Stefan Bühler
dd9f052c57
[mod_gnutls] remove broken include
8 years ago
Stefan Bühler
17a5168793
[core] convert all assert() to LI_FORCE_ASSERT(), and support writing backtraces on fatal errors with libunwind
8 years ago
Stefan Bühler
23be07f40c
[mod_gnutls] don't abort if 'NORMAL:-CIPHER-ALL:+ARCFOUR-128' is not recognized, use 'NORMAL' instead
8 years ago
Stefan Bühler
f482877825
[doc] document core config and modules in tree
8 years ago
Stefan Bühler
1a7eec4aa5
[mod_gnutls] disable protect-against-beast by default now - considered mitigated on client side
9 years ago
Stefan Bühler
81ff95db84
[mod_gnutls] announce http/1.1 in ALPN
9 years ago
Stefan Bühler
a1fbaab86b
[core/modules] refactor config handling
...
* should be more robust now: taking list of wanted value, handling NULL
pointers instead of value type NONE, fixed some bugs (wrong checks,
mem leaks, ...)
* add many methods to make handling of values easier; most methods
can handle NULL value pointers safely (li_value_type(v) instead of
v->type and so on)
9 years ago
Stefan Bühler
919a8dd6d2
[mod_openssl] error out on unknown parameters
9 years ago
Stefan Bühler
8eae9f3b50
[mod_gnutls] remove ca-file option; only needed for not yet supported client cert authentication. add docs in the source
9 years ago
Stefan Bühler
c372d21f2c
[mod_gnutls] use key-value list for parameters, allows duplicate listen/pemfile parameters
9 years ago
Stefan Bühler
36b901afa7
[mod_gnutls] fix build with SNI disabled
9 years ago
Stefan Bühler
975ca1cddf
[mod_gnutls] parse client hello for sni and protocol version
...
changing priority in gnutls post_client_hello didn't work with session
resumption
9 years ago
Stefan Bühler
f3436e69f1
[gnutls] fix cleanup order (use-after-free)
9 years ago
Stefan Bühler
a1170b3aec
[mod_gnutls] fix segfault when no sni backend was configured
9 years ago
Stefan Bühler
85fc9dbb6d
[mod_gnutls,fetch api] associate sni certs with dh params, fix fetch bug
9 years ago
Stefan Bühler
92f0a5f237
[mod_gnutls] add sni-fallback-pemfile option
9 years ago
Stefan Bühler
8d417cec1b
[mod_gnutls] fix compile error when compiling without SNI
9 years ago
Stefan Bühler
392e7bb823
[mod_gnutls] add SNI
9 years ago
Stefan Bühler
86c93c6256
[mod_gnutls] use 4096-bit DH params by default
9 years ago
Stefan Bühler
2cc5eb90d6
[mod_gnutls] actually use dh params loaded from file
9 years ago
Stefan Bühler
9a70d79f66
[mod_gnutls] add memory session database
9 years ago
Stefan Bühler
c15deb44a4
[mod_gnutls] support DH parameters, use pregenerated 3247 bit parameter by default
9 years ago
Stefan Bühler
f4280dca8b
[mod_gnutls] session ticket support
9 years ago
Stefan Bühler
c49cf3696f
[mod_gnutls] fix beast workaround (force RC4 on TLS1.0 and SSL3.0)
9 years ago
Stefan Bühler
bf6470375a
flush sockets after request end by setting TCP_NODELY temporarily
9 years ago
Stefan Bühler
709296d796
fix bugs and warnings from compiler warnings (memset parameter order, shadow, ...)
9 years ago
Stefan Bühler
c61f4929cb
more asserts and checks in stream_simple_socket
9 years ago
Stefan Bühler
72ec9a432f
[throttle] rewrite
9 years ago
Stefan Bühler
b028ad841f
[mod_gnutls] stream
9 years ago
Stefan Bühler
cfd8955008
[common] implement libev wrapper
...
* need a way to mark a watcher as "don't keep the loop alive"
9 years ago
Stefan Bühler
4793e43461
[mod_gnutls] fix ca-file handling
9 years ago
Stefan Bühler
b1c45e6a8f
[chunk/network] use glib error system to report errors (instead of using virtualrequest context)
10 years ago
Stefan Bühler
c270124514
[mod_gnutls] remove \n from log messages
10 years ago
Stefan Bühler
bef05e0b2e
new module: mod_gnutls
10 years ago
