summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Fix some warnings due to wrong datatype in format string.olavmrk2009-11-111-9/+14
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@70 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Make sure that redirect URLs doesn't contain control characters.olavmrk2009-11-113-0/+45
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@69 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Support replay of multipart/form-data POST requestsmanu@netbsd.org2009-11-113-96/+489
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@68 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Replay POST requets after been sent to the IdPmanu@netbsd.org2009-11-097-65/+614
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@67 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Version 0.2.4olavmrk2009-08-113-1/+15
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@66 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Do not ever send Cache-Control: no-cahche to IE, as it breaks filemanu@netbsd.org2009-08-111-6/+23
| | | | | | | downloads. git-svn-id: https://modmellon.googlecode.com/svn/trunk@65 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Disable local session when logout starts.olavmrk2009-08-101-0/+8
| | | | | | | Mark the local session as logged out as soon as logout starts, in case the IdP doesn't respond for some reason. git-svn-id: https://modmellon.googlecode.com/svn/trunk@64 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Version 0.2.3olavmrk2009-08-073-1/+13
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@63 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Add contributors-section to readme.olavmrk2009-08-071-0/+13
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@62 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Properly calculate session expiration.olavmrk2009-08-071-23/+22
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@61 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Change apr_uintptr_t to apr_size_t.olavmrk2009-08-071-1/+1
| | | | | | | Older versions of APR does not define apr_uintptr_t. apr_size_t should be more or less equivalent in this place. git-svn-id: https://modmellon.googlecode.com/svn/trunk@60 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Update debian package version.olavmrk2009-08-071-0/+6
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@59 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Bump to 0.2.2manu@netbsd.org2009-06-152-1/+7
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@58 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Add MellonOrganization(Name|DisplayName|URL) for filling themanu@netbsd.org2009-06-154-2/+158
| | | | | | | <Organization> element of autogenerated metadata git-svn-id: https://modmellon.googlecode.com/svn/trunk@57 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Update am_getfile to use apr_file_read_full.olavmrk2009-06-141-3/+4
| | | | | | | | | This chages am_getfile to use apr_file_read_full instead of apr_file_read to avoid a potential problem if a signal is received while reading the file data. A signal could cause the apr_file_read to return less than the requested number of bytes. git-svn-id: https://modmellon.googlecode.com/svn/trunk@56 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Strip "-----BEGIN CERTIFICATE-----", "-----END CERTIFICATE-----", and anymanu@netbsd.org2009-06-142-2/+13
| | | | | | | | non graphic character (space, CR) from the certificate presented in autogenerated metadata. git-svn-id: https://modmellon.googlecode.com/svn/trunk@55 a716ebb1-153a-0410-b759-cfb97c6a1b53
* When generating metadata, strip leading and trailing content around themanu@netbsd.org2009-06-061-3/+24
| | | | | | | certificate, as it will confuse XML parsers if it contains [<>&]. git-svn-id: https://modmellon.googlecode.com/svn/trunk@54 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Bump to 0.2.1manu@netbsd.org2009-06-052-1/+7
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@53 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Doc updatemanu@netbsd.org2009-06-051-0/+10
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@52 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Add a MellonSamlResponseDump option to dump the SAML authentication response in manu@netbsd.org2009-06-015-10/+63
| | | | | | | the environement git-svn-id: https://modmellon.googlecode.com/svn/trunk@51 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Add MellonSessionDump option, to make the session available in the environmentmanu@netbsd.org2009-05-254-2/+35
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@50 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Add support for IdP initiated SOAP single logout.manu@netbsd.org2009-05-154-24/+138
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@49 a716ebb1-153a-0410-b759-cfb97c6a1b53
* typomanu@netbsd.org2009-05-131-1/+1
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@48 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Version 0.2.0.olavmrk2009-05-133-1/+20
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@47 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Documentation updatemanu@netbsd.org2009-05-121-7/+37
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@46 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Fix mutex leak on NetBSD: APR takes care of destroying mutex and sharedmanu@netbsd.org2009-05-121-40/+0
| | | | | | | | | | memory stored in pools. By doing it in a cleanup hook, we do it twice. NetBSD's libpthread detects that and kills apache, preventing subsequent mutexes cleanups. Removing the cleanup hook fixes the leak. git-svn-id: https://modmellon.googlecode.com/svn/trunk@45 a716ebb1-153a-0410-b759-cfb97c6a1b53
* - Support for multiple IdPmanu@netbsd.org2009-05-125-73/+473
| | | | | | | | | - IdP discovery service - add a dimple built-in IdP discovery mechanism: send HTTP GET on ProviderID URL. If we get HTTP 200, the IdP is selected git-svn-id: https://modmellon.googlecode.com/svn/trunk@44 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Add support for auto-generating SP metadata.olavmrk2009-05-063-0/+187
| | | | | | Thanks to Emmanuel Dreyfus for this patch. git-svn-id: https://modmellon.googlecode.com/svn/trunk@43 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Version 0.1.1olavmrk2009-03-063-1/+16
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@42 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Handle logout-request while logged out.olavmrk2009-03-061-1/+4
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@41 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Add a MellonSecureCookie setting to enforce Secure + HttpOnly flags formanu@netbsd.org2009-03-024-1/+33
| | | | | | | | session cookies. git-svn-id: https://modmellon.googlecode.com/svn/trunk@40 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Version 0.1.0.olavmrk2008-11-112-1/+7
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@39 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Updated NEWS file in preparation of version 0.1.0.olavmrk2008-11-111-0/+18
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@38 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Document MellonSPCertFile and MellonIdPCAFile options in the README file.olavmrk2008-11-111-1/+14
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@37 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Add MellonDefaultLoginPath option.olavmrk2008-11-114-12/+29
| | | | | | | | | | This option is used to decide which page the user should be redirected to if IdP-initiated SSO is used. Thanks to Emmanuel Dreyfus for this patch. git-svn-id: https://modmellon.googlecode.com/svn/trunk@36 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Use lasso_server_new_from_buffer if available.olavmrk2008-11-105-7/+108
| | | | | | | | | | | | Recent versions of Lasso supports loading the SP metadata, certificate and private key from memory. This patch changes mod_mellon to use this function if it is available. This makes it possible to store the SP private key readable only from root. Thanks to Emmanuel Dreyfus for this patch. git-svn-id: https://modmellon.googlecode.com/svn/trunk@35 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Add IdP initiated SSO support.olavmrk2008-11-102-47/+62
| | | | | | | | This patch adds support for IdP initiated SSO, and also creates more resistance to DOS attacks. git-svn-id: https://modmellon.googlecode.com/svn/trunk@34 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Add two missing configuration merges from CA cert and SP cert support.olavmrk2008-11-101-0/+7
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@33 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Adjust log level of two messagesolavmrk2008-10-271-2/+2
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@32 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Add support for IdP CA certificate and SP certificate.olavmrk2008-10-273-2/+31
| | | | | | | Thanks to Emmanuel Dreyfus for this patch. git-svn-id: https://modmellon.googlecode.com/svn/trunk@31 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Add support for BSD make.olavmrk2008-10-271-1/+1
| | | | | | | Thanks to Emmanuel Dreyfus for this patch. git-svn-id: https://modmellon.googlecode.com/svn/trunk@30 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Give a more helpful error message if the there is a problem with SP metadata.olavmrk2008-10-201-0/+7
| | | | | | | Thanks to Emmanuel Dreyfus for this patch. git-svn-id: https://modmellon.googlecode.com/svn/trunk@29 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Handle errors when locking session mutex.olavmrk2008-10-202-3/+26
| | | | | | | | | | | In some cases it is possible that the mutex lock operation fails. This makes the server return a 500 Internal Server Error in those cases, instead of crashing. Thanks to Emmanuel Dreyfus for the patch. git-svn-id: https://modmellon.googlecode.com/svn/trunk@28 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Set permissions on global mutex after creation.olavmrk2008-10-201-0/+17
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@27 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Update version to 0.0.7olavmrk2008-07-012-1/+7
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@26 a716ebb1-153a-0410-b759-cfb97c6a1b53
* urldecode ReturnTo url in SP initiated logout.olavmrk2008-07-011-0/+7
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@25 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Added previous change to NEWS file.olavmrk2007-12-111-0/+2
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@24 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Fixed handling of multiple AttributeValue elements in response.olavmrk2007-12-111-1/+1
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@23 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Increased maximum Lasso session size.olavmrk2007-10-262-1/+4
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@22 a716ebb1-153a-0410-b759-cfb97c6a1b53
* Fixed a memory leak in am_auth_new_ticket.olavmrk2007-10-012-3/+2
| | | | git-svn-id: https://modmellon.googlecode.com/svn/trunk@21 a716ebb1-153a-0410-b759-cfb97c6a1b53