]> granicus.if.org Git - apache/history - modules/ssl/ssl_engine_kernel.c
mod_cache: Don't add cached/revalidated entity headers to a 304 response.
[apache] / modules / ssl / ssl_engine_kernel.c
2014-04-21 Kaspar Brandssl_callback_TmpDH: for OpenSSL 1.0.2 and later, set...
2014-04-05 Kaspar BrandBring SNI behavior into better conformance with RFC...
2014-02-09 Victor J. OrlikowskiQuick spelling fix
2014-02-09 Christophe Jaillettypo in comments
2014-02-03 Jeff Trawickfix a few spelling errors
2014-01-05 Jeff TrawickFix config merging of SSLOCSPEnable and SSLOCSPOverride...
2014-01-03 Ruediger Pluem* Update comment. No functional change.
2013-12-23 Ruediger Pluem* Do not perform SNI / Host header comparison in case...
2013-09-29 Kaspar BrandImprove ephemeral key handling (companion to r1526168):
2013-09-29 Kaspar BrandIncrease minimum required OpenSSL version to 0.9.8a...
2013-09-25 Kaspar BrandStreamline ephemeral key handling:
2013-08-04 Kaspar BrandFix logging of SSL session cache timeout value (at...
2013-05-30 Joe Ortonmod_ssl: Redesign NPN (Next Protocol Negotiation) API...
2013-01-11 Graham Leggettmod_ssl: Allow the SSLUserName to be used to control...
2012-06-10 Stefan FritschAdd some improvements as suggested by Kaspar
2012-06-08 Stefan FritschAdd support for TLS-SRP (Secure Remote Password key...
2012-06-02 Stefan FritschAvoid buffer overflow if one protocol string is too...
2012-05-01 Joe OrtonAdd support for TLS Next Protocol Negotiation:
2012-04-20 Stefan FritschRemove the link in the speaking-http-on-https error...
2012-04-20 Stefan FritschWhen receiving http on https, send the error response...
2012-02-27 Stefan FritschInitialize EC temporary key on server startup, as for...
2012-02-12 Kaspar BrandFix regression introduced in r1222917: in ssl_find_vhos...
2011-12-29 Stefan FritschDon't use #ifdef inside macro calls
2011-12-24 Kaspar BrandSet OPENSSL_NO_SSL_INTERN when compiling against OpenSS...
2011-12-24 Kaspar BrandREMOTE_ADDR is now r->useragent_ip, which is not/never...
2011-12-14 Graham LeggettFurther clarify the naming of the entity that originate...
2011-12-12 Kaspar BrandStreamline TLS session ticket key handling (added in...
2011-12-07 Stefan FritschVarious fixes for log message tags:
2011-12-07 Kaspar BrandAdjust the OpenSSL session id context for SNI configura...
2011-12-04 Stefan FritschAdd some more log message tags
2011-12-04 Stefan FritschAdd some more log message tags
2011-12-02 Stefan FritschAdd lots of unique tags to error log messages
2011-11-25 Graham LeggettIntroduce a per connection "peer_ip" and a per request...
2011-11-22 Graham LeggettIntroduce a per request version of the remote IP addres...
2011-11-10 Joe Orton* modules/ssl/ssl_private.h, modules/ssl/ssl_engine_ker...
2011-11-10 Paul QuernaRemove unneeded memcpy.
2011-11-09 Paul QuernaAdd support for RFC 5077 TLS Session tickets. This...
2011-10-04 Kaspar Brandfix indentation
2011-09-23 Jim JagielskiCleanup effort in prep for GA push:
2011-09-14 Daniel RuggeriModify SSLProxyMachineCertificateChainFile to use X509...
2011-09-14 Kaspar Brandssl_callback_proxy_cert(): take advantage of ssl_log_cx...
2011-09-04 Kaspar BrandRevamp CRL checking for client and remote servers:
2011-08-26 Ruediger Pluem* Don't SEGFAULT if SSLProxyMachineCertificateChainFile...
2011-08-23 Daniel RuggeriAdd SSLProxyMachineCertificateChainFile directive and...
2011-08-07 Kaspar BrandEnforce OpenSSL 0.9.7 as a minimum requirement in confi...
2011-08-07 Kaspar BrandRemove the ssl_toolkit_compat layer, which is no longer...
2011-08-07 Kaspar BrandDrop support for the RSA BSAFE SSL-C toolkit from confi...
2011-06-19 Stefan FritschAvoid unnecessary renegotiations with SSLVerifyDepth 0.
2011-06-13 Stefan FritschAvoid some memory allocations by using apr_table_setn...
2011-04-09 Stefan FritschRemove unused variable
2011-03-16 Joe Orton* modules/ssl/ssl_engine_kernel.c (ssl_hook_ReadReq...
2011-03-12 Jeff Trawickfix some grammar mistakes, mostly in comments
2010-11-30 Stephen HensonStop warning, init should be an int.
2010-11-29 Guenter KnaufRemoved unused var.
2010-11-06 Stefan FritschReplace ap_expr with a parser derived from mod_ssl...
2010-10-30 Daniel Earl PoirierFix a number of typos and misspellings. Reported by...
2010-10-16 Stefan Fritschmod_ssl: Log certificate information if client cert...
2010-09-29 Stefan FritschAdd authz providers for use with mod_authz_core and...
2010-09-29 Stefan FritschMake the ssl expression parser thread-safe. It now...
2010-06-14 Stefan Fritsch- Introduce ap_log_cserror to allow mod_ssl to associat...
2010-06-06 Stefan Fritsch- Be less verbose at levels INFO and DEBUG in mod_proxy...
2010-06-06 Stefan FritschUse new loglevel accessor macros to simplify code
2010-06-03 Stefan FritschIntroduce SSLLOG_MARK for use with ssl_log_ssl_error...
2010-02-26 Joe Orton* modules/ssl/ssl_engine_kernel.c (ssl_hook_Access...
2010-02-09 William A. Rowe JrCatch up ssl to socache store expiry change, and clarif...
2010-02-04 Joe Orton* modules/ssl/ssl_engine_kernel.c (ssl_hook_Fixup)...
2010-02-04 Joe Orton* modules/ssl/ssl_engine_kernel.c (ssl_hook_Fixup)...
2010-02-03 Joe Orton* modules/ssl/ssl_engine_vars.c (ssl_var_lookup_ssl...
2010-02-03 Joe OrtonNew releases of OpenSSL will only allow secure renegoti...
2010-01-16 Stefan FritschTurn static function get_server_name_for_url() into...
2009-12-16 Joe OrtonFurther mitigation for the TLS renegotation attack...
2009-11-17 Joe Orton* modules/ssl/ssl_engine_kernel.c (ssl_callback_Info...
2009-11-10 Sander Temmeenable support for ECC keys and ECDH ciphers. Tested...
2009-11-06 Joe Orton* modules/ssl/ssl_engine_kernel.c (ssl_callback_Info...
2009-11-06 Joe OrtonSECURITY: Partial fix for CVE-2009-3555:
2009-09-30 Ruediger Pluem* Fix a regression from r724717 by reintroducing SSL_CL...
2009-05-27 Sander TemmeExpose whether a request was served over an Initial...
2009-04-25 Ruediger Pluem* Add SSLStrictSNIVHostCheck to allow / disallow non...
2009-04-25 Ruediger Pluem* r->connection->aborted signals that the client aborte...
2009-04-25 Ruediger Pluem* Add partial support for name based virtual hosting...
2009-04-02 Ruediger Pluem* Fix comment and optimize retrieval of loglevel.
2009-03-24 Ruediger Pluem* Do not allow name based virtual hosts in the case...
2009-03-23 Ruediger Pluem* Store the correct server_rec in the connection record...
2009-03-23 Joe OrtonRemove code to support per-dir-CA configuration which...
2009-03-23 Ruediger Pluem* If the SNI extension supplied a hostname. So don...
2009-02-27 Sander TemmeThe development trunk of OpenSSL has tightened up the...
2009-01-11 Ruediger Pluem* Correctly merge SSLRenegBufferSize directive.
2008-12-12 Joe Ortonmod_ssl: Make the size of the per-dir-reneg request...
2008-12-09 Joe OrtonImprove mod_ssl's environment variable extraction to...
2008-06-03 Guenter KnaufFix client verification problem with SNI and multicerts.
2008-02-23 Guenter Knaufchanged comments; no functional change.
2008-02-14 Dirk-Willem van... Kasper Brand came across a flaw in the current implemen...
2008-01-11 Guenter KnaufRestructured server name indication support (PR 34607);
2007-12-29 Guenter Knauffixed code style, missing prototype warnings, disabled...
2007-12-21 Guenter KnaufAdded server name indication (RFC 4366) support (PR...
2007-12-04 Joe Orton* modules/ssl/ssl_engine_kernel.c (upgrade_connection...
2007-12-03 Joe Orton* modules/ssl/ssl_engine_kernel.c (ssl_hook_ReadReq...
2007-11-29 Joe Ortonmod_ssl: Add support for OCSP validation of client...
2007-11-23 Joe Orton* modules/ssl/ssl_engine_log.c (ssl_log_cxerror): New...
2007-11-06 Joe Orton* modules/ssl/ssl_engine_kernel.c (ssl_hook_Fixup)...
next