summaryrefslogtreecommitdiffstats
path: root/usr.sbin/httpd/src/modules/ssl/ssl_engine_init.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
* this commit is really florian@'s, since he's the one who made removalhenning2014-04-221-1138/+0
| | | | | | | | of our forked apache possible by his work on nginx and slowcgi, but he doesn't want it - so it is my pleasure to tedu it. I spent so much work on chroot in it 10 years ago - and am very happy to see it go now, nginx is a far better choice today. Bye bye, Apache, won't miss you.
* Disable SSL compression in order to mitigate CRIME attacks. Addjsing2013-07-161-1/+3
| | | | | | | an SSLCompression option so that it can be turned back on, however on this is currently a no-op due to the compile options for libssl. Requested by and ok djm@
* Enable ECDHE support in httpd via a SSLECDHCurve option. This specifies thejsing2013-07-161-1/+18
| | | | | | | | named curve to use when generating ephemeral EC keys for an ECDHE-based cipher suite, or can be set to `none' to disable. The default is to use a prime256v1 curve. yay^Wok djm@
* Define HonorCipherOrder as a FLAG (rather than as a TAKE1), so that itjsing2013-07-161-2/+2
| | | | | | | works correctly as a boolean on/off flag. While here, rename the variable so that it is consistent with existing naming scheme. ok otto@ djm@
* introduce HonorCipherOrder to use the server's order of preference of ciphersotto2013-07-111-1/+3
| | | | ok djm@ guenther@
* allow httpd to build if sslv2 is disabled, ok guenther@sthen2012-07-071-5/+2
|
* cleanup and unifdef'ing, no change in object fileshenning2005-02-091-3/+1
| | | | work by Daniel Ouellet <daniel@presscom.net>
* kill more dead code, mostly inside #ifdef SOMENONSENSEONSTUPIDOSEShenning2004-12-061-27/+2
| | | | | | joint work by Michael Knudsen <e@molioner.dk> and Daniel Ouellet <daniel@presscom.net> with my input no change in binaries
* big time httpd cleanuphenning2004-12-021-11/+1
| | | | | | this diff removes a lot of #ifdef'd stuff that is irrelevant for us. done by Daniel Ouellet after my advice. tested by many, ok miod@
* merge changes from mod_ssl 2.8.20, in particular a fix for CAN-2004-0885henning2004-10-201-1/+9
|
* merge apache 1.3.29 and mod_ssl 2.8.16henning2003-11-171-2/+2
| | | | ok brad@
* use RSA key blinding code from mod_ssl 2.8.13. differences to our own fixhenning2003-03-191-3/+3
| | | | | that was already in are purely cosmetical, but this will make the future merge of mod_ssl 2.8.13 easier.
* Add RSA blinding for private keys. markus@ ok.ho2003-03-141-1/+15
|
* merge apache 1.3.27 and mod_ssl 2.8.11henning2002-10-071-1/+7
|
* mergehenning2002-07-191-8/+16
|
* don't try things we are not able to do if chrooted on graceful restarts.henning2002-07-151-2/+4
| | | | this does not mean a chrooted httpd survives a graceful restart (yet).
* fix half baked abortion of a merge to 1.3.23 and takebeck2002-03-291-6/+13
| | | | tree to apache-1.3.24+mod+ssl2.8.8
* merge mod_ssl 2.8.7brad2002-02-281-14/+13
| | | | | -- Ok'd by: beck@
* Apache 1.3.19+mod_ssl 2.8.1 merge - also adds shared build of mod_headersbeck2001-03-291-1/+17
| | | | and mod_expire
* apache 1.3.14 + mod_ssl 2.7.1 mergebeck2000-12-151-0/+36
|
* cleanupbeck2000-08-191-5/+1
|
* Bypass key generation if no SSL is not enabled in any (virtual) servers.beck2000-08-191-0/+24
| | | | made fun and entertaining by the way apache initializes modules and DSO's
* merge mod_ssl 2.6.6brad2000-08-151-0/+2
|
* Mod_SSL 2.6.5 - from brad@, thanks.beck2000-07-211-0/+8
|
* mod_ssl 2.6.4 mergebeck2000-06-301-3/+9
| | | | From brad@
* apache 1.3.12 + mod_ssl 2.6.2 mergebeck2000-03-191-5/+14
|
* Apache 1.3.11 + mod_ssl 2.5.0 mergebeck2000-01-251-13/+10
|
* mod_ssl 2.4.9 mergebeck1999-12-081-1/+7
|
* Mod_SSL 2.4.8 mergebeck1999-12-081-52/+179
|
* Apache 1.3.9 + Mod_ssl 2.4.2 - now builds with apaci nastiness.beck1999-09-291-89/+416
|
* proper URL for fetching package; evanc@concer.toderaadt1999-03-131-1/+1
|
* don't fatal out on init if RSA doesn't work, so as not to die if an RSAbeck1999-03-071-0/+9
| | | | libssl isn't installed and we only want to do http
* mod_ssl-2.2.3-1.3.4 (will require libssl-1.1 for https to work, butbeck1999-03-011-0/+550
mostly harmless otherwise).