Checkout Tools
  • last updated 36 mins ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
update mod_ssl transformations
  1. … 3 more files in changeset.
link to the OpenSSL 1.0.2 version of the SSL_CONF_cmd man page
  1. … 1 more file in changeset.
Clarify the change to the default cipher suite lists
  1. … 2 more files in changeset.
adjust link to SSL_CONF_cmd man page on www.openssl.org, again
  1. … 2 more files in changeset.
Merge r1650047 from trunk:

Add support for extracting subjectAltName entries of type

rfc822Name and dNSName into SSL_{CLIENT,SERVER}_SAN_{Email,DNS}_n

variables.

* docs/manual/mod/mod_ssl.xml: add SSL_*_SAN_*_n entries to the

environment variables table

* modules/ssl/ssl_engine_kernel.c: in ssl_hook_Fixup, add extraction

of subjectAltName entries for the "StdEnvVars" case

* modules/ssl/ssl_engine_vars.c: add support for retrieving the

SSL_{CLIENT,SERVER}_SAN_{Email,DNS}_n variables, either with

individual on-demand lookup (ssl_var_lookup_ssl_cert_san),

or with full-list extraction to the environment ("StdEnvVars")

* modules/ssl/ssl_private.h: add modssl_var_extract_san_entries prototype

* modules/ssl/ssl_util_ssl.c: implement SSL_X509_getSAN and

SSL_ASN1_STRING_to_utf8 helper functions, with factoring out common

code from SSL_X509_getIDs and SSL_X509_NAME_ENTRY_to_string where

suitable. Limit SSL_X509_getSAN to the two most common subjectAltName

entry types appearing in user or server certificates (i.e., rfc822Name

and dNSName), for the time being.

* modules/ssl/ssl_util_ssl.h: add SSL_ASN1_STRING_to_utf8

and SSL_X509_getSAN prototypes

Proposed by: kbrand

Reviewed by: ylavic, druggeri

  1. … 1 more file in changeset.
Not that hard to explain...
  1. … 1 more file in changeset.
adjust link to SSL_CONF_cmd man page on www.openssl.org
  1. … 2 more files in changeset.
Fix NetWare build: set NLM version with commandline option

instead of linker def file due to bug with mwldnlm linker

where patch version > 26 is ignored from def file.

  1. … 2 more files in changeset.
Merge r1585090 from trunk:

Bring SNI behavior into better conformance with RFC 6066:

- no longer send a warning-level unrecognized_name(112) alert

when no matching vhost is found (PR 56241)

- at startup, only issue warnings about IP/port conflicts and name-based

SSL vhosts when running with an OpenSSL without TLS extension support

(almost 5 years after SNI was added to 2.2.x, the

"[...] only work for clients with TLS server name indication support"

warning feels obsolete)

Proposed by: kbrand

Reviewed by: jorton, ylavic

  1. … 1 more file in changeset.
Move entry already backported to 2.4.8.
  1. … 1 more file in changeset.
Backport r1421323, r1534754, r1546693, r1555464 from trunk:

Add support for OpenSSL configuration commands by introducing

the SSLOpenSSLConfCmd directive.

Proposed by: kbrand

Reviewed by: drh, trawick

  1. … 1 more file in changeset.
Removed comment which should never have been committed.

(thanks Eric!)

  1. … 1 more file in changeset.
RFC 6961 (TLS Multiple Certificate Status Extension)

has been published in June 2013; replace obsolete I-D reference.

  1. … 2 more files in changeset.
NetWare build: make use of SVN revision optional.

  1. … 2 more files in changeset.
Use SVN revision for NetWare dev builds version info.

  1. … 4 more files in changeset.
Fixed NetWare default versions.

  1. … 1 more file in changeset.
Some windows install.log output cosmetics.

  1. … 1 more file in changeset.
Fixed a potential NULL pointer deference.

This was brought up on dev list by Christophe Jaillet.

  1. … 1 more file in changeset.
Style fixes - no code changes.

  1. … 1 more file in changeset.
Windows: Fix output of -M, -L, and similar command-line options

which display information about the server configuration (backport r1374428).

Submitted by: trawick

Reviewed/backported by: gsmith, fuankg

  1. … 1 more file in changeset.
NetWare build system: fixed var names.

Renamed wrong and misleading var names in makefiles.

No functional change.

  1. … 4 more files in changeset.
Fixed Netware builds for PCRE 8.30.

  1. … 2 more files in changeset.
Fixed c&p error.

  1. … 1 more file in changeset.
Some cosmetic NetWare makefile tweaks.

    • ?
    ./modules/debugging/NWGNUmodbucketeer
  1. … 4 more files in changeset.
Removed some proxy imports from NetWare build.

  1. … 1 more file in changeset.
Removed import file since now dynamically generated.

  1. … 1 more file in changeset.
NetWare build fixes.

Create mod_cache.imp dynamically; fixed mod_cache_disk NLM name.

  1. … 4 more files in changeset.
Added missing proxy import to Netware build.

  1. … 1 more file in changeset.
Fixed compilation for non-*nix platforms.

  1. … 1 more file in changeset.
Added another module load statement to NetWare config.

  1. … 1 more file in changeset.