Commits · 3f5fc56c227981d9f5809541a4fb9c5a42bb0b9e · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Mar 27, 2002

sslc adds a second, unused param to X509_verify_cert · 3f5fc56c

Doug MacEachern authored Mar 27, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94202 13f79535-47bb-0310-9956-ffa450edef68

3f5fc56c

sslc does not have a safestack.h, implement a minimal subset required · 85e8f419

Doug MacEachern authored Mar 27, 2002

for mod_ssl


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94201 13f79535-47bb-0310-9956-ffa450edef68

85e8f419

some compat macros for sslc 1.x · 66560904

Doug MacEachern authored Mar 27, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94200 13f79535-47bb-0310-9956-ffa450edef68

66560904

moving OpenSSL+sslc compat foo to ssl_toolkit_compat.h · aa5a93b4

Doug MacEachern authored Mar 27, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94199 13f79535-47bb-0310-9956-ffa450edef68

aa5a93b4

3rd arg of BIO callbacks in 'const char' in OpenSSL and 'char' in sslc, · f62cdb59

Doug MacEachern authored Mar 27, 2002

make both happy.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94198 13f79535-47bb-0310-9956-ffa450edef68

f62cdb59

OpenSSL uses void * for callback data, sslc uses char *, · 035f027d

Doug MacEachern authored Mar 27, 2002

cast to void * to make both happy.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94197 13f79535-47bb-0310-9956-ffa450edef68

035f027d

add modssl_session_get_time() function to give mod_ssl what it needs · 77b5a643

Doug MacEachern authored Mar 27, 2002

from SSL_SESSION_get_time() if using OpenSSL or sslc.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94195 13f79535-47bb-0310-9956-ffa450edef68

77b5a643

another step towards compatiblity with rsa sslc: · 26fcfc75

Doug MacEachern authored Mar 27, 2002

define the STACK_OF macro if not already defined.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94194 13f79535-47bb-0310-9956-ffa450edef68

26fcfc75

configure already checks OpenSSL version so dont bother here · e2b7201c

Doug MacEachern authored Mar 27, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94193 13f79535-47bb-0310-9956-ffa450edef68

e2b7201c

Mar 26, 2002

note about the temporary DH keys · c1bf8746

Doug MacEachern authored Mar 26, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94181 13f79535-47bb-0310-9956-ffa450edef68

c1bf8746

a few updates · 378fa86c

Doug MacEachern authored Mar 26, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94180 13f79535-47bb-0310-9956-ffa450edef68

378fa86c

per-dir SSLCACertificate{File,Path} cannot use SSL_CTX_set_cert_store · bc1ecd89

Doug MacEachern authored Mar 26, 2002

as the 1.x based module does, since the function is not thread-safe.
a patch has been submitted to OpenSSL to support SSL_set_cert_store
which is thread safe. this feature is enabled by default in the
current 1.x based module, we only enable it if the SSL_set_cert_store
function is available.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94179 13f79535-47bb-0310-9956-ffa450edef68

bc1ecd89

constificationization of some char * config items · b6898259

Doug MacEachern authored Mar 26, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94177 13f79535-47bb-0310-9956-ffa450edef68

b6898259

performance enhancement: mod_ssl config directives that can have both · 0dfe80db

Doug MacEachern authored Mar 26, 2002

a per-server and per-dir context were configuring the per-dir context
for per-server commands. this triggered ssl_hook_Access to always
compare the per-server context against per-dir configs that were
exactly the same.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94176 13f79535-47bb-0310-9956-ffa450edef68

0dfe80db

correct comment in previous change · e46017ab

Doug MacEachern authored Mar 26, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94171 13f79535-47bb-0310-9956-ffa450edef68

e46017ab

· 2aaf1bc5

Doug MacEachern authored Mar 26, 2002

PR:
Obtained from:
Submitted by:
Reviewed by:
fix bug seen on win32 with netscape client where output filter is run
triggered by lingering_close after ssl_hook_CloseConnection has been called


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94170 13f79535-47bb-0310-9956-ffa450edef68

2aaf1bc5

Mar 22, 2002

the mod_ssl provided with Apache >= 2.0 no longer has an independent · ed053586

Jeff Trawick authored Mar 22, 2002

version number


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94111 13f79535-47bb-0310-9956-ffa450edef68

ed053586

Mar 18, 2002

Fix a possibly-uninitialized warning and a boolean logic bug · f89a8877

Cliff Woolley authored Mar 18, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93992 13f79535-47bb-0310-9956-ffa450edef68

f89a8877

Fix some possibly-uninitialized warnings and some incorrect format strings · fd87a0b2
Cliff Woolley authored Mar 18, 2002
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93991 13f79535-47bb-0310-9956-ffa450edef68
```
fd87a0b2

Mar 17, 2002

· 9793c737

William A. Rowe Jr authored Mar 17, 2002

Clear up a const warning, and recognize some arrays by changing the
variable names to the plural [rather than aszFoo, which I hope continues
to be cleaned up as folks have time.]

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93982 13f79535-47bb-0310-9956-ffa450edef68

9793c737

· dfb559e6

William A. Rowe Jr authored Mar 17, 2002

  Fix a signedness emit based on session_id_length [unsigned]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93981 13f79535-47bb-0310-9956-ffa450edef68

dfb559e6

Mar 16, 2002

· 4f938ccc

William A. Rowe Jr authored Mar 16, 2002

Lost the prior log message ... [this is an empty commit]

Prior revision fixes the last ap_server_root_relative() NULL return
code potential segfaults. It also quits trying to server_root_relative
a logging pipe, since log pipes generally take arguments. However, it
ignores the PassPhraseDialog exec: since the argument to that shell
mechanism is the server name itself.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93972 13f79535-47bb-0310-9956-ffa450edef68

4f938ccc

PR: · 5fe85c5c

William A. Rowe Jr authored Mar 16, 2002

Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93971 13f79535-47bb-0310-9956-ffa450edef68

5fe85c5c

· fa5bd055

William A. Rowe Jr authored Mar 16, 2002

  Silly module, we don't need compat.h :)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93964 13f79535-47bb-0310-9956-ffa450edef68

fa5bd055

Mar 15, 2002

get rid of some -Wall warnings · a72180a8

Doug MacEachern authored Mar 15, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93947 13f79535-47bb-0310-9956-ffa450edef68

a72180a8

remove stray log message (from madhu) · 64d41b4e

Doug MacEachern authored Mar 15, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93946 13f79535-47bb-0310-9956-ffa450edef68

64d41b4e

Mar 14, 2002

PR: · 471c8a2c

Doug MacEachern authored Mar 14, 2002

Obtained from:
Submitted by:   Madhusudan Mathihalli <madhusudan_mathihalli@hp.com>
Reviewed by:	dougm
implement SSLSessionCache shmht and shmcb based on apr_rmm and apr_shm


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93942 13f79535-47bb-0310-9956-ffa450edef68

471c8a2c

deal with the rename of kill_after_timeout to APR_KILL_AFTER_TIMEOUT · 60970dde

Jeff Trawick authored Mar 14, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93940 13f79535-47bb-0310-9956-ffa450edef68

60970dde

fix comment · 88078be5

Doug MacEachern authored Mar 14, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93932 13f79535-47bb-0310-9956-ffa450edef68

88078be5

PR: · 0f1d5677

Doug MacEachern authored Mar 14, 2002

Obtained from:
Submitted by:
Reviewed by:
fix bug in ssl_io_input_getline():
in most cases we get all the headers on the first SSL_read.
however, in certain cases SSL_read will only get a partial
chunk of the headers, so we now try to read until LF is seen.

bug seen with netscape client (running both on linux and win32) and
server running on win32.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93931 13f79535-47bb-0310-9956-ffa450edef68

0f1d5677

Mar 13, 2002

Update our copyright for this year. · 5df8c9f0

Roy T. Fielding authored Mar 13, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93918 13f79535-47bb-0310-9956-ffa450edef68

5df8c9f0

use ssl_asn1_keystr · 32a08ae6

Doug MacEachern authored Mar 13, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93913 13f79535-47bb-0310-9956-ffa450edef68

32a08ae6

add ssl_asn1_keystr() util function that returns string representation · 22ac5add

Doug MacEachern authored Mar 13, 2002

(RSA or DSA) of the key index.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93912 13f79535-47bb-0310-9956-ffa450edef68

22ac5add

use ssl_asn1_table_keyfmt() function and only format each (rsa,dsa) · 27c4f2aa

Doug MacEachern authored Mar 13, 2002

lookup key once, rather than twice.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93911 13f79535-47bb-0310-9956-ffa450edef68

27c4f2aa

use ssl_asn1_table_keyfmt() function · 070f67c0

Doug MacEachern authored Mar 13, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93910 13f79535-47bb-0310-9956-ffa450edef68

070f67c0

add ssl_asn1_table_keyfmt() function for clarity · 840ec64e

Doug MacEachern authored Mar 13, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93909 13f79535-47bb-0310-9956-ffa450edef68

840ec64e

PR: · 9dffb5c9

Doug MacEachern authored Mar 13, 2002

Obtained from:
Submitted by:   Madhusudan Mathihalli <madhusudan_mathihalli@hp.com>
Reviewed by:	dougm
adjust to SSL_SESSION_id2sz() prototype change


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93907 13f79535-47bb-0310-9956-ffa450edef68

9dffb5c9

generalize session logging into ssl_session_log() function · 1f191a0d

Doug MacEachern authored Mar 13, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93906 13f79535-47bb-0310-9956-ffa450edef68

1f191a0d

SSL_SESSION_id2sz() was NOT THREAD SAFE. it returned a pointer to a · 776cd031

Doug MacEachern authored Mar 13, 2002

static variable.  fixed.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93899 13f79535-47bb-0310-9956-ffa450edef68

776cd031

SSL_SESSION_id2sz() is somewhat expensive, make sure we only call it · 49a20531

Doug MacEachern authored Mar 13, 2002

if SSLLogLevel >= info


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93898 13f79535-47bb-0310-9956-ffa450edef68

49a20531