| Commit message (Expand) | Author | Age | Files | Lines |
* | Fix regression introduced in r1222917: in ssl_find_vhost(), we must use | Kaspar Brand | 2012-02-12 | 1 | -2/+1 |
* | Add cleanup for SSLProxyMachineCertificateChainFile during init | Daniel Ruggeri | 2012-02-08 | 1 | -0/+11 |
* | fix signedness issue with SSL_X509_NAME_to_string()'s maxlen argument | Kaspar Brand | 2012-01-08 | 2 | -4/+4 |
* | Fix another case of #ifdef-within-a-macro (which was inadvertently | Kaspar Brand | 2011-12-30 | 1 | -9/+6 |
* | Don't use #ifdef inside macro calls | Stefan Fritsch | 2011-12-29 | 2 | -29/+24 |
* | add missing #ifdef in ssl_cmd_protocol_parse (should have been in r1222921) | Kaspar Brand | 2011-12-24 | 1 | -0/+2 |
* | SSLProtocol: allow explicit control of TLSv1.1 and TLSv1.2 flavors when | Kaspar Brand | 2011-12-24 | 4 | -2/+53 |
* | Set OPENSSL_NO_SSL_INTERN when compiling against OpenSSL 1.0.1 | Kaspar Brand | 2011-12-24 | 7 | -58/+62 |
* | REMOTE_ADDR is now r->useragent_ip, which is not/never available at | Kaspar Brand | 2011-12-24 | 1 | -3/+1 |
* | Various code cleanup to avoid compiler, cppcheck, or clang warnings: | Stefan Fritsch | 2011-12-18 | 1 | -1/+0 |
* | Further clarify the naming of the entity that originates the request by | Graham Leggett | 2011-12-14 | 2 | -2/+2 |
* | logging adjustments: | Kaspar Brand | 2011-12-12 | 3 | -8/+8 |
* | Streamline TLS session ticket key handling (added in r1200040): | Kaspar Brand | 2011-12-12 | 5 | -195/+155 |
* | Various fixes for log message tags: | Stefan Fritsch | 2011-12-07 | 5 | -16/+20 |
* | Remove usage of APLOG_NOERRNO. It has been a no-op since at least 2.0.x | Stefan Fritsch | 2011-12-07 | 1 | -1/+1 |
* | Adjust the OpenSSL session id context for SNI configurations, so that | Kaspar Brand | 2011-12-07 | 1 | -0/+18 |
* | Add some more log message tags | Stefan Fritsch | 2011-12-05 | 3 | -39/+39 |
* | Add some more log message tags | Stefan Fritsch | 2011-12-04 | 5 | -42/+42 |
* | More pointers to mod_socache* | Stefan Fritsch | 2011-12-04 | 1 | -1/+3 |
* | Point to mod_socache_* in the SSLSessionCache error message | Stefan Fritsch | 2011-12-04 | 1 | -1/+3 |
* | Add lots of unique tags to error log messages | Stefan Fritsch | 2011-12-03 | 13 | -171/+176 |
* | Introduce a per connection "peer_ip" and a per request "client_ip" to | Graham Leggett | 2011-11-25 | 2 | -2/+2 |
* | Introduce a per request version of the remote IP address, which can be | Graham Leggett | 2011-11-22 | 2 | -3/+3 |
* | drop SSLv2 support (set SSL_OP_NO_SSLv2 for any new SSL_CTX) | Kaspar Brand | 2011-11-18 | 4 | -22/+8 |
* | * modules/ssl/ssl_private.h, modules/ssl/ssl_engine_kernel.c | Joe Orton | 2011-11-10 | 2 | -6/+6 |
* | Remove unneeded memcpy. | Paul Querna | 2011-11-10 | 1 | -2/+0 |
* | Apply ap_server_root_relative to the path used for the ticket secrets file. | Paul Querna | 2011-11-10 | 1 | -0/+2 |
* | Whitespace fixes for r1200040 | Paul Querna | 2011-11-10 | 2 | -11/+11 |
* | Add support for RFC 5077 TLS Session tickets. This adds two new directives: | Paul Querna | 2011-11-10 | 5 | -0/+240 |
* | Remove some ap_add_version_component() calls that don't provide any information | Stefan Fritsch | 2011-11-09 | 1 | -1/+0 |
* | Add -D DUMP_RUN_CFG option to dump some configuration items | Stefan Fritsch | 2011-10-09 | 1 | -1/+2 |
* | Consistenly use apr_file_* API instead of libc when dumping config because | Stefan Fritsch | 2011-10-09 | 1 | -1/+3 |
* | Add another AP_DEBUG_ASSERT to document some assumptions in the code, | Stefan Fritsch | 2011-10-08 | 1 | -0/+2 |
* | Fix a potential NULL pointer dereference found by clang. | Stefan Fritsch | 2011-10-08 | 1 | -1/+1 |
* | fix indentation | Kaspar Brand | 2011-10-04 | 1 | -1/+1 |
* | If MaxMemFree is set, set SSL_MODE_RELEASE_BUFFERS in mod_ssl. | Stefan Fritsch | 2011-10-01 | 1 | -0/+7 |
* | In ssl_check_public_cert(), also take dNSNames in the subjectAltName | Kaspar Brand | 2011-09-28 | 3 | -32/+93 |
* | Some NetWare ssl module build tweaks. | Guenter Knauf | 2011-09-28 | 1 | -1/+0 |
* | Final update to SSLProxyMachineCertificateChainFile | Daniel Ruggeri | 2011-09-26 | 2 | -42/+41 |
* | replace another occurence of X509_NAME_oneline by SSL_X509_NAME_to_string | Kaspar Brand | 2011-09-26 | 1 | -5/+5 |
* | enable the SNI extension for proxy connections | Kaspar Brand | 2011-09-25 | 1 | -5/+34 |
* | More cleanup: Expand tabs and some more indentation fixes | Stefan Fritsch | 2011-09-23 | 4 | -13/+13 |
* | Cleanup effort in prep for GA push: | Jim Jagielski | 2011-09-23 | 13 | -151/+151 |
* | Cleanup effort in prep for GA push: | Jim Jagielski | 2011-09-23 | 3 | -13/+13 |
* | Bring error messages for TLS stapling related options in sync | Kaspar Brand | 2011-09-21 | 1 | -5/+5 |
* | Add ssl_log_xerror() and ssl_log_rxerror(), modeled after ssl_log_cxerror(). | Kaspar Brand | 2011-09-19 | 4 | -29/+132 |
* | Add wrappers for malloc, calloc, realloc that check for out of memory | Stefan Fritsch | 2011-09-19 | 1 | -2/+2 |
* | Style cleanup | Daniel Ruggeri | 2011-09-19 | 1 | -5/+5 |
* | Log better information and prevent leak of an X509 structure for SSLProxyMach... | Daniel Ruggeri | 2011-09-17 | 1 | -6/+42 |
* | Modify SSLProxyMachineCertificateChainFile to use X509 instead of X509_INFO a... | Daniel Ruggeri | 2011-09-14 | 5 | -62/+37 |