[tests] use gnutls certtool to create test ca
...
also supports generating ecc (ecdsa) keys and selecting a hash
Change-Id: Iafa6557a4f0a97885a3300861b842289b73ea1de
9 years ago
Stefan Bühler
f144349c72
[mod_openssl] allow all authentication methods in default cipher string
...
The details depend on the server key anyway; with the new default string
ecdsa keys work out of the box.
Change-Id: I7229f899ffd8dca5740767f9832980198b4f7bee
9 years ago
Stefan Bühler
fc02dcf9e2
[mod_gnutls] improve alert handling
...
* print alerts with numerical value
* show non-fatal alerts
* use log level info for all alerts
* use log level warning for non-fatal "unknown" errors
Change-Id: Ibaa33743bfe809579981fdeb121955ef5c6d0ab2
9 years ago
Stefan Bühler
f7155d5972
[doc] mod_gnutls: add comment that reusing keys in DH is not recommended anyway
...
Change-Id: I392b2913ca5f7fdc88bf773032b27d2417211a58
9 years ago
Stefan Bühler
6954c4563b
[doc] improve section about DH/DSA parameters in mod_gnutls
...
Change-Id: I9665691ff3c6dbb24defc02ae3f9a2f8efe8264d
9 years ago
91060ebe91
[mod_gnutls] allow pemfile to accept a key-value list of a certificate and key
...
In addition, this patch adds the ability to specify a PIN,
to be used to decrypt an encrypted key, or to login to a PKCS #11
module.
Change-Id: Iff36879926236d07be6baaa1736985a58c54d0cc
9 years ago
344e918f05
[mod_gnutls] when an alert is received print its actual value
...
Change-Id: I89b12cb5e53cbd0d36d9b30d9a7e99aa70836717
9 years ago
Stefan Bühler
aa44c63f59
[doc] clarify "physical.exists" semantic
...
Change-Id: I8212e4e66c2666579a8726c35f6840e3eddf4366
9 years ago
Stefan Bühler
912b460145
[autobuild] fix configure to search for openssl in the specified paths
9 years ago
Stefan Bühler
72011fbede
[mox_rewrite,mod_proxy,docs] fix request.raw_path handling (includes query-string)
9 years ago
Stefan Bühler
2fe2af2022
[docs] generate link back to index in sub pages
9 years ago
Stefan Bühler
ab60804b9c
[docs] fix typo
9 years ago
Stefan Bühler
b5eac15433
[mod_proxy] use raw_path instead of re-encoded path
9 years ago
Stefan Bühler
6e2ca4b80c
[tests] small cleanups: use req_header.overwrite, no_docroot option
9 years ago
Stefan Bühler
76c12e4077
[mod_rewrite] rewrite_raw result gets decoded
9 years ago
Stefan Bühler
4c741ce853
[core] expose request.raw_path as condition variable
9 years ago
Stefan Bühler
e168e0653c
[docs] fix typos, add some details, add rewrite_raw action
9 years ago
Stefan Bühler
9acfe515f7
[docs] fix xml error
9 years ago
Stefan Bühler
4741120b74
[docs] fix links, add index page, add small introduction, add lua config / api
9 years ago
Stefan Bühler
5c9a9bbaba
[docs] some small fixes
9 years ago
Stefan Bühler
dd9f052c57
[mod_gnutls] remove broken include
9 years ago
Stefan Bühler
47c1cf1c20
[tests] increase timeout for https requests
9 years ago
Stefan Bühler
d58d98a62d
[value] move value functions that depend on angel / main implementations into separate file, included in the other implementations
...
this fixes building with --no-undefined. also link with libm in cmake.
9 years ago
Stefan Bühler
55042a89a9
[tests] add a 0.2 second sleep before testing memcache lookup after store
9 years ago
Stefan Bühler
928d5dcb5e
[angel] don't load angel core plugin for shut down, so the core plugin doesn't respawn a worker with default settings
9 years ago
Stefan Bühler
c30060e0eb
[angel] check setgid/setuid/... return values and abort on failure
9 years ago
Marcus Rückert