| Commit message (Expand) | Author | Age | Files | Lines |
* | mod_ssl: follow up to r1877397: fix SSL_OP_NO_RENEGOT*I*ATION typo. | Yann Ylavic | 2020-05-15 | 1 | -3/+3 |
* | mod_ssl: Switch to using SSL_OP_NO_RENEGOTATION (where available) to | Joe Orton | 2020-05-05 | 1 | -0/+16 |
* | mod_ssl: Factor out code to read a BIO into a palloc'ed string: | Joe Orton | 2020-05-02 | 1 | -10/+17 |
* | Fix spelling errors found by codespell. [skip ci] | Mike Rumph | 2020-02-13 | 1 | -2/+2 |
* | * modules/ssl/ssl_util_ssl.c (modssl_read_privatekey): Remove unused | Joe Orton | 2018-05-04 | 1 | -7/+2 |
* | * modules/ssl/ssl_util_ssl.c, modules/ssl/ssl_util_ssl.h: | Joe Orton | 2018-05-04 | 1 | -27/+0 |
* | Add optional _RAW suffix to SSL_*_DN_xx attribute names, allowing | Joe Orton | 2017-10-12 | 1 | -8/+14 |
* | branch for integrating mod_md into trunk | Stefan Eissing | 2017-08-04 | 1 | -0/+27 |
* | Support for OpenSSL 1.1.0: | Rainer Jung | 2016-03-20 | 1 | -1/+1 |
* | Add support for extracting the msUPN and dnsSRV forms | Kaspar Brand | 2015-08-02 | 1 | -28/+67 |
* | mod_ssl namespacing: Rename SSL_SESSION_id2sz() to modssl_SSL_SESSION_id2sz(). | Stefan Sperling | 2015-05-05 | 1 | -2/+2 |
* | mod_ssl namespacing: Move SSL_CTX_use_certificate_chain() into ssl_engine_init.c | Stefan Sperling | 2015-05-05 | 1 | -65/+0 |
* | mod_ssl namespacing: Move modssl_X509_INFO_load_file() into ssl_engine_init.c | Stefan Sperling | 2015-05-05 | 1 | -30/+0 |
* | mod_ssl namespacing: Merge SSL_X509_INFO_load_path() into its only caller | Stefan Sperling | 2015-05-05 | 1 | -37/+0 |
* | mod_ssl: Rename static convert_asn1_to_utf8 function to asn1_string_to_utf8. | Stefan Sperling | 2015-05-02 | 1 | -3/+3 |
* | mod_ssl namespacing: SSL_X509_INFO_load_file -> modssl_X509_INFO_load_file | Stefan Sperling | 2015-05-01 | 1 | -4/+4 |
* | mod_ssl namespacing: SSL_X509_match_name -> modssl_X509_match_name | Stefan Sperling | 2015-05-01 | 1 | -3/+3 |
* | mod_ssl namespacing: Make SSL_X509_getIDs a static function inside the | Stefan Sperling | 2015-05-01 | 1 | -2/+2 |
* | mod_ssl namespacing: SSL_X509_getSAN -> modssl_X509_getSAN | Stefan Sperling | 2015-05-01 | 1 | -3/+3 |
* | mod_ssl namespacing: SSL_X509_NAME_to_string -> modssl_X509_NAME_to_string | Stefan Sperling | 2015-05-01 | 1 | -1/+1 |
* | mod_ssl namespacing: Rename SSL_X509_NAME_ENTRY_to_string to | Stefan Sperling | 2015-05-01 | 1 | -2/+2 |
* | mod_ssl namespacing: Make SSL_ASN1_STRING_to_utf8 a static function inside | Stefan Sperling | 2015-05-01 | 1 | -3/+3 |
* | mod_ssl namespacing: SSL_X509_getBC -> modssl_X509_getBC | Stefan Sperling | 2015-05-01 | 1 | -1/+1 |
* | mod_ssl namespacing: SSL_smart_shutdown -> modssl_smart_shutdown | Stefan Sperling | 2015-05-01 | 1 | -1/+1 |
* | mod_ssl namespacing: SSL_read_PrivateKey -> modssl_read_privatekey | Stefan Sperling | 2015-05-01 | 1 | -1/+1 |
* | mod_ssl namespacing: Rename SSL_init_app_data2_idx, SSL_get_app_data2, | Stefan Sperling | 2015-05-01 | 1 | -9/+9 |
* | ssl_util: Fix possible crash (free => OPENSSL_free) and error path leaks when | Yann Ylavic | 2015-03-12 | 1 | -3/+8 |
* | Add support for extracting subjectAltName entries of type | Kaspar Brand | 2015-01-07 | 1 | -34/+77 |
* | mod_ssl: SSL_smart_shutdown(): follow up to r1601184. | Yann Ylavic | 2014-06-09 | 1 | -1/+4 |
* | mod_ssl: Ensure that the SSL close notify alert is flushed to the client. | Yann Ylavic | 2014-06-08 | 1 | -1/+11 |
* | Remove the hardcoded algorithm-type dependency for the SSLCertificateFile | Kaspar Brand | 2013-12-28 | 1 | -43/+2 |
* | SGC became dead in January 2000, effectively | Kaspar Brand | 2013-12-01 | 1 | -23/+0 |
* | Improve ephemeral key handling (companion to r1526168): | Kaspar Brand | 2013-09-29 | 1 | -0/+32 |
* | SSL_SESSION_id2sz is only used for logging, having it in lowercase shouldn't ... | Christophe Jaillet | 2013-03-01 | 1 | -2/+0 |
* | According top my testing 'SSL_SESSION_id2sz' is 4x faster with the use 'ap_bi... | Christophe Jaillet | 2013-01-06 | 1 | -8/+11 |
* | Fix warning about discarding 'const' qualifier from pointer | Stefan Fritsch | 2012-12-29 | 1 | -2/+2 |
* | mod_ssl: add support for subjectAltName-based host name checking in proxy mode | Kaspar Brand | 2012-12-26 | 1 | -0/+76 |
* | properly free the GENERAL_NAMEs, as pointed out in PR 32652 | Kaspar Brand | 2012-02-28 | 1 | -1/+1 |
* | fix signedness issue with SSL_X509_NAME_to_string()'s maxlen argument | Kaspar Brand | 2012-01-08 | 1 | -3/+3 |
* | Set OPENSSL_NO_SSL_INTERN when compiling against OpenSSL 1.0.1 | Kaspar Brand | 2011-12-24 | 1 | -45/+6 |
* | In ssl_check_public_cert(), also take dNSNames in the subjectAltName | Kaspar Brand | 2011-09-28 | 1 | -16/+45 |
* | Cleanup effort in prep for GA push: | Jim Jagielski | 2011-09-23 | 1 | -1/+1 |
* | Add ssl_log_xerror() and ssl_log_rxerror(), modeled after ssl_log_cxerror(). | Kaspar Brand | 2011-09-19 | 1 | -0/+32 |
* | Modify SSLProxyMachineCertificateChainFile to use X509 instead of X509_INFO a... | Daniel Ruggeri | 2011-09-14 | 1 | -40/+0 |
* | Revamp CRL checking for client and remote servers: | Kaspar Brand | 2011-09-04 | 1 | -49/+0 |
* | * Style fixes. No functional change. | Ruediger Pluem | 2011-08-24 | 1 | -3/+4 |
* | Add SSLProxyMachineCertificateChainFile directive and documentation for bug 5... | Daniel Ruggeri | 2011-08-23 | 1 | -0/+39 |
* | Enforce OpenSSL 0.9.7 as a minimum requirement in configure, and | Kaspar Brand | 2011-08-07 | 1 | -18/+0 |
* | Remove the ssl_toolkit_compat layer, which is no longer needed | Kaspar Brand | 2011-08-07 | 1 | -37/+14 |
* | Drop support for the RSA BSAFE SSL-C toolkit from configure, | Kaspar Brand | 2011-08-07 | 1 | -18/+0 |