Skip to content
  1. Jan 07, 2015
    • Kaspar Brand's avatar
      Add support for extracting subjectAltName entries of type · 2b7fe164
      Kaspar Brand authored 
      rfc822Name and dNSName into SSL_{CLIENT,SERVER}_SAN_{Email,DNS}_n
variables.

* docs/manual/mod/mod_ssl.xml: add SSL_*_SAN_*_n entries to the
  environment variables table

* modules/ssl/ssl_engine_kernel.c: in ssl_hook_Fixup, add extraction
  of subjectAltName entries for the "StdEnvVars" case

* modules/ssl/ssl_engine_vars.c: add support for retrieving the
  SSL_{CLIENT,SERVER}_SAN_{Email,DNS}_n variables, either with
  individual on-demand lookup (ssl_var_lookup_ssl_cert_san),
  or with full-list extraction to the environment ("StdEnvVars")

* modules/ssl/ssl_private.h: add modssl_var_extract_san_entries prototype

* modules/ssl/ssl_util_ssl.c: implement SSL_X509_getSAN and
  SSL_ASN1_STRING_to_utf8 helper functions, with factoring out common
  code from SSL_X509_getIDs and SSL_X509_NAME_ENTRY_to_string where
  suitable. Limit SSL_X509_getSAN to the two most common subjectAltName
  entry types appearing in user or server certificates (i.e., rfc822Name
  and dNSName), for the time being.

* modules/ssl/ssl_util_ssl.h: add SSL_ASN1_STRING_to_utf8
  and SSL_X509_getSAN prototypes


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1650047 13f79535-47bb-0310-9956-ffa450edef68
      2b7fe164
    • Yann Ylavic's avatar
      mod_proxy: Don't put non balancer-member workers in error state by · 8c82139b
      Yann Ylavic authored 
      default for connection or 500/503 errors, and honor status=+I for
any error.  PR 48388.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1650028 13f79535-47bb-0310-9956-ffa450edef68
      8c82139b
  3. Jan 06, 2015
  5. Jan 05, 2015
  7. Jan 04, 2015
  9. Jan 03, 2015
  11. Jan 02, 2015
  13. Jan 01, 2015
  15. Dec 31, 2014
  17. Dec 30, 2014
  19. Dec 29, 2014
  21. Dec 28, 2014
  23. Dec 22, 2014
  25. Dec 21, 2014