summaryrefslogtreecommitdiffstats
path: root/modules/ssl (follow)
Commit message (Expand)AuthorAgeFilesLines
* Fix regression introduced in r1222917: in ssl_find_vhost(), we must useKaspar Brand2012-02-121-2/+1
* Add cleanup for SSLProxyMachineCertificateChainFile during initDaniel Ruggeri2012-02-081-0/+11
* fix signedness issue with SSL_X509_NAME_to_string()'s maxlen argumentKaspar Brand2012-01-082-4/+4
* Fix another case of #ifdef-within-a-macro (which was inadvertentlyKaspar Brand2011-12-301-9/+6
* Don't use #ifdef inside macro callsStefan Fritsch2011-12-292-29/+24
* add missing #ifdef in ssl_cmd_protocol_parse (should have been in r1222921)Kaspar Brand2011-12-241-0/+2
* SSLProtocol: allow explicit control of TLSv1.1 and TLSv1.2 flavors whenKaspar Brand2011-12-244-2/+53
* Set OPENSSL_NO_SSL_INTERN when compiling against OpenSSL 1.0.1Kaspar Brand2011-12-247-58/+62
* REMOTE_ADDR is now r->useragent_ip, which is not/never available atKaspar Brand2011-12-241-3/+1
* Various code cleanup to avoid compiler, cppcheck, or clang warnings:Stefan Fritsch2011-12-181-1/+0
* Further clarify the naming of the entity that originates the request byGraham Leggett2011-12-142-2/+2
* logging adjustments:Kaspar Brand2011-12-123-8/+8
* Streamline TLS session ticket key handling (added in r1200040):Kaspar Brand2011-12-125-195/+155
* Various fixes for log message tags:Stefan Fritsch2011-12-075-16/+20
* Remove usage of APLOG_NOERRNO. It has been a no-op since at least 2.0.xStefan Fritsch2011-12-071-1/+1
* Adjust the OpenSSL session id context for SNI configurations, so thatKaspar Brand2011-12-071-0/+18
* Add some more log message tagsStefan Fritsch2011-12-053-39/+39
* Add some more log message tagsStefan Fritsch2011-12-045-42/+42
* More pointers to mod_socache*Stefan Fritsch2011-12-041-1/+3
* Point to mod_socache_* in the SSLSessionCache error messageStefan Fritsch2011-12-041-1/+3
* Add lots of unique tags to error log messagesStefan Fritsch2011-12-0313-171/+176
* Introduce a per connection "peer_ip" and a per request "client_ip" toGraham Leggett2011-11-252-2/+2
* Introduce a per request version of the remote IP address, which can beGraham Leggett2011-11-222-3/+3
* drop SSLv2 support (set SSL_OP_NO_SSLv2 for any new SSL_CTX)Kaspar Brand2011-11-184-22/+8
* * modules/ssl/ssl_private.h, modules/ssl/ssl_engine_kernel.cJoe Orton2011-11-102-6/+6
* Remove unneeded memcpy.Paul Querna2011-11-101-2/+0
* Apply ap_server_root_relative to the path used for the ticket secrets file.Paul Querna2011-11-101-0/+2
* Whitespace fixes for r1200040Paul Querna2011-11-102-11/+11
* Add support for RFC 5077 TLS Session tickets. This adds two new directives:Paul Querna2011-11-105-0/+240
* Remove some ap_add_version_component() calls that don't provide any informationStefan Fritsch2011-11-091-1/+0
* Add -D DUMP_RUN_CFG option to dump some configuration itemsStefan Fritsch2011-10-091-1/+2
* Consistenly use apr_file_* API instead of libc when dumping config becauseStefan Fritsch2011-10-091-1/+3
* Add another AP_DEBUG_ASSERT to document some assumptions in the code,Stefan Fritsch2011-10-081-0/+2
* Fix a potential NULL pointer dereference found by clang.Stefan Fritsch2011-10-081-1/+1
* fix indentationKaspar Brand2011-10-041-1/+1
* If MaxMemFree is set, set SSL_MODE_RELEASE_BUFFERS in mod_ssl.Stefan Fritsch2011-10-011-0/+7
* In ssl_check_public_cert(), also take dNSNames in the subjectAltNameKaspar Brand2011-09-283-32/+93
* Some NetWare ssl module build tweaks.Guenter Knauf2011-09-281-1/+0
* Final update to SSLProxyMachineCertificateChainFileDaniel Ruggeri2011-09-262-42/+41
* replace another occurence of X509_NAME_oneline by SSL_X509_NAME_to_stringKaspar Brand2011-09-261-5/+5
* enable the SNI extension for proxy connectionsKaspar Brand2011-09-251-5/+34
* More cleanup: Expand tabs and some more indentation fixesStefan Fritsch2011-09-234-13/+13
* Cleanup effort in prep for GA push:Jim Jagielski2011-09-2313-151/+151
* Cleanup effort in prep for GA push:Jim Jagielski2011-09-233-13/+13
* Bring error messages for TLS stapling related options in syncKaspar Brand2011-09-211-5/+5
* Add ssl_log_xerror() and ssl_log_rxerror(), modeled after ssl_log_cxerror().Kaspar Brand2011-09-194-29/+132
* Add wrappers for malloc, calloc, realloc that check for out of memoryStefan Fritsch2011-09-191-2/+2
* Style cleanupDaniel Ruggeri2011-09-191-5/+5
* Log better information and prevent leak of an X509 structure for SSLProxyMach...Daniel Ruggeri2011-09-171-6/+42
* Modify SSLProxyMachineCertificateChainFile to use X509 instead of X509_INFO a...Daniel Ruggeri2011-09-145-62/+37