summaryrefslogtreecommitdiff
path: root/modules/ssl/ssl_engine_kernel.c
Commit message (Expand)AuthorAgeFilesLines
* add SSL_CTX_set_session_id_context(3) checksGiovanni Bechis2023-04-041-3/+13
* check SSL_do_handshake(3) return value Giovanni Bechis2023-04-041-3/+7
* SSL_do_handshake can fail with 0 or <0 status codes.Giovanni Bechis2023-04-031-1/+1
* check for more possible SSL failuresGiovanni Bechis2023-03-301-4/+1
* mod_ssl: Fix deprecation warnings with openssl-3.Yann Ylavic2023-03-191-8/+2
* Add SSL_SHARED_CIPHER environment variableDirk-Willem van Gulik2023-03-061-0/+1
* return early if X509_STORE_CTX_init failsGiovanni Bechis2022-02-241-1/+4
* *) core/mod_proxy/mod_ssl:Stefan Eissing2021-06-081-7/+6
* mod_ssl: Switch to using OpenSSL's automatic internal DH parameterJoe Orton2021-05-211-0/+2
* core/ap_ssl_*: changes after review by rpluemStefan Eissing2021-04-201-3/+6
* mod_ssl: Add base64-encoded DER certificate variables as alternativeJoe Orton2021-03-191-19/+26
* And the necessary log tags added just shortly afterwards.Stefan Eissing2021-03-031-1/+1
* Changed ap_ssl_answer_challenge() and its hook to provide PEM data forStefan Eissing2021-03-031-35/+23
* Fixed regression in r1887085 where a SSL function was used that is not availa...Stefan Eissing2021-03-031-1/+1
* Adding log tags where log tags are needed.Stefan Eissing2021-03-021-2/+2
* Adding more ap_ssl_* functions and hooks to the core server.Stefan Eissing2021-03-021-6/+29
* * modules/ssl/ssl_engine_kernel.c (ssl_hook_Access_modern): MoveJoe Orton2020-08-171-10/+8
* mod_ssl: follow up to r1877397: fix SSL_OP_NO_RENEGOT*I*ATION typo.Yann Ylavic2020-05-151-3/+3
* mod_ssl: Update the ssl_var_lookup() API:Joe Orton2020-05-071-9/+9
* mod_ssl: Switch to using SSL_OP_NO_RENEGOTATION (where available) toJoe Orton2020-05-051-16/+12
* mod_ssl: Calculate the MD5 digest used as the session context once perJoe Orton2020-05-041-5/+1
* Prior to r1877345 mc->pPool was the process pool (s->process->pool).Joe Orton2020-05-041-5/+2
* mod_ssl: add compatibility with OpenSSL 3.0.0Yann Ylavic2020-04-241-3/+19
* mod_ssl: axe useless X509_free (NULL arg).Yann Ylavic2020-04-191-3/+0
* * modules/ssl/ssl_private.h: Define X509_up_ref and EVP_PKEY_up_refJoe Orton2020-03-261-8/+0
* Fix compilation breakage with OpenSSL 1.1.0 up to 1.1.0f.Rainer Jung2020-03-231-1/+1
* *) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes githubStefan Eissing2020-02-111-0/+2
* Add logno.Joe Orton2019-11-211-1/+1
* Buffer HTTP request bodies for TLSv1.3 PHA in the same way as forJoe Orton2019-11-211-32/+55
* mod_ssl: Log private key material to file set by $SSLKEYLOGFILE in theJoe Orton2019-11-151-0/+14
* mod_ssl: follow up to r1868645.Yann Ylavic2019-10-251-2/+8
* mod_ssl: follow up to r1868645.Yann Ylavic2019-10-221-8/+10
* mod_ssl: negotiate the TLS protocol version per name based vhost configuration.Yann Ylavic2019-10-201-5/+73
* mod_ssl: OCSP does not apply to proxy mode, fix verify context.Yann Ylavic2019-08-231-2/+2
* * modules/ssl/ssl_engine_kernel.c (ssl_hook_Access_modern): CorrectlyJoe Orton2019-03-191-0/+2
* mod_ssl: AH10129 from ERR to DEBUG level.Yann Ylavic2019-03-121-1/+2
* mod_ssl: give mod_md the chance to override certificate after ALPN protocol n...Stefan Eissing2019-01-251-22/+52
* reverting last changeStefan Eissing2019-01-241-52/+22
* mod_http2: enable re-use of slave connections again.Stefan Eissing2019-01-241-22/+52
* *) mod_ssl: Fix mod_authz provider for "require ssl" directive to check cor...Stefan Eissing2018-11-081-4/+1
* rollback 1844001.Jean-Frederic Clere2018-10-171-5/+0
* And a way to custom modules to guess and extract ssl variable.Jean-Frederic Clere2018-10-161-0/+5
* * Pickup the proxy related configuration for verify mode and verify depth andRuediger Pluem2018-10-011-7/+18
* On the trunk:Stefan Eissing2018-09-201-1/+1
* On the trunk:Stefan Eissing2018-09-201-1/+1
* * modules/ssl/ssl_engine_kernel.c (ssl_check_post_client_verify):Joe Orton2018-09-181-95/+103
* * modules/ssl/ssl_engine_kernel.c (ssl_hook_Access_modern): Fail withJoe Orton2018-09-111-1/+9
* mod_ssl: use SSL_HAVE_PROTOCOL_TLSV1_3 to check for compiled in TLS 1.3.Yann Ylavic2018-06-151-2/+2
* mod_ssl: disable check for client initiated renegotiations with TLS 1.3.Yann Ylavic2018-06-151-16/+28
* I don't know if 'c' can be NULL here, but we should not dereference it before...Christophe Jaillet2018-05-141-1/+2