summaryrefslogtreecommitdiffstats
path: root/ChangeLog
Commit message (Collapse)AuthorAgeFilesLines
* Update ChangeLog: DHE ciphers, gencert, FIPS, permission, ciphersRob Crittenden2016-03-011-0/+28
| | | | | | | | | | | | | | * Check for Apache user owner/group read permissions of NSS database * Update default ciphers to something more modern and secure * Fix test for DH cipher directive * Check for test and netstat before trying to use them * Don't ignore NSSProtocol when NSSFIPS is enabled Based on patch by Matthew Harmsen <mharmsen@redhat.com> * Use proper shell syntax to avoid creating /0 * tests: Centralize the openssl ciphers flags when comparing * Basic test case for DHE cipher negotiation * Remove -DH from test strings, duplicate test, fix test * Add server support for DHE ciphers.
* Update CL SIGHUP, NSSProxyNickname, SNI alert, FakeBasicAuthRob Crittenden2016-01-191-0/+14
| | | | | | | | | | | - Drop the check that NSSProxyNickname be required - Add basic reverse proxy test case - Don't send SSL alert on SNI lookup failure - Fail for colons in credentials with FakeBasicAuth - Always call SSL_ShutdownServerSessionIDCache() in ModuleKill - Document some python dependencies needed by make check - Add cipher test for ECDH+aRSA - Quote gcm and sha384 config values when comparing them
* Become 1.0.12Rob Crittenden2015-10-021-0/+1
|
* Update changelog with reverse proxy SNI and whitespace cleanupRob Crittenden2015-10-021-0/+6
|
* Update ChangeLog, fix frees, build Apache 2.2, autoconfRob Crittenden2015-10-021-0/+10
|
* Update changelog with SNI, SECURE_RENEG, hintsRob Crittenden2015-10-021-0/+5
|
* Update changelog with memory, SHA384 and OpenSSL ciphersRob Crittenden2015-10-021-0/+7
|
* Update ChangeLog with doc, compiler warning and cipher fixesRob Crittenden2015-10-021-0/+7
|
* Update ChangeLog with some recent updatesRob Crittenden2015-07-271-0/+8
| | | | | | | * Add RenegBufferSize option (#1214366) * Add support for TLS Session Tickets (RFC 5077) * Fix logical AND support in OpenSSL cipher compatibility (CVE-2015-3276)
* Add compatibility for mod_ssl-style cipher definitionsRob Crittenden2014-12-021-0/+6
| | | | | | | | - Add Camelia ciphers - Remove Fortezza ciphers - Add TLSv1.2-specific ciphers Resolves BZ: #862938
* Initialize cipher list when re-negotiating handshake.Rob Crittenden2014-11-211-0/+4
| | | | | | | | | If an NSSCipherSuite is defined in a location or directory then we re-do the SSL handshake. The cipher list wasn't being initialized to PR_FALSE so changes are good that all ciphers would be enabled, not just the ones in the local NSSCipherSuite setting. Resolves BZ 1165408
* Completely remove support for SSLv2Rob Crittenden2014-11-121-0/+3
|
* Add support for sqlite NSS databasesRob Crittenden2014-10-281-2/+5
| | | | | | | | | | | | We do a chdir() to the NSS database location so that libnssckbi.so is available when the database is opened. Strip off a sql: prefix if one is available. This allows the new sqlite format to work. Add an additional test pass configuring NSS using the sqlite format. This requires a bit of a hack to pass in the value to python but it will work for now. Resolves: #1057650
* Add stokos@suse.de to AUTHORS and ChangelogRob Crittenden2014-10-281-0/+3
|
* Become 1.0.10Rob Crittenden2014-10-171-0/+5
|
* Apache 2.4 compatibility changesRob Crittenden2014-02-211-0/+1
|
* Update Changelog and AUTHORSRob Crittenden2014-02-211-0/+38
|
* * Don't use memcpy as it may operate on overlapping memory (#669118)rcritten2011-01-121-0/+4
| | | | Patch ported from mod_ssl by Stephen Gallagher <sgallagh@redhat.com>
* Bring up to date.rcritten2010-09-221-1/+26
|
* 2010-05-14 Rob Crittenden <rcritten@redhat.com>rcritten2010-05-141-0/+9
| | | | | | | | | | * Ignore SIGHUP in nss_pcache (#591889). Contributed by Joshua Roys <roysjosh@gmail.com> 2010-05-13 Rob Crittenden <rcritten@redhat.com> * Compare CN value of remote host with requested host in reverse proxy. * Add configuration option to disable this, defaulting to on. (#591224) * Based on patch from Joshua Roys <roysjosh@gmail.com
* Bring up-to-date to mod_nss 1.0.8rcritten2008-07-211-0/+33
|
* The error message was wrong if NSSPassPhraseHelper pointed to arcritten2007-06-071-0/+7
| | | | | | non-existant file. Don't require a password file AND NSSPassPhraseHelper. Only the helper is required.
* Populate the changelog.rcritten2007-06-011-0/+80
|
* Initial import of mod_nssrcritten2005-05-171-0/+0
generated by cgit (git 2.34.1) at 2025-12-31 05:00:35 +0000