aboutsummaryrefslogtreecommitdiffstats
path: root/NEWS
blob: 5dea61eb142cf734026b21986348d5cdbf29dce6 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
** Version 0.5.5 (unreleased)

- Removed limits on CA certificate loading. Reported by
  Sander Marechal and Jack Bates.

** Version 0.5.4 (2009-01-04)

- mod_gnutls.h: modified definition to extern to avoid compilation
  errors in darwin.

- Added patch to fix issue with mod_proxy. Investigation and patch by Alain
  Knaff.

- libgnutls detection uses pkg-config.

** Version 0.5.3 (2008-10-16)

- Corrected bug to allow having an OpenPGP-only web site.

- Increased Max handshake tries due to interrupted system calls.

** Version 0.5.2 (2008-06-29)

- Depend on gnutls 2.4 which has openpgp support in main library.

** Version 0.5.1 (2008-03-05)

- Added --disable-srp configure option

- Better check for memcache (patch by Guillaume Rousse)

- Corrected possible memory leak in DBM support for resuming sessions.

** Version 0.5.0-alpha (2008-01-24)

- Added support for OpenPGP keys. The new directives are:
  GnuTLSPGPKeyringFile, GnuTLSPGPCertificateFile, GnuTLSPGPKeyFile

** Version 0.4.2 (2007-12-10)

- Added support for sending a certificate chain.

- Corrected bug which did not allow the TLS session cache to be used.

- Do not allow resuming sessions on different servers.

** Version 0.4.1 (2007-12-03)

- Added support for subject alternative names in certificates.
Only one per certificate is supported.

- New enviroment variables: SSL_CLIENT_M_VERSION, SSL_CLIENT_S_SAN%, 
SSL_CLIENT_S_TYPE, SSL_SERVER_M_VERSION, SSL_SERVER_S_SAN%, SSL_SERVER_S_TYPE

- The compatibility mode can now be enabled explicitely with the
%COMPAT keyword at the GnuTLSPriorities string. It is no longer the default.

- Check for GnuTLSPriorities directive. This corrects a segfault. Thanks
to David Hrbáč.

- Better handling of GnuTLSDHFile and GnuTLSRSAFile.

- No longer default paths for RSA and DH parameter files.
0-06-27 19:55:53 +0200'>2010-06-27 | * Corrected issue with firefox and long post data (had to do ↵Gravatar Nikos Mavrogiannopoulos 2010-03-15 | | | | | with read function not handling EAGAIN and EINTR correctly). * On connection termination be polite and send a bye (common handling of EOC ↵Gravatar Nikos Mavrogiannopoulos 2009-07-21 | | | | and EOS). * removed APR_BUCKET_IS_EOS. Doesn't seem appropriate at this point.Gravatar Nikos Mavrogiannopoulos 2009-07-21 | * More fixes related to bug #102Gravatar Nikos Mavrogiannopoulos 2009-07-20 | * Applied patch of jmdesp that allows certificate lists by client.Gravatar Nikos Mavrogiannopoulos 2009-07-20 | * only call gnutls_bye on non null gnutls session.Gravatar Nikos Mavrogiannopoulos 2009-07-20 | * Avoid requesting certificate from client when we already have it. Patch by ↵Gravatar Nikos Mavrogiannopoulos 2009-06-30 | | | | AlainKnaff. * Applied patch by AlainKnaff to correctly verify certificates per directory. ↵Gravatar Nikos Mavrogiannopoulos 2009-06-30 | | | | | | | Patch by AlainKnaff. Solves: http://issues.outoforder.cc/view.php?id=93 * set srp username to empty string. Solves ↵Gravatar Nikos Mavrogiannopoulos 2009-06-30 | | | | http://issues.outoforder.cc/view.php?id=92 * Try to avoid bug http://issues.outoforder.cc/view.php?id=102Gravatar Nikos Mavrogiannopoulos 2009-06-30 | * Allow openpgp certificates that have infinite expiration time. Suggestion by ↵Gravatar Nikos Mavrogiannopoulos 2009-06-30 | | | | MattLoar at http://issues.outoforder.cc/view.php?id=96. * Applied patch to allow building with Apache 2.4. Patch by Arfrever Frehtes ↵Gravatar Nikos Mavrogiannopoulos 2009-06-30 | | | | Taifersar Arahesis <arfrever.fta@gmail.com>. * do not try to send empty packs using TLS. This this has a special meaning ↵Gravatar Nikos Mavrogiannopoulos 2009-06-13 | | | | and could result in clients closing connections. * if private key import fails try as pkcs8 key.Gravatar Nikos Mavrogiannopoulos 2009-05-21 | * removed limit on ca certificates' numberGravatar Nikos Mavrogiannopoulos 2009-01-24 | * Added patch to fix issue with mod_proxy. Investigation and patch by Alain Knaff.Gravatar Nikos Mavrogiannopoulos 2009-01-04 | | | | | | | | | | | | | It seems that the reason for this behavior is that the mgs_hook_pre_connection is being called both for incoming and outgoing (mod_proxy) connections. The attached patch (mod_proxy.patch) tries to find out in which case we are, and returns OK without doing anything if it is an outgoing connection. The method of telling both cases apart (namely, checking whether remote address' hostname is set) may seem somewhat hackish, but it does work, even if HostnameLookups is set to On. If ever there is a problem with this method, we might need to check local port instead (whether it is 443), but that would break if a non-standard https port was used. * APLOG_EMERG was replaced with APLOG_STARTUP for startup messages.Gravatar Nikos Mavrogiannopoulos 2008-11-02 | * increased max handshake triesGravatar Nikos Mavrogiannopoulos 2008-10-16 | * Allow openpgp-only sites