Permalink
Switch branches/tags
Commits on Jun 6, 2005
  1. How-To for those new to SVN, like me

    wrowe committed Jun 6, 2005
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/ssl-fips-dev@180339 13f79535-47bb-0310-9956-ffa450edef68
Commits on Jun 3, 2005
  1. * modules/ssl/ssl_engine_kernel.c (ssl_callback_SSLVerify_CRL): Fix

    notroj committed Jun 3, 2005
    off-by-one.
    
    PR: 35081
    Submitted by: Marc Stern <mstern csc.com>
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@179781 13f79535-47bb-0310-9956-ffa450edef68
Commits on May 15, 2005
  1. Reintroduce stack frame construction with /Oy- (removal was implied …

    wrowe committed May 15, 2005
    …by /O2).
    
      This makes binaries far easier to debug, during operation and for post-crash
      .dmp analysis.  Do not alter /Gs optimizations per brane.
    
    Reviewed by: stoddard, brane
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@170253 13f79535-47bb-0310-9956-ffa450edef68
Commits on Apr 23, 2005
  1. * httpd/modules/ssl/NWGNUmakefile

    Andre Malo
    Andre Malo committed Apr 23, 2005
      svn:eol-style = native
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@164428 13f79535-47bb-0310-9956-ffa450edef68
Commits on Apr 19, 2005
  1. Fix issue where mod_ssl does not pick up the ssl-unclean-shutdown

    notroj committed Apr 19, 2005
    setting when configured e.g. as a reverse proxy:
    
    * modules/ssl/ssl_private.h: Remove ssl_hook_Translate.
    
    * modules/ssl/ssl_engine_kernel.c (ssl_hook_ReadReq): Merge in
    ssl_hook_Translate.  (ssl_hook_Translate): Remove.
    
    * modules/ssl/mod_ssl.c (ssl_register_hooks): Ensure that _ReadReq
    hook runs after mod_setenvif.c; don't register translate_name hook.
    
    PR: 34452
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@161958 13f79535-47bb-0310-9956-ffa450edef68
Commits on Apr 18, 2005
  1. Build mod_ssl for the NetWare platform

    Bradley Nicholes
    Bradley Nicholes committed Apr 18, 2005
    Submitted by: Guenter Knauf <fuankg@apache.org>
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@161813 13f79535-47bb-0310-9956-ffa450edef68
Commits on Mar 17, 2005
Commits on Feb 15, 2005
  1. * modules/ssl/mod_ssl.h: Add ssl_ext_lookup optional hook declaration.

    notroj committed Feb 15, 2005
    * modules/ssl/ssl_engine_vars.c (ssl_ext_lookup): New function.
    (ssl_var_register): Register optional function.
    
    * modules/ssl/ssl_private.h (ssl_ext_lookup): Add prototype.
    
    Submitted by: David Reid, Joe Orton
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@153933 13f79535-47bb-0310-9956-ffa450edef68
Commits on Feb 11, 2005
  1. Move the POSIX reg* implementations into the ap_* namespace;

    notroj committed Feb 11, 2005
    internalise the ap_reg*<->PCRE wrapper:
    
    * configure.in: Add srclib/pcre to the include path.
    
    * include/ap_regex.h: Renamed from include/pcreposix.h.  Prefix all
    constants with AP_; prefix all functions and types with ap_.  Define
    AP_DECLARE to nothing if necessary.  Remove regcomp error codes.
    
    * include/httpd.h: Include ap_regex.h not pcreposix.h.
    (ap_pregcomp, ap_regexec, ap_regfree): s/regex_t/ap_regex_t/.
    (ap_regexec, ap_regerror): Prototypes moved to ap_regex.h.
    
    * server/util.c (regex_cleanup, ap_pregcomp, ap_pregsub, ap_pregfree):
    Adjust for ap_ prefixed types.  (ap_regexec, ap_regerror): Removed.
    
    * server/Makefile.in: Build util_pcre.c.
    
    * server/util_pcre.c: Copied from srclib/pcre/pcreposix.c; remove use
    of PCRE-internals to do error mapping; rename types to add AP_/ap_
    prefixes as above.  Use APR includes.  (ap_regerror): Use apr_snprintf.
    
    * srclib/pcre/Makefile.in: Don't build pcreposix.c into libpcre.la.
    
    * modules/*: Update to use new type and constant names.
    
    PR: 27750 (part one)
    Submitted by: Andres Salomon <dilinger voxel.net>, Joe Orton
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@153384 13f79535-47bb-0310-9956-ffa450edef68
Commits on Feb 10, 2005
  1. * modules/ssl/ssl_engine_kernel.c (ssl_hook_Access): Move the

    notroj committed Feb 10, 2005
    SSLUsername-controlled assignment of r->user above the SSLRequire
    checks so that the "username" gets logged if SSLRequire denies access.
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@153280 13f79535-47bb-0310-9956-ffa450edef68
Commits on Feb 9, 2005
  1. Remove formatting characters from ap_log_error() calls. These

    trawick committed Feb 9, 2005
    were escaped as fallout from CAN-2003-0020.
    
    Submitted by: Eric Covener <ecovener gmail.com>
    Reviewed by: Jeff Trawick
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@153105 13f79535-47bb-0310-9956-ffa450edef68
Commits on Feb 5, 2005
  1. Change where we set r->user if we're setting it from a

    David Reid
    David Reid committed Feb 5, 2005
    client certificate.
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@151493 13f79535-47bb-0310-9956-ffa450edef68
Commits on Feb 4, 2005
  1. Update copyright year to 2005 and standardize on current copyright ow…

    Justin Erenkrantz
    Justin Erenkrantz committed Feb 4, 2005
    …ner line.
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@151408 13f79535-47bb-0310-9956-ffa450edef68
Commits on Jan 14, 2005
  1. * modules/ssl/ssl_engine_io.c (bio_filter_out_flush): Fail if the

    notroj committed Jan 14, 2005
    connection was reset.
    
    PR: 32699
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@125166 13f79535-47bb-0310-9956-ffa450edef68
  2. * modules/ssl/mod_ssl.c: Declare new config directives

    notroj committed Jan 14, 2005
    SSLCADNRequestFile and SSLCADNRequestPath.
    
    * modules/ssl/ssl_private.h (modssl_pk_server_t): Add ca_name_path,
    ca_name_file fields.
    
    * modules/ssl/ssl_engine_init.c (ssl_init_ctx_verify): If either of
    SSLCADNRequestFile or SSLCADNRequestPath are configured, load the CA
    DN list sent in the CertificateRequest from those certificates.
    
    * modules/ssl/ssl_engine_config.c (modssl_ctx_init_server): Use
    pcalloc to zero-initialize the entire modssl_pk_server_t structure.
    (ssl_config_server_new): Merge the ca_name_* fields.
    (ssl_cmd_SSLCADNRequestPath, ssl_cmd_SSLCADNRequestFile): New
    functions.
    
    PR: 32848
    Submitted by: Tim Taylor <tim.taylor dfas.mil>
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@125165 13f79535-47bb-0310-9956-ffa450edef68
Commits on Jan 5, 2005
  1. It's perferable to use a debug build of ssleay32/libeay32, but offer

    wrowe committed Jan 5, 2005
      a fallback if they are built as release libraries for creating
      mod_ssl in debug mode.
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@124284 13f79535-47bb-0310-9956-ffa450edef68
Commits on Jan 2, 2005
  1. FINALLY Correct ap_http_method()! It is NOT a method, it's a SCHEME!

    wrowe committed Jan 2, 2005
      Bumped mmn, and ap module cookie, for this function rename.
    
      It's not a deprecation, as ap_http_method would be a lovely function
      name sometime in the future: to determine what the function name implies.
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@123882 13f79535-47bb-0310-9956-ffa450edef68
Commits on Dec 15, 2004
  1. * modules/ssl/ssl_engine_io.c (bio_filter_out_flush): Revert the

    notroj committed Dec 15, 2004
    passed-brigade-reuse "fix" which is currently unnecessary.
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@111962 13f79535-47bb-0310-9956-ffa450edef68
  2. * modules/ssl/ssl_engine_io.c (ssl_io_filter_cleanup): Fix segfaults

    notroj committed Dec 15, 2004
    from using ap_log_cerror from a c->pool cleanup; the debug message
    triggers too often anyway so just remove it.
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@111959 13f79535-47bb-0310-9956-ffa450edef68
Commits on Dec 8, 2004
  1. * modules/ssl/ssl_engine_kernel.c (ssl_callback_SSLVerify): Use

    notroj committed Dec 8, 2004
    X509_STORE_CTX_get_ex_data() and SSL_get_ex_data_X509_STORE_CTX_idx()
    to use the correct ex_data index from the context in pathological
    cases where SSL_get_ex_data_X509_STORE_CTX_idx() does not return 0.
    
    PR: 32529
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@111241 13f79535-47bb-0310-9956-ffa450edef68
Commits on Dec 7, 2004
  1. * modules/ssl/ssl_engine_io.c (ssl_io_filter_Upgrade): Simplify the

    notroj committed Dec 7, 2004
    Upgrade header check; allow upgrades on any method; don't drop the
    ap_pass_brigade return value.
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@111159 13f79535-47bb-0310-9956-ffa450edef68
Commits on Dec 2, 2004
  1. * modules/ssl/ssl_engine_io.c (ssl_io_filter_Upgrade): Remove the

    notroj committed Dec 2, 2004
    unnecessary check of the Connection request header.
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@109499 13f79535-47bb-0310-9956-ffa450edef68
  2. Use a case insensitive compare when looking for 'Upgrade'.

    pquerna committed Dec 2, 2004
    The first client I tested was sending 'upgrade'.
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@109447 13f79535-47bb-0310-9956-ffa450edef68
Commits on Nov 25, 2004
  1. * modules/ssl/ssl_engine_mutex.c (ssl_mutex_on, ssl_mutex_off):

    notroj committed Nov 25, 2004
    Improve error messages.
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@106573 13f79535-47bb-0310-9956-ffa450edef68
Commits on Nov 21, 2004
  1. general property cleanup

    Andre Malo
    Andre Malo committed Nov 21, 2004
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@106103 13f79535-47bb-0310-9956-ffa450edef68
Commits on Nov 19, 2004
  1. Remove the .cvsignore files.

    notroj committed Nov 19, 2004
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@105796 13f79535-47bb-0310-9956-ffa450edef68
Commits on Nov 14, 2004
  1. Fix handling of non-blocking reads in mod_ssl (triggered by recent

    notroj committed Nov 14, 2004
    change to mod_proxy_http):
    
    * modules/ssl/ssl_engine_io.c (bio_filter_in_read): Return an error if
    the read would block so that the SSL_read() caller checks for
    SSL_ERROR_WANT_READ, rather than 0, which is treated like EOF.
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@105768 13f79535-47bb-0310-9956-ffa450edef68
Commits on Nov 10, 2004
  1. Add -t -DDUMP_CERTS option to mod_ssl which dumps the filenames of all

    notroj committed Nov 10, 2004
    configured SSL certificates to stdout, useful for cron-ing through a
    "do I need to renew any of my certificates this week" tool:
    
    * modules/ssl/ssl_engine_config.c (ssl_hook_ConfigTest): New function.
    
    * modules/ssl/mod_ssl.c (ssl_register_hooks): ...register it as a
    test_config hook.
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@105741 13f79535-47bb-0310-9956-ffa450edef68
  2. * modules/ssl/config.m4: Use libtool's -export-symbols-regex flag to

    notroj committed Nov 10, 2004
    hide all global symbols defined by mod_ssl other than the module
    structure (where possible).
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@105740 13f79535-47bb-0310-9956-ffa450edef68
  3. * modules/ssl/ssl_engine_io.c, modules/ssl/ssl_engine_kernel.c,

    notroj committed Nov 10, 2004
    modules/mod_ssl.c: Switch to using ap_log_cerror() in place of
    ap_log_error() everywhere that the conn_rec * is available.
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@105739 13f79535-47bb-0310-9956-ffa450edef68
Commits on Nov 4, 2004
  1. Remove bogus comment: for SSLPassPhraseDialog exec:..., argv is

    notroj committed Nov 4, 2004
    defined and documented and can't be changed.
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@105683 13f79535-47bb-0310-9956-ffa450edef68
Commits on Nov 1, 2004
  1. * modules/ssl/ssl_engine_kernel.c (ssl_hook_UserCheck): Fix possible

    notroj committed Nov 1, 2004
    NULL pointer dereference in some configurations.
    
    PR: 31848
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@105663 13f79535-47bb-0310-9956-ffa450edef68