2012-10-07 |
Kaspar Brand | Allow forced setting of TLS1.1 and TLS1.2 protocols... Reviewed/amended by: Kaspar Brand
|
commit | commitdiff | tree |
2012-09-19 |
Kaspar Brand | switch back to MOD_SSL_LDADD, as suggested by jorton
|
commit | commitdiff | tree |
2012-09-16 |
Kaspar Brand | Spin off module-specific build options into separate...
|
commit | commitdiff | tree |
2012-09-16 |
Kaspar Brand | revert r1385214, as I inadvertently left out acinclude.m4.
|
commit | commitdiff | tree |
2012-09-16 |
Kaspar Brand | Spin off module-specific build options into separate...
|
commit | commitdiff | tree |
2012-09-16 |
Kaspar Brand | revert r1358167, in preparation of the next commit
|
commit | commitdiff | tree |
2012-02-28 |
Kaspar Brand | properly free the GENERAL_NAMEs, as pointed out in...
|
commit | commitdiff | tree |
2012-02-12 |
Kaspar Brand | Fix regression introduced in r1222917: in ssl_find_vhost...
|
commit | commitdiff | tree |
2012-01-08 |
Kaspar Brand | fix signedness issue with SSL_X509_NAME_to_string(...
|
commit | commitdiff | tree |
2011-12-30 |
Kaspar Brand | Fix another case of #ifdef-within-a-macro (which was...
|
commit | commitdiff | tree |
2011-12-24 |
Kaspar Brand | add missing #ifdef in ssl_cmd_protocol_parse (should...
|
commit | commitdiff | tree |
2011-12-24 |
Kaspar Brand | update transformations
|
commit | commitdiff | tree |
2011-12-24 |
Kaspar Brand | SSLProtocol: allow explicit control of TLSv1.1 and...
|
commit | commitdiff | tree |
2011-12-24 |
Kaspar Brand | Set OPENSSL_NO_SSL_INTERN when compiling against OpenSSL...
|
commit | commitdiff | tree |
2011-12-24 |
Kaspar Brand | REMOTE_ADDR is now r->useragent_ip, which is not/never...
|
commit | commitdiff | tree |
2011-12-12 |
Kaspar Brand | logging adjustments:
|
commit | commitdiff | tree |
2011-12-12 |
Kaspar Brand | Streamline TLS session ticket key handling (added in...
|
commit | commitdiff | tree |
2011-12-07 |
Kaspar Brand | Adjust the OpenSSL session id context for SNI configurations...
|
commit | commitdiff | tree |
2011-11-18 |
Kaspar Brand | update transformations
|
commit | commitdiff | tree |
2011-11-18 |
Kaspar Brand | Change the SSLCipherSuite default to a shorter, whitelist
|
commit | commitdiff | tree |
2011-11-18 |
Kaspar Brand | drop SSLv2 support (set SSL_OP_NO_SSLv2 for any new...
|
commit | commitdiff | tree |
2011-10-04 |
Kaspar Brand | Add SSLCARevocationCheck directive to default mod_ssl...
|
commit | commitdiff | tree |
2011-10-04 |
Kaspar Brand | fix indentation
|
commit | commitdiff | tree |
2011-09-28 |
Kaspar Brand | In ssl_check_public_cert(), also take dNSNames in the...
|
commit | commitdiff | tree |
2011-09-26 |
Kaspar Brand | replace another occurence of X509_NAME_oneline by SSL_X509_N...
|
commit | commitdiff | tree |
2011-09-25 |
Kaspar Brand | enable the SNI extension for proxy connections
|
commit | commitdiff | tree |
2011-09-21 |
Kaspar Brand | Bring error messages for TLS stapling related options...
|
commit | commitdiff | tree |
2011-09-21 |
Kaspar Brand | update transformations
|
commit | commitdiff | tree |
2011-09-21 |
Kaspar Brand | mod_ssl:
|
commit | commitdiff | tree |
2011-09-19 |
Kaspar Brand | Add ssl_log_xerror() and ssl_log_rxerror(), modeled...
|
commit | commitdiff | tree |
2011-09-14 |
Kaspar Brand | Properly fill in the SSL_{CLIENT,SERVER}_V_{START,END...
|
commit | commitdiff | tree |
2011-09-14 |
Kaspar Brand | ssl_callback_proxy_cert(): take advantage of ssl_log_cxerror()
|
commit | commitdiff | tree |
2011-09-07 |
Kaspar Brand | ssl_var_lookup_ssl_cert_dn_oneline(): properly deal...
|
commit | commitdiff | tree |
2011-09-04 |
Kaspar Brand | we might also see GeneralizedTimes in certs nowadays
|
commit | commitdiff | tree |
2011-09-04 |
Kaspar Brand | Revamp CRL checking for client and remote servers:
|
commit | commitdiff | tree |
2011-08-28 |
Kaspar Brand | Better safe than sorry: with OpenSSL 1.0, X509_STORE_CTX_get...
|
commit | commitdiff | tree |
2011-08-28 |
Kaspar Brand | Fix the default OCSP responder timeout for client cert
|
commit | commitdiff | tree |
2011-08-15 |
Kaspar Brand | Improve ssl_log_cxerror():
|
commit | commitdiff | tree |
2011-08-14 |
Kaspar Brand | Enforce OpenSSL 0.9.7 or later at compile time (#error...
|
commit | commitdiff | tree |
2011-08-07 |
Kaspar Brand | Enforce OpenSSL 0.9.7 as a minimum requirement in configure...
|
commit | commitdiff | tree |
2011-08-07 |
Kaspar Brand | Remove the ssl_toolkit_compat layer, which is no longer...
|
commit | commitdiff | tree |
2011-08-07 |
Kaspar Brand | Drop support for the RSA BSAFE SSL-C toolkit from configure,
|
commit | commitdiff | tree |
|