Checkout Tools
  • last updated 1 hour ago
Constraints: committers
Constraints: files
Constraints: dates
Improve ephemeral key handling (companion to r1526168):

- allow to configure custom DHE or ECDHE parameters via the

SSLCertificateFile directive, and adapt its documentation

accordingly (addresses PR 49559)

- add standardized DH parameters from RFCs 2409 and 3526,

use them based on the length of the certificate's RSA/DSA key,

and add a FAQ entry for clients which limit DH support

to 1024 bits (such as Java 7 and earlier)

- move ssl_dh_GetParamFromFile() from ssl_engine_dh.c to

ssl_util_ssl.c, and add ssl_ec_GetParamFromFile()

- drop ssl_engine_dh.c from mod_ssl

For the standardized DH parameters, OpenSSL version 0.9.8a

or later is required, which was therefore made a new minimum

requirement in r1527294.

  1. … 11 more files in changeset.
Enforce OpenSSL 0.9.7 as a minimum requirement in configure, and

remove #ifdef'ed code which was relevant for earlier versions only.

  1. … 11 more files in changeset.
Remove the ssl_toolkit_compat layer, which is no longer needed

after support for non-OpenSSL toolkits has been dropped.

Replace macros by their value proper where feasible, and keep

those definitions in ssl_private.h which depend on specific

OpenSSL versions.

  1. … 12 more files in changeset.
* modules/ssl/ssl_engine_dh.c: Fix indent args so the code

regeneration modifies the OpenSSL output correctly.

update license header text
  1. … 316 more files in changeset.
Update the copyright year in all .c, .h and .xml files

  1. … 497 more files in changeset.
No functional Change: Removing trailing whitespace. This also

means that "blank" lines consisting of just spaces or

tabs are now really blank lines

  1. … 180 more files in changeset.
* modules/ssl/ssl_engine_dh.c: Adjust the embedded perl code such that

it generates the current C code again (after some refactoring a while

ago); and regenerate the file.

Update copyright year to 2005 and standardize on current copyright owner line.

  1. … 522 more files in changeset.
general property cleanup

  1. … 712 more files in changeset.
Move mod_ssl-internal interfaces into ssl_private.h; allow mod_ssl.h

to be included even when mod_ssl is not enabled.

* (install-include): Only install mod_ssl.h.

* modules/ssl/ssl_private.h: New file.

* modules/ssl/mod_ssl.h: Move everything apart from than the optional

hook definitions into ssl_private.h.

* modules/ssl/*.c: Include ssl_private.h not mod_ssl.h

* modules/ssl/config.m4: Always add the mod_ssl directory to the

include path so other modules can find mod_ssl.h.

* modules/proxy/mod_proxy.c: Include mod_ssl.h to pick up the optional

hook definitions rather than copy'n'pasting them.

  1. … 28 more files in changeset.
fix name of The Apache Software Foundation

  1. … 361 more files in changeset.
fix copyright dates according to the first check in

  1. … 24 more files in changeset.
apply Apache License, Version 2.0

  1. … 262 more files in changeset.
update license to 2004.

  1. … 281 more files in changeset.
finished that boring job:

update license to 2003.

Happy New Year! ;-))

  1. … 271 more files in changeset.
add modssl_dh_configure() function to fold some duplication in

get_dh{512,1024} and provide toolkit compat for sslc 2.x

  1. … 2 more files in changeset.
Update our copyright for this year.

  1. … 260 more files in changeset.
Forward port of changes in mod_ssl for Apache 1.3 up through mod_ssl

version 2.8.7-1.3.23.

  1. … 8 more files in changeset.
Remove all warnings from the input filtering stack.

  1. … 11 more files in changeset.
Nothing to port for ssl_engine_dh.c except that

SSL_LIBRARY_VERSION has to be already available.

  1. … 2 more files in changeset.
Next step in mod_ssl integration:

Add missing files to build environment.

  1. … 31 more files in changeset.
mod_ssl integration step 2:

transfer copyright of all code to ASF by using Apache Software License v1.1

  1. … 33 more files in changeset.
Initial revision

  1. … 41 more files in changeset.