git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1729583 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1729581 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1729571 13f79535-47bb-0310-9956-ffa450edef68

This used to check for the backend connection readability only (instead of
the full ping/100-continue round-trip), but the case is already handled by
ap_proxy_connect_backend() which is always called.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1729507 13f79535-47bb-0310-9956-ffa450edef68

- no need to check for opaque "valid" cert
  flag, since we get here only if internal
  certificate verification of OpenSSL returned
  ok=1.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1729500 13f79535-47bb-0310-9956-ffa450edef68

- improve renegotiation loop.
  Should now also work in case only the
  cipher changes.
  Should now also work in case the handshake
  ends with an error.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1729498 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1729460 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1729459 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1729439 13f79535-47bb-0310-9956-ffa450edef68

The old compatibility macro check no longer works,
because those are now actual functions, so an
ifndef is not the correct check.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1729435 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1729429 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1729376 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1729374 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1729367 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1729366 13f79535-47bb-0310-9956-ffa450edef68

- partial support for renegotiations.
  - Not a good design, need to poll until
    renegotitation has finished.
  - Loop criterion not right, if no client certs
    will be send.
  - Also doesn't work for EC or DH ciphers.
    Unclear how to fix with current 1.1.0
    API.
  - Details see
    http://marc.info/?t=145493359200002&r=1&w=2


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1729341 13f79535-47bb-0310-9956-ffa450edef68

Rephrase comment as Norm suggested.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1729292 13f79535-47bb-0310-9956-ffa450edef68

mod_proxy_express and mod_proxy_hcheck
do not need imports for sockets.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1729291 13f79535-47bb-0310-9956-ffa450edef68

Netware: pull up ws2nlm imports from all (most)
proxy module makefiles to the main proxy makefile.

The individual module Makefiles overwrite
FILES_nlm_Ximports instead of appending.
Furthermore, now we know which modules need
this import so we can set it specifically
for those.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1729290 13f79535-47bb-0310-9956-ffa450edef68

enabling when configure was called with
-enable-load-all-modules. The default MPM
should still get enabled automatically.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1729235 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1729209 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1729208 13f79535-47bb-0310-9956-ffa450edef68

Only exist in OpenSSL 1.1.0. They were
renamed from EVP_MD_CTX_create() and
EVP_MD_CTX_destroy().

Followup to r1728979.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1729037 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1729032 13f79535-47bb-0310-9956-ffa450edef68

- don't check for SSLeay_version() in configure
  The function no longer exists in 1.1.0.
  It was replaced by OpenSSL_version().
- Switch between SSLeay_version(U) and
  OpenSSL_version() depending on version
  in modules/ssl/ssl_util_ssl.h.
- Use MODSSL_LIBRARY_DYNTEXT everywhere.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1728981 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1728980 13f79535-47bb-0310-9956-ffa450edef68

- followup to r1728909 (incomplete switch
  from struct to struct pointer).


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1728979 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1728978 13f79535-47bb-0310-9956-ffa450edef68

- mod_ssl
Look out for "XXX: OpenSSL 1.1.0:" for a few
open problems.

Not tested with test suite yet.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1728909 13f79535-47bb-0310-9956-ffa450edef68

- ab


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1728907 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1728875 13f79535-47bb-0310-9956-ffa450edef68

proxy module makefiles to the main proxy makefile.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1728874 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1728858 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1728855 13f79535-47bb-0310-9956-ffa450edef68

- change vpatch for wstunnel to be consistent
  with orther proxy modules. Likely a
  a copy&paste error from a balancer module


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1728813 13f79535-47bb-0310-9956-ffa450edef68

- remove unneeded XINCDIRS
  - there are no header files in $(STDMOD)/http
  - $(STDMOD)/generators and $(STDMOD)/ssl
    for serf were likely copy&paste from
    NWGNUproxy, but serf doesn't need them
  - $(STDMOD)/proxy for wstunnel likely
    copy&paste from some lb module but
    wstunnel doesn't need them


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1728812 13f79535-47bb-0310-9956-ffa450edef68

- use $(NLM_NAME) instead of explicit name
  when defining TARGET_nlm


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1728810 13f79535-47bb-0310-9956-ffa450edef68

- removing trailing whitespace
- remove trailing empty lines
- choose a common order for lists
- choose a common style for TARGET_nlm and
  TARGET_lib definitions


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1728808 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1728805 13f79535-47bb-0310-9956-ffa450edef68

system.

Contributed by NormW.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1728804 13f79535-47bb-0310-9956-ffa450edef68