Commits · a4e1ce7dab5d2d47d1f312048b9d0fa2065c63a6 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

27 Mar, 2002 18 commits

use SSL_SESSION_ api since SSL_SESSION cannot be dereferenced when using sslc · a4e1ce7d
Doug MacEachern authored Mar 27, 2002
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94211 13f79535-47bb-0310-9956-ffa450edef68
```
a4e1ce7d

Doug MacEachern authored Mar 27, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94210 13f79535-47bb-0310-9956-ffa450edef68

2a263ee1

modssl_set_cipher_list was in the wrong place for OpenSSL · 4d985795

Doug MacEachern authored Mar 27, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94209 13f79535-47bb-0310-9956-ffa450edef68

4d985795

RAND_status macro was in the wrong place · 253975ee

Doug MacEachern authored Mar 27, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94208 13f79535-47bb-0310-9956-ffa450edef68

253975ee

sslc does not currently support RAND_egd or RAND_status · d04b4412

Doug MacEachern authored Mar 27, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94207 13f79535-47bb-0310-9956-ffa450edef68

d04b4412

in sslc PEM_F_DEF_CALLBACK == PEM_F_DEF_CB · 384f7f0e

Doug MacEachern authored Mar 27, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94206 13f79535-47bb-0310-9956-ffa450edef68

384f7f0e

2nd arg to SSL_set_cipher_list in sslc is char * · b7f3c7ce

Doug MacEachern authored Mar 27, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94205 13f79535-47bb-0310-9956-ffa450edef68

b7f3c7ce

sslc 1.x SSL_set_verify only takes 2 args · adce0fe1

Doug MacEachern authored Mar 27, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94204 13f79535-47bb-0310-9956-ffa450edef68

adce0fe1

sslc does not currently implement an SSL_set_state function · b320c3bb

Doug MacEachern authored Mar 27, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94203 13f79535-47bb-0310-9956-ffa450edef68

b320c3bb

sslc adds a second, unused param to X509_verify_cert · 3f5fc56c

Doug MacEachern authored Mar 27, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94202 13f79535-47bb-0310-9956-ffa450edef68

3f5fc56c

sslc does not have a safestack.h, implement a minimal subset required · 85e8f419

Doug MacEachern authored Mar 27, 2002

for mod_ssl


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94201 13f79535-47bb-0310-9956-ffa450edef68

85e8f419

some compat macros for sslc 1.x · 66560904

Doug MacEachern authored Mar 27, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94200 13f79535-47bb-0310-9956-ffa450edef68

66560904

moving OpenSSL+sslc compat foo to ssl_toolkit_compat.h · aa5a93b4

Doug MacEachern authored Mar 27, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94199 13f79535-47bb-0310-9956-ffa450edef68

aa5a93b4

3rd arg of BIO callbacks in 'const char' in OpenSSL and 'char' in sslc, · f62cdb59

Doug MacEachern authored Mar 27, 2002

make both happy.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94198 13f79535-47bb-0310-9956-ffa450edef68

f62cdb59

OpenSSL uses void * for callback data, sslc uses char *, · 035f027d

Doug MacEachern authored Mar 27, 2002

cast to void * to make both happy.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94197 13f79535-47bb-0310-9956-ffa450edef68

035f027d

add modssl_session_get_time() function to give mod_ssl what it needs · 77b5a643

Doug MacEachern authored Mar 27, 2002

from SSL_SESSION_get_time() if using OpenSSL or sslc.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94195 13f79535-47bb-0310-9956-ffa450edef68

77b5a643

another step towards compatiblity with rsa sslc: · 26fcfc75

Doug MacEachern authored Mar 27, 2002

define the STACK_OF macro if not already defined.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94194 13f79535-47bb-0310-9956-ffa450edef68

26fcfc75

configure already checks OpenSSL version so dont bother here · e2b7201c

Doug MacEachern authored Mar 27, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94193 13f79535-47bb-0310-9956-ffa450edef68

e2b7201c

26 Mar, 2002 7 commits

note about the temporary DH keys · c1bf8746

Doug MacEachern authored Mar 26, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94181 13f79535-47bb-0310-9956-ffa450edef68

c1bf8746

a few updates · 378fa86c

Doug MacEachern authored Mar 26, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94180 13f79535-47bb-0310-9956-ffa450edef68

378fa86c

per-dir SSLCACertificate{File,Path} cannot use SSL_CTX_set_cert_store · bc1ecd89

Doug MacEachern authored Mar 26, 2002

as the 1.x based module does, since the function is not thread-safe.
a patch has been submitted to OpenSSL to support SSL_set_cert_store
which is thread safe. this feature is enabled by default in the
current 1.x based module, we only enable it if the SSL_set_cert_store
function is available.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94179 13f79535-47bb-0310-9956-ffa450edef68

bc1ecd89

constificationization of some char * config items · b6898259

Doug MacEachern authored Mar 26, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94177 13f79535-47bb-0310-9956-ffa450edef68

b6898259

performance enhancement: mod_ssl config directives that can have both · 0dfe80db

Doug MacEachern authored Mar 26, 2002

a per-server and per-dir context were configuring the per-dir context
for per-server commands. this triggered ssl_hook_Access to always
compare the per-server context against per-dir configs that were
exactly the same.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94176 13f79535-47bb-0310-9956-ffa450edef68

0dfe80db

correct comment in previous change · e46017ab

Doug MacEachern authored Mar 26, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94171 13f79535-47bb-0310-9956-ffa450edef68

e46017ab

· 2aaf1bc5

Doug MacEachern authored Mar 26, 2002

PR:
Obtained from:
Submitted by:
Reviewed by:
fix bug seen on win32 with netscape client where output filter is run
triggered by lingering_close after ssl_hook_CloseConnection has been called


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94170 13f79535-47bb-0310-9956-ffa450edef68

2aaf1bc5

22 Mar, 2002 1 commit

the mod_ssl provided with Apache >= 2.0 no longer has an independent · ed053586

Jeff Trawick authored Mar 22, 2002

version number


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94111 13f79535-47bb-0310-9956-ffa450edef68

ed053586

18 Mar, 2002 2 commits

Fix a possibly-uninitialized warning and a boolean logic bug · f89a8877

Cliff Woolley authored Mar 18, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93992 13f79535-47bb-0310-9956-ffa450edef68

f89a8877

Fix some possibly-uninitialized warnings and some incorrect format strings · fd87a0b2
Cliff Woolley authored Mar 18, 2002
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93991 13f79535-47bb-0310-9956-ffa450edef68
```
fd87a0b2

17 Mar, 2002 2 commits

· 9793c737

William A. Rowe Jr authored Mar 17, 2002

Clear up a const warning, and recognize some arrays by changing the
variable names to the plural [rather than aszFoo, which I hope continues
to be cleaned up as folks have time.]

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93982 13f79535-47bb-0310-9956-ffa450edef68

9793c737

· dfb559e6

William A. Rowe Jr authored Mar 17, 2002

  Fix a signedness emit based on session_id_length [unsigned]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93981 13f79535-47bb-0310-9956-ffa450edef68

dfb559e6

16 Mar, 2002 3 commits

· 4f938ccc

William A. Rowe Jr authored Mar 16, 2002

Lost the prior log message ... [this is an empty commit]

Prior revision fixes the last ap_server_root_relative() NULL return
code potential segfaults. It also quits trying to server_root_relative
a logging pipe, since log pipes generally take arguments. However, it
ignores the PassPhraseDialog exec: since the argument to that shell
mechanism is the server name itself.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93972 13f79535-47bb-0310-9956-ffa450edef68

4f938ccc

PR: · 5fe85c5c

William A. Rowe Jr authored Mar 16, 2002

Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93971 13f79535-47bb-0310-9956-ffa450edef68

5fe85c5c

· fa5bd055

William A. Rowe Jr authored Mar 16, 2002

  Silly module, we don't need compat.h :)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93964 13f79535-47bb-0310-9956-ffa450edef68

fa5bd055

15 Mar, 2002 2 commits

get rid of some -Wall warnings · a72180a8

Doug MacEachern authored Mar 15, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93947 13f79535-47bb-0310-9956-ffa450edef68

a72180a8

remove stray log message (from madhu) · 64d41b4e

Doug MacEachern authored Mar 15, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93946 13f79535-47bb-0310-9956-ffa450edef68

64d41b4e

14 Mar, 2002 4 commits

PR: · 471c8a2c

Doug MacEachern authored Mar 14, 2002

Obtained from:
Submitted by:   Madhusudan Mathihalli <madhusudan_mathihalli@hp.com>
Reviewed by:	dougm
implement SSLSessionCache shmht and shmcb based on apr_rmm and apr_shm


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93942 13f79535-47bb-0310-9956-ffa450edef68

471c8a2c

deal with the rename of kill_after_timeout to APR_KILL_AFTER_TIMEOUT · 60970dde

Jeff Trawick authored Mar 14, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93940 13f79535-47bb-0310-9956-ffa450edef68

60970dde

fix comment · 88078be5

Doug MacEachern authored Mar 14, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93932 13f79535-47bb-0310-9956-ffa450edef68

88078be5

PR: · 0f1d5677

Doug MacEachern authored Mar 14, 2002

Obtained from:
Submitted by:
Reviewed by:
fix bug in ssl_io_input_getline():
in most cases we get all the headers on the first SSL_read.
however, in certain cases SSL_read will only get a partial
chunk of the headers, so we now try to read until LF is seen.

bug seen with netscape client (running both on linux and win32) and
server running on win32.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93931 13f79535-47bb-0310-9956-ffa450edef68

0f1d5677

13 Mar, 2002 1 commit

Update our copyright for this year. · 5df8c9f0

Roy T. Fielding authored Mar 13, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93918 13f79535-47bb-0310-9956-ffa450edef68

5df8c9f0