summaryrefslogtreecommitdiffstats
path: root/Makefile.am
Commit message (Collapse)AuthorAgeFilesLines
* Don't run live webserver tests as the root userRob Crittenden2015-10-021-1/+5
| | | | | Apache doesn't like running as root and this ends up hanging the build process.
* Modernize autotools configuration slightly, add config.hRob Crittenden2015-10-021-3/+1
| | | | | | | | | | | I need to generate config.h because Apache ships its own autotools-generated config.h which redefines a lot of variables like PACKAGE_NAME, PACKAGE_TARBALL, etc. By having my own configh I can reset things before the compiler complains. The downside is that compile-time options are hidden in a config file instead of being defined on the gcc command-line.
* Add test suite for SNIRob Crittenden2015-10-021-2/+10
| | | | | | | | | | | | | | | | | | | | | | | | | python for OpenSSL is in quite a sad state with several competing mid-level implementations which provide different feature sets. The httplib client provides access to the negotiated cipher and protocol but not SNI (and it has lousy hostname checking). The urllib3 client provides SNI and is generally better but doesn't give any details on the connection. So I'm using both. The original one is used for basic server testing and the urllib3 one is used just for SNI testing. Also: - Indent the test configuration to make it more readable - Add separate config file for SNI testing - Add a CGI configuration and script to test CGI variables - Change client cipher test to use AES256-SHA instead of RC4 - Add a commented-out valgrind option in start for future debuggers - Change the VirtualServers to *:port and use ServerName - Add per-VH document roots so SNI can be more easily tested
* Change way test_cipher is built to avoid parallel build problemsRob Crittenden2015-02-271-2/+1
| | | | | | | | | I originally just had nss_engine_cipher as an extra ld option but this didn't enforce that nss_engine_cipher was already built by the time test_cipher was. I instead added nss_engine_cipher to the SOURCES line and dropped the extra linkage. Build failure seen on aarch64 in BZ 1196222
* Become 1.0.11Rob Crittenden2014-12-021-1/+1
|
* Add compatibility for mod_ssl-style cipher definitionsRob Crittenden2014-12-021-4/+9
| | | | | | | | - Add Camelia ciphers - Remove Fortezza ciphers - Add TLSv1.2-specific ciphers Resolves BZ: #862938
* Add support for sqlite NSS databasesRob Crittenden2014-10-281-0/+5
| | | | | | | | | | | | We do a chdir() to the NSS database location so that libnssckbi.so is available when the database is opened. Strip off a sql: prefix if one is available. This allows the new sqlite format to work. Add an additional test pass configuring NSS using the sqlite format. This requires a bit of a hack to pass in the value to python but it will work for now. Resolves: #1057650
* Become 1.0.10Rob Crittenden2014-10-171-1/+1
|
* Become 1.0.9Rob Crittenden2014-02-261-1/+5
| | | | | | Add a DIST target to make it easier to tar things up. Rename the make target test to check
* Add some basic functional tests.Rob Crittenden2014-02-261-0/+21
| | | | | | | | | | | | | | | | | | | | | | | | | This tests in an in-tree Apache instance using the local libmodnss.so shared library, so no pre-installation is necessary. The tests use python-nose and a hacked python-requests library. It is hacked so I can obtain the negotiated cipher and protocol as well as pass a few other things into it. Tests right now are limited to GET requests. A new user certificate for 'beta' was added to gencert to do pass/fail access control testing. The basic process of the tests are: - run setup.sh which sets up a new instance with createinstance.sh and does some variable substitution. - nosetests -v I picture multiple test "suites" of different configurations. Right now there is only one. A template file is provided for each suite. Tested only on Fedora 20 right now.
* Install nss_pcache.8 man pageRob Crittenden2014-02-211-0/+1
|
* Add man page for gencertrcritten2011-02-031-0/+7
|
* Fix bug in disabling mod_ssl when installing mod_nss with 'make install'rcritten2008-08-261-1/+1
|
* No need to link with softokn3rcritten2008-05-161-1/+1
| | | | 446101
* Add support for Elliptical Curve Cryptography (ECC). This is disabledrcritten2006-03-021-1/+0
| | | | by default. To enable it, pass --enable-ecc to configure.
* Changes to allow the mod_nss to work in Apache 2.2.0. Based on a patchrcritten2006-01-041-1/+3
| | | | | | | from Oden Eriksson. The conditional to determine which API to use is a bit weak at the moment but it works with Apache 2.0.54 and 2.2.0.
* Add support for seeding the NSS Random Number Generator. This addsrcritten2005-10-031-1/+1
| | | | | a new directive, NSSRandomSeed based on the mod_ssl SSLRandomSeed directive.
* Make SSL2 an optional protocol, disabled by default.rcritten2005-09-131-1/+2
|
* Add libsoftokn3.so for nss_pcache.rcritten2005-07-211-1/+1
|
* Remove message about co-existing with mod_ssl, that works ok now.rcritten2005-06-031-9/+1
| | | | Also fix nasty typo.
* Changed function and configuration names so mod_nss can peacefullyrcritten2005-05-311-10/+10
| | | | co-exist with mod_ssl.
* Add support for apr-config.rcritten2005-05-231-2/+49
| | | | | | | Print out some nice notes alerting the user to verify that mod_ssl is disabled. Tell the user about gencert so they can generate their own self-signed certificate.
* Initial import of mod_nssrcritten2005-05-171-0/+31
generated by cgit (git 2.34.1) at 2024-06-10 22:10:11 +0000