aboutsummaryrefslogtreecommitdiffstats
path: root/README
diff options
context:
space:
mode:
authorGravatar Nokis Mavrogiannopoulos 2008-02-20 18:50:41 +0000
committerGravatar Nokis Mavrogiannopoulos 2008-02-20 18:50:41 +0000
commit586e3bef5d34d090d9480e146783c33313f9dc34 (patch)
tree928d7bc1a0141b95828e62e29aacf4aebab338c8 /README
parent8e33f2d4c149fe8b6d2f1f3bdb06c52da53952f1 (diff)
added tags0.4.1
Diffstat (limited to 'README')
-rw-r--r--README67
1 files changed, 59 insertions, 8 deletions
diff --git a/README b/README
index 557ba77..5198ed7 100644
--- a/README
+++ b/README
@@ -11,7 +11,7 @@ to debug. I wanted to understand how it worked, and I had recently heard about
11GnuTLS, so long story short, I decided to implement a mod_gnutls. 11GnuTLS, so long story short, I decided to implement a mod_gnutls.
12 12
13Lines of Code in mod_ssl: 15,324 13Lines of Code in mod_ssl: 15,324
14Lines of Code in mod_gnutls: 1,886 14Lines of Code in mod_gnutls: 3,594
15 15
16Because of writing mod_gnutls, I now understand how input and output filters work, 16Because of writing mod_gnutls, I now understand how input and output filters work,
17better than I ever thought possible. It was a little painful at times, and some parts 17better than I ever thought possible. It was a little painful at times, and some parts
@@ -19,19 +19,20 @@ lift code and ideas directly from mod_ssl. Kudos to the original authors of mod_
19 19
20---------------------------- 20----------------------------
21 21
22Author: Paul Querna <chip force-elite.com 22Author: Paul Querna <chip force-elite.com>
23
24Heavily modified by Nikos Mavrogiannopoulos <nmav gnutls.org>
23 25
24License: Apache Software License v2.0. (see the LICENSE file for details) 26License: Apache Software License v2.0. (see the LICENSE file for details)
25 27
26Current Status: 28Current Status:
27- SSL and TLS connections with all popular browsers work! Paul Querna 2005-04-04
|
* working support for a ssl session cache via memcached.Gravatar Paul Querna 2004-12-10
|
* add check for apr_memcacheGravatar Paul Querna 2004-12-09
|
* setting proper ignores.Gravatar Paul Querna 2004-12-02
| | | | | | | adding an empty cache files trying to fix >16kb writes.
* input and output filtersGravatar Paul Querna 2004-09-28
|
* rename structures.Gravatar Paul Querna 2004-09-27
| | | | | | properly prefix all non-static functions with mod_gnutls_ fix build for GnuTLS 1.0.X. (redefine the changed structure names)
* break up the IO functions into their own fileGravatar Paul Querna 2004-09-27
class='ctx'> # This is the Private key for your server. 56 # This is the Private key for your server. 56 GnuTLSKeyFile conf/server.key 57 GnuTLSX509KeyFile conf/server.key 57 58 58 # This is the Server Certificate. 59 # This is the Server Certificate. 59 GnuTLSCertificateFile conf/server.cert 60 GnuTLSX509CertificateFile conf/server.cert 61</VirtualHost> 62 63# a more advanced configuration 64GnuTLSCache dbm "/var/cache/www-tls-cache/cache" 65GnuTLSCacheTimeout 600 66NameVirtualHost 1.2.3.4:443 67 68<VirtualHost 1.2.3.4:443> 69 Servername server.com:443 70 GnuTLSEnable on 71 GnuTLSPriority NORMAL 72# To export exactly the same environment variables as mod_ssl to CGI scripts. 73 GNUTLSExportCertificates on 74 75 GnuTLSX509CertificateFile /etc/apache2/server-cert.pem 76 GnuTLSX509KeyFile /etc/apache2/server-key.pem 77 78# To enable SRP you must have these files installed. Check the gnutls srptool. 79 GnuTLSSRPPasswdFile /etc/apache2/tpasswd 80 GnuTLSSRPPasswdConfFile /etc/apache2/tpasswd.conf 81 82# In order to verify client certificates. Other options to 83# GnuTLSClientVerify could be ignore or require. The GnuTLSClientCAFile 84# contains the CAs to verify client certificates. 85 GnuTLSClientVerify request 86 GnuTLSX509CAFile ca.pem 87 ... 88</VirtualHost> 89 90# A setup for OpenPGP and X.509 authentication 91<VirtualHost 1.2.3.4:443> 92 Servername crystal.lan:443 93 GnuTLSEnable on 94 GnuTLSPriorities NORMAL:+COMP-NULL 95 96# setup the openpgp keys 97 GnuTLSPGPCertificateFile /etc/apache2/test.pub.asc 98 GnuTLSPGPKeyFile /etc/apache2/test.sec.asc 99 100# and the X.509 keys 101 GnuTLSCertificateFile /etc/apache2/server-cert.pem 102 GnuTLSKeyFile /etc/apache2/server-key.pem 103 GnuTLSClientVerify ignore 104 105# To avoid using the default DH params 106 GnuTLSDHFile /etc/apache2/dh.pem 107 108# these are only needed if GnuTLSClientVerify != ignore 109 GnuTLSClientCAFile ca.pem 110 GnuTLSPGPKeyringFile /etc/apache2/ring.asc 60</VirtualHost> 111</VirtualHost>