Apply mod_ssl MEGA porting patch. This is a cleaned up version of the

latest patches from Madhusudan which makes mod_ssl 95% working inside
Apache 2.0. There is still a lot of more work (both porting and cleanup)
to do be done. See modules/ssl/README for details.

Submitted by: Madhusudan Mathihalli <madhusudan_mathihalli@hp.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@89618 13f79535-47bb-0310-9956-ffa450edef68

1 files changed, 27 insertions, 13 deletions

diff --git a/modules/ssl/README b/modules/ssl/README
index d7fb29d509..d404203b8d 100644
--- a/modules/ssl/README
+++ b/modules/ssl/README
@@ -23,22 +23,23 @@
 
  Here is a short overview of the source files:
 
+ * README .................. This file ;)
  # Makefile.in ............. Makefile template for Unix platform
  # config.m4 ............... Autoconf stub for the Apache config mechanism
  # mod_ssl.c ............... main source file containing API structures
- - mod_ssl.h ............... common header file of mod_ssl
- - ssl_engine_config.c ..... module configuration handling
+ # mod_ssl.h ............... common header file of mod_ssl
+ # ssl_engine_config.c ..... module configuration handling
  # ssl_engine_dh.c ......... DSA/DH support
  # ssl_engine_ds.c ......... data structures
  - ssl_engine_ext.c ........ Extensions to other Apache parts
- - ssl_engine_init.c ....... module initialization
- - ssl_engine_io.c ......... I/O support
- - ssl_engine_kernel.c ..... SSL engine kernel
- - ssl_engine_log.c ........ logfile support
+ # ssl_engine_init.c ....... module initialization
+ * ssl_engine_io.c ......... I/O support
+ # ssl_engine_kernel.c ..... SSL engine kernel
+ # ssl_engine_log.c ........ logfile support
  # ssl_engine_mutex.c ...... mutual exclusion support
- - ssl_engine_pphrase.c .... pass-phrase handling
- - ssl_engine_rand.c ....... PRNG support
- - ssl_engine_vars.c ....... Variable Expansion support
+ # ssl_engine_pphrase.c .... pass-phrase handling
+ # ssl_engine_rand.c ....... PRNG support
+ # ssl_engine_vars.c ....... Variable Expansion support
  # ssl_expr.c .............. expression handling main source
  # ssl_expr.h .............. expression handling common header
  - ssl_expr_scan.c ......... expression scanner automaton (pre-generated)
@@ -47,8 +48,8 @@
  - ssl_expr_parse.h ........ expression parser header     (pre-generated)
  - ssl_expr_parse.y ........ expression parser source
  # ssl_expr_eval.c ......... expression machine evaluation
- - ssl_scache.c ............ session cache abstraction layer
- - ssl_scache_dbm.c ........ session cache via DBM file
+ # ssl_scache.c ............ session cache abstraction layer
+ # ssl_scache_dbm.c ........ session cache via DBM file
  - ssl_scache_shmcb.c ...... session cache via shared memory cyclic buffer
  - ssl_scache_shmht.c ...... session cache via shared memory hash table
  # ssl_util.c .............. utility functions
@@ -57,7 +58,8 @@
  # ssl_util_table.c ........ the hash table library source
  # ssl_util_table.h ........ the hash table library header
 
- Legend: # = already ported to Apache 2.0
+ Legend: # = already ported to Apache 2.0 and is cleaned up
+         * = ported to Apache 2.0 but still needs cleaning up
          - = port still not finished
 
  The source files are written in clean ANSI C and pass the ``gcc -O -g
@@ -100,6 +102,7 @@
    SSL_SESSION ............. OpenSSL Session
    SSL ..................... OpenSSL Connection
    BIO ..................... OpenSSL Connection Buffer
+   SSLFilterRec ............ mod_ssl Filter Context
 
  For an overview how these are related and chained together have a look at the
  page in README.dsov.{fig,ps}. It contains overview diagrams for those data
@@ -158,12 +161,23 @@
  from Apache 1.3 and this mod_ssl version for Apache 2.0:
 
  o The DBM based session cache is now based on APR's DBM API only.
+ o Introduced Filter logic (similar to mod_tls)
+ o Eliminated ap_global_ctx. Storing Persistant information in 
+   process_rec->pool->user_data. The ssl_pphrase_Handle_CB() and 
+   ssl_config_global_* () functions have an extra parameter now - 
+   "server_rec *" -  which is used to retrieve the SSLModConfigRec.
  
  TODO
 
+ o use ssl_var_lookup?
  o Whether to unregister and how to unregister?
    ssl_var_unregister();
    ssl_ext_unregister();
    ssl_io_unregister();
  o We certainly need CRYPTO_set_locking_callback() now also under Unix!
-
+ o Eliminate APR_BLOCK_READ from churn (). The APR_NONBLOCK_READ doesn't work
+   currently. The filter logic has to be changed to handle situations when 
+   the data is not available immediately.
+ o Enable the use of ssl_var_* and ssl_ext_* functionalities.
+ o Enable use of MM, SHMCB and SHMHT.
+ o Try to use APR routines in ssl_util_ssl.c for performing FILE operations.