summaryrefslogtreecommitdiffstats
path: root/nss_engine_init.c
Commit message (Collapse)AuthorAgeFilesLines
...
* Close the proxy model socket so NSS can be shutdown gracefully. Alsorcritten2005-10-111-4/+14
| | | | | correct an error where the PKCS#11 slot isn't closed unless a the certificate key is obtained. This also affected NSS_Shutdown().
* Add support for seeding the NSS Random Number Generator. This addsrcritten2005-10-031-2/+8
| | | | | a new directive, NSSRandomSeed based on the mod_ssl SSLRandomSeed directive.
* Add proxy support to mod_nss. Most of the changes are related torcritten2005-09-291-34/+73
| | | | | | adding new configuration directives. For the others we need to initialize an NSS socket differently whether we will be acting as a client or a server.
* Make SSL2 an optional protocol, disabled by default.rcritten2005-09-131-5/+9
|
* Improve FIPS configuration:rcritten2005-09-081-11/+59
| | | | | | | | | - The NSS ciphers are enumerated to find those that are FIPS approved - This list of approved ciphers is compared to the NSSCipherSuite entry and those enabled, approved ciphers are configured. This way you aren't forced to use all of the FIPS ciphers (in case you don't want a 56-bit cipher enabled). - Only TLSv1 should be enabled.
* Add OCSP supportrcritten2005-09-061-3/+18
|
* Add a FIPS configuration option. This enables the FIPS internalrcritten2005-08-191-29/+84
| | | | | database module, configures for SSLv3 and TLSv1 and enables the 2 FIPS ciphers (and disables all the others).
* Also clean up the SSL Session ID Cache when shutting down.rcritten2005-08-041-3/+13
| | | | | | If we are using the forked model, use the MP version of the Session ID cache. Don't call PR_Cleanup(), this could cause problems.
* Properly clean up the SSL environment so NSS can be shut down gracefully.rcritten2005-08-041-4/+30
|
* Add NSS database prefix supportrcritten2005-06-291-6/+19
|
* Fix formatting and variable name in error message.rcritten2005-06-031-2/+2
|
* Changed function and configuration names so mod_nss can peacefullyrcritten2005-05-311-86/+89
| | | | co-exist with mod_ssl.
* When doing SSLVerifyCert require then we need to always require thercritten2005-05-241-1/+1
| | | | certificate to match what OpenSSL does.
* By default, don't start with an expired cert. Add optionrcritten2005-05-201-13/+16
| | | | | | SSLEnforceValid Cert on/off to allow one to start with a bad cert. Fix up some error messages and add in a missing cipher.
* Initial import of mod_nssrcritten2005-05-171-0/+984
generated by cgit (git 2.34.1) at 2025-09-27 17:18:57 +0000