summaryrefslogtreecommitdiffstatsabout
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* Added patch to fix issue with mod_proxy. Investigation and patch by Alain Knaff.Nokis Mavrogiannopoulos2009-01-041-0/+4
| | | | | | | | | | | | | It seems that the reason for this behavior is that the mgs_hook_pre_connection is being called both for incoming and outgoing (mod_proxy) connections. The attached patch (mod_proxy.patch) tries to find out in which case we are, and returns OK without doing anything if it is an outgoing connection. The method of telling both cases apart (namely, checking whether remote address' hostname is set) may seem somewhat hackish, but it does work, even if HostnameLookups is set to On. If ever there is a problem with this method, we might need to check local port instead (whether it is 443), but that would break if a non-standard https port was used.
* APLOG_EMERG was replaced with APLOG_STARTUP for startup messages.Nokis Mavrogiannopoulos2008-11-021-4/+4
|
* increased max handshake triesNokis Mavrogiannopoulos2008-10-161-1/+1
|
* Allow openpgp-only sitesNokis Mavrogiannopoulos2008-10-011-4/+6
|
* better loggingNokis Mavrogiannopoulos2008-10-011-21/+24
|
* updated README file to account for openpgp keys --patch by Jack BatesNokis Mavrogiannopoulos2008-10-011-11/+32
|
* use memmove instead of memcpy because buffers might overlap. Nokis Mavrogiannopoulos2008-09-141-2/+2
|
* added check for invalid contextNokis Mavrogiannopoulos2008-09-141-0/+3
|
* depend on main libgnutls library (and gnutls 2.4.x)Nokis Mavrogiannopoulos2008-06-291-6/+0
|
* send database store failure as DEBUGNokis Mavrogiannopoulos2008-03-051-1/+1
|
* corrected SRP enable flag, and corrected the DBM hook support. It now free ↵Nokis Mavrogiannopoulos2008-03-032-2/+8
| | | | data needed by some DBM providers.
* added option to disable srp (for distributions that disable it in gnutls)Nokis Mavrogiannopoulos2008-02-203-0/+15
|
* prepare for an alpha releaseNokis Mavrogiannopoulos2008-01-241-2/+0
|
* (no commit message)Nokis Mavrogiannopoulos2007-12-161-1/+1
|
* more changes for openpgp support. Seems to be at a workable state.Nokis Mavrogiannopoulos2007-12-163-27/+50
|
* print error if preconfiguration failsNokis Mavrogiannopoulos2007-12-151-4/+8
|
* Initial support for openpgp keysNokis Mavrogiannopoulos2007-12-153-40/+307
|
* (no commit message)Nokis Mavrogiannopoulos2007-12-101-4/+0
|
* (no commit message)Nokis Mavrogiannopoulos2007-12-101-4/+8
|
* (no commit message)Nokis Mavrogiannopoulos2007-12-091-4/+4
|
* Do not allow resuming sessions on different servers.Nokis Mavrogiannopoulos2007-12-091-35/+49
|
* Corrected bug which did not allow the TLS session cache to be used.Nokis Mavrogiannopoulos2007-12-091-4/+2
|
* Added support for sending more than one certificate.Nokis Mavrogiannopoulos2007-12-082-14/+10
|
* added more error checks.Nokis Mavrogiannopoulos2007-12-032-11/+49
|
* better handling of RSAFile and DHFileNokis Mavrogiannopoulos2007-12-032-103/+79
|
* report the missing GnuTLSPriorities for the gnutls enabled hosts only.Nokis Mavrogiannopoulos2007-12-021-1/+1
|
* No more defaults for dhparams, rsaparams. Check for GnuTLSPriorities.Nokis Mavrogiannopoulos2007-12-023-14/+26
|
* The compatibility mode can now be enabled only using the GnuTLSPriorities ↵Nokis Mavrogiannopoulos2007-12-021-5/+0
| | | | string.
* (no commit message)Nokis Mavrogiannopoulos2007-12-021-4/+4
|
* added SSL_SERVER/CLIENT_S_TYPENokis Mavrogiannopoulos2007-12-021-0/+3
|
* export the alternative names of the certificateNokis Mavrogiannopoulos2007-12-021-45/+88
|
* added SSL_SERVER_M_SERIAL environment variableNokis Mavrogiannopoulos2007-12-021-0/+5
|
* more fixes for subject alternative name.Nokis Mavrogiannopoulos2007-12-021-15/+31
|
* some fixes in alternative name supportNokis Mavrogiannopoulos2007-12-021-8/+15
|
* Added support for subject alternative names. (untested)Nokis Mavrogiannopoulos2007-12-012-100/+155
|
* upgraded to 0.4.00.4.0Nokis Mavrogiannopoulos2007-11-286-584/+876
|
* Put a limit on the number of times we try to handshake.Paul Querna2005-09-251-2/+21
|
* start the CA Certificate code.Paul Querna2005-05-243-58/+110
|
* - add lua to do client verificationPaul Querna2005-05-175-20/+338
| | | | | - only use gcrypt locking when required to
* Refactor finding the correct server record to fix resumed sessions.0.2.00.2.xPaul Querna2005-04-252-36/+45
|
* apr_table_setn doesn't copy the data. oops.Paul Querna2005-04-241-3/+3
|
* We already have a Certificate, use it directly. With SNI, GnuTLS doesn't ↵Paul Querna2005-04-241-34/+9
| | | | properly update it's internal state. ick.
* if there aren't any certs.. still set something.Paul Querna2005-04-241-6/+8
|
* add SSL_SERVER_S_DN and SSL_SERVER_I_DN Paul Querna2005-04-241-1/+37
|
* - move hooks to gnutls_hooks.cPaul Querna2005-04-246-706/+729
| | | | | - use 'mgs_' as the prefix for all symbols, instead of mixed prefixes.
* move config functions to their own file. Paul Querna2005-04-244-356/+378
|
* - remove more debug logging.Paul Querna2005-04-223-6/+15
| | | | | - fix a crash by changing the certificate structure *after* starting the handshake.
* client auth is sort of working.Paul Querna2005-04-222-78/+202
|
* working SNI. Not so working Client Cert support.Paul Querna2005-04-212-68/+349
|
* include support for 2.0.xxPaul Querna2005-04-081-0/+5
|