Commits · 0488d3a60e31926780090cd87dd053bca9d4e2b8 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Mar 13, 2002

only call: ssl_rand_seed(s, p, SSL_RSCTX_STARTUP, "Init: "); · 0488d3a6

Doug MacEachern authored Mar 13, 2002

once at startup. if there is value in calling it more than once at
startup, it should be done explicitly rather than hidden in
ssl_tmp_keys_init().

switch to ptemp pool when calling ssl_rand_seed() at startup.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93893 13f79535-47bb-0310-9956-ffa450edef68

0488d3a6

remove ssl_engine_ds.c · aff2ad0d

Doug MacEachern authored Mar 13, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93892 13f79535-47bb-0310-9956-ffa450edef68

aff2ad0d

remove obsolete ssl_ds_{table,array} api · 02cba2dd

Doug MacEachern authored Mar 13, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93891 13f79535-47bb-0310-9956-ffa450edef68

02cba2dd

replace ssl_ds_array usage with apr_array_header_t · 68ce3d07

Doug MacEachern authored Mar 13, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93890 13f79535-47bb-0310-9956-ffa450edef68

68ce3d07

minor ssl_init_CheckServers() enhancements: · f6f254cf

Doug MacEachern authored Mar 13, 2002

- pass the ptemp (temporary pool) so we don't need to create a subpool
  and destroy it ourselves.

- change ssl_ds_table usage to apr_hash_t


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93887 13f79535-47bb-0310-9956-ffa450edef68

f6f254cf

folding more duplication in ssl_tmp_keys_init · 57d0c4c0

Doug MacEachern authored Mar 13, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93886 13f79535-47bb-0310-9956-ffa450edef68

57d0c4c0

Mar 12, 2002

cleanup tmp key callbacks. each had assigned the same (1024 bit) value · a5b174c2

Doug MacEachern authored Mar 12, 2002

in 3 different places.  the old code did nothing special in the case
of the export flag either.

add an ssl_log in each to trace when keys are being handed out.

add some XXX comments.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93885 13f79535-47bb-0310-9956-ffa450edef68

a5b174c2

for the sake of readablity, · b19c0842

Doug MacEachern authored Mar 12, 2002

change: SSL_TKPIDX_{DH,RSA}{512,1024}
to: SSL_TMP_KEY_{DH,RSA}_{512,1024}

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93883 13f79535-47bb-0310-9956-ffa450edef68

b19c0842

split ssl_init_TmpKeysHandle function to init/free functions, · 96a88dd9

Doug MacEachern authored Mar 12, 2002

and make them static to ssl_engine_init.c


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93882 13f79535-47bb-0310-9956-ffa450edef68

96a88dd9

it is not required that temporary keys survive restarts, since they · 8b30c237

Doug MacEachern authored Mar 12, 2002

are generated and destroyed on every restart.

so get rid of SSLModConfigRec.tTmpKeys table and mess that was
managing it.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93881 13f79535-47bb-0310-9956-ffa450edef68

8b30c237

remove version checks for using EGD · aff64872

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93879 13f79535-47bb-0310-9956-ffa450edef68

aff64872

remove call to legacy X509V3_add_standard_extensions() function, · bba714d9

Doug MacEachern authored Mar 12, 2002

not needed with OpenSSL 0.9.6+


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93878 13f79535-47bb-0310-9956-ffa450edef68

bba714d9

we require OpenSSL 0.9.6+ · 2daa09c8

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93877 13f79535-47bb-0310-9956-ffa450edef68

2daa09c8

removing unused ssl_init_ChildKill · 35821733

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93875 13f79535-47bb-0310-9956-ffa450edef68

35821733

making ssl_init_SSLLibrary() static · a99886e5

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93874 13f79535-47bb-0310-9956-ffa450edef68

a99886e5

cleanup version component construction. · 9bb0faec

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93873 13f79535-47bb-0310-9956-ffa450edef68

9bb0faec

fold duplication of SSL{Proxy}VerifyDepth directives into · 704e610a

Doug MacEachern authored Mar 12, 2002

ssl_cmd_verify_depth_parse function.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93872 13f79535-47bb-0310-9956-ffa450edef68

704e610a

Fixed a type mismatch · 5813400b

Bradley Nicholes authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93871 13f79535-47bb-0310-9956-ffa450edef68

5813400b

moving SSLVerifyClient directive parsing into ssl_cmd_verify_parse · e9ee30da

Doug MacEachern authored Mar 12, 2002

function, which can also be used for SSLProxyVerify directive.

dropping support for undocumented integer form of levels (0..3)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93870 13f79535-47bb-0310-9956-ffa450edef68

e9ee30da

Added NetWare to the ifdef list · 10e208de

Bradley Nicholes authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93869 13f79535-47bb-0310-9956-ffa450edef68

10e208de

fold duplication of SSL{Proxy}Protocol directives into · a1d62b1e

Doug MacEachern authored Mar 12, 2002

ssl_cmd_protocol_parse function.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93865 13f79535-47bb-0310-9956-ffa450edef68

a1d62b1e

fold some duplication of server certs/keys directive checking into · 3db2f7d8

Doug MacEachern authored Mar 12, 2002

ssl_cmd_check_aidx_max function.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93864 13f79535-47bb-0310-9956-ffa450edef68

3db2f7d8

folding some command handler duplication into two generic functions: · ea436886

Doug MacEachern authored Mar 12, 2002

ssl_cmd_check_file and ssl_cmd_check_dir.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93863 13f79535-47bb-0310-9956-ffa450edef68

ea436886

get rid of some warnings for currently unused/unprototyped functions. · 4230b447

Doug MacEachern authored Mar 12, 2002

(we can actually compile mod_ssl with -Werror if -Wstrict-prototypes
is taken out)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93862 13f79535-47bb-0310-9956-ffa450edef68

4230b447

minor performance enhancement: no need to use md5 of VHostID for the · 72681eaa

Doug MacEachern authored Mar 12, 2002

session id, just use the VHostID itself.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93861 13f79535-47bb-0310-9956-ffa450edef68

72681eaa

dropping hungarian notation · a5e885d5

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93860 13f79535-47bb-0310-9956-ffa450edef68

a5e885d5

minor style changes · 7ed6d145

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93859 13f79535-47bb-0310-9956-ffa450edef68

7ed6d145

dropping hungarian notation · 869c3b19

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93851 13f79535-47bb-0310-9956-ffa450edef68

869c3b19

various style fixups / general changes to make code more readable. · afb75e5d

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93848 13f79535-47bb-0310-9956-ffa450edef68

afb75e5d

various style fixups / general changes to make code more readable. · 2816b559

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93847 13f79535-47bb-0310-9956-ffa450edef68

2816b559

add SSL_VERIFY_PEER_STRICT shortcut for often used flags · ba36e087

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93846 13f79535-47bb-0310-9956-ffa450edef68

ba36e087

various style fixups / general changes to make code more readable. · 4540ef0a

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93845 13f79535-47bb-0310-9956-ffa450edef68

4540ef0a

Mar 10, 2002

no need to call SSL_clear() after SSL_new() · b4e921bd

Doug MacEachern authored Mar 10, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93824 13f79535-47bb-0310-9956-ffa450edef68

b4e921bd

don't allocate SSLConnRec unless ssl is enabled on this vhost. · c6c229fd

Doug MacEachern authored Mar 10, 2002

also provides a shorter shortcut for mod_ssl hooks to decline if ssl
is not enabled.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93823 13f79535-47bb-0310-9956-ffa450edef68

c6c229fd

Mar 08, 2002

support reuse of encrypted DSA keys on restart · 107f4274

Doug MacEachern authored Mar 08, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93799 13f79535-47bb-0310-9956-ffa450edef68

107f4274

remove unused ap_server_ctx member from SSLSrvConfigRec · b8194772

Doug MacEachern authored Mar 08, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93785 13f79535-47bb-0310-9956-ffa450edef68

b8194772

Mar 06, 2002

apr-utils rename apr_ansi_time_to_apr_time and · 6435b17c

Ian Holsman authored Mar 06, 2002

apr_exploded_time_t.

PR:
Obtained from:
Submitted by:	Thom May <thom@planetarytramp.net>
Reviewed by:	Ian Holsman


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93733 13f79535-47bb-0310-9956-ffa450edef68

6435b17c

Mar 03, 2002

reuse existing private key if possible for all SSLPassPhraseDialog · af2268d8

Doug MacEachern authored Mar 03, 2002

types, not just builtin.  on win32 for example, a pipe dialog might
allocate a wintty for prompting, which results in 4 prompts at
startup, 2 for each child and 2 within each when httpd "restarts
itself".
update comments on this and wrap them a bit.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93679 13f79535-47bb-0310-9956-ffa450edef68

af2268d8

Mar 01, 2002

s/const void/const char/g in ssl_asn1_table api · 2882cebd

Doug MacEachern authored Mar 01, 2002

pointed out by gstein


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93653 13f79535-47bb-0310-9956-ffa450edef68

2882cebd

Consensus is that we should not use the scoreboard as a source of entropy. · 0856d72f

Cliff Woolley authored Mar 01, 2002

Reviewed by: OtherBill, Justin, Madhu


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93652 13f79535-47bb-0310-9956-ffa450edef68

0856d72f