]> granicus.if.org Git - apache/commit
* Add SSLProxyCheckPeerExpire and SSLProxyCheckPeerCN directives to enable
authorRuediger Pluem <rpluem@apache.org>
Wed, 1 Apr 2009 12:07:47 +0000 (12:07 +0000)
committerRuediger Pluem <rpluem@apache.org>
Wed, 1 Apr 2009 12:07:47 +0000 (12:07 +0000)
commite468a9fae6b8607ab8c770e33816c7430562c01b
tree63619010ac076f3e0c1498ae4101d19a6f701a2a
parent23ac01a833c74e3ca1f92f66f295a993ad224d35
* Add SSLProxyCheckPeerExpire and SSLProxyCheckPeerCN directives to enable
  stricter checking of remote server certificates.

  (docs/manual/mod/mod_ssl.xml)
    Documentation of SSLProxyCheckPeerExpire and SSLProxyCheckPeerCN.

  (modules/proxy/mod_proxy_http.c)
    Set the hostname of the request URL as note on the connection.

  (modules/ssl/ssl_private.h)
    Add proxy_ssl_check_peer_expire and proxy_ssl_check_peer_cn fields to
    the SSLSrvConfigRec.

  (modules/ssl/ssl_engine_config.c)
    Directives stuff for SSLProxyCheckPeerExpire and SSLProxyCheckPeerCN.

  (modules/ssl/ssl_engine_io.c)
    Check whether the remote servers certificate is expired / if there is a
    mismatch between the requested hostanme and the remote server certificates
    CN field.
    Be able to parse ASN1 times.

  (modules/ssl/mod_ssl.c)
    Directives stuff for SSLProxyCheckPeerExpire and SSLProxyCheckPeerCN.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@760866 13f79535-47bb-0310-9956-ffa450edef68
CHANGES
docs/manual/mod/mod_ssl.xml
modules/proxy/mod_proxy_http.c
modules/ssl/mod_ssl.c
modules/ssl/ssl_engine_config.c
modules/ssl/ssl_engine_io.c
modules/ssl/ssl_private.h