Commit Graph

68 Commits (28dfdedc653bd2977eb60e84e2f582e07eb37708)

Author SHA1 Message Date
Matthew Wild 32d3713a7a mod_tls: Fix log statement (thanks Zash) 14 years ago
Matthew Wild 2d8a08de12 mod_tls: Fix for components to more reliably inherit SSL settings from their parenthost (thanks Link Mauve) 15 years ago
Matthew Wild e3c845abcf mod_tls: Drop 'TLS negotiation started for ...' to debug level from info 15 years ago
Matthew Wild 2f3b7c048e mod_tls: Drop 'TLS negotiation started for ...' to debug level from info 15 years ago
Waqas Hussain 86eb430400 mod_tls: Let hosts without an 'ssl' option inherit it from their parent hosts. 15 years ago
Matthew Wild 8e91da96f8 mod_tls: Pass the hostname rather than host session to certmanager.create_context() (thanks darkrain) 15 years ago
Matthew Wild c6045f3c70 certmanager, hostmanager, mod_tls: Move responsibility for creating per-host SSL contexts to mod_tls, meaning reloading certs is now as trivial as reloading mod_tls 15 years ago
Matthew Wild 16fa172b23 mod_tls: Remove extraneous flag to starttls() for s2sout connecections 16 years ago
Matthew Wild 67a0c4e8db mod_tls: Add s2s_allow_encryption option which, when set to false, disabled TLS for s2s 16 years ago
Matthew Wild 2bc0606453 Update copyright headers for 2010 16 years ago
Matthew Wild 8a18a4cc28 mod_tls: Only negotiate TLS on outgoing s2s connections if we have an SSL context (thanks Flo...) 16 years ago
Waqas Hussain b4b0f22159 mod_tls: Ban TLS after auth, not before. 16 years ago
Waqas Hussain 3ca0b28b54 mod_tls: Fixed traceback during S2S TLS (nil global access). 16 years ago
Matthew Wild 8d64ab2d1f mod_tls: Refactor to simplify detection of whether we can do TLS on a connection 16 years ago
Matthew Wild f7573ef4ff mod_tls: Don't offer TLS on hosts that don't have any certs 16 years ago
Waqas Hussain 1445574fd3 s2smanager, mod_compression, mod_tls: Changed event.session to event.origin for s2s-stream-features event for consistency. 16 years ago
Waqas Hussain 4233a8ccf5 mod_tls: Hook stream-features event using new events API. 16 years ago
Waqas Hussain 75459a7ca5 mod_tls: Cleanup. 16 years ago
Waqas Hussain 4df5e22f1e mod_tls: Fixed an extra :up() in s2s stream feature generation. 16 years ago
Waqas Hussain 91d9bb9a66 mod_tls: Remove origin type check when TLS is requested (thanks MattJ). 16 years ago
Waqas Hussain 2bfb7b55ed mod_tls: Respond with proper error when TLS cannot be negotiated. 16 years ago
Waqas Hussain eeca1d016a mod_tls: Inlined some code. 16 years ago
Waqas Hussain 23cbd2c45e mod_tls: Merged duplicate code. 16 years ago
Waqas Hussain 9d2742cc9a mod_tls: Switched to new events API. 16 years ago
Waqas Hussain bdc87e4345 mod_tls: Slight refactoring. 16 years ago
Waqas Hussain 6d21bd8cf4 mod_tls: Don't advertise TLS after authentication. 16 years ago
Matthew Wild 0a591ad33a mod_tls: Remove some redundant variable declarations 16 years ago
Matthew Wild b870a3fe51 mod_tls: Set the sslctx on outgoing connections (possibly the cause of outgoing s2s connections not being encrypted) 16 years ago
Matthew Wild f8a121c33b mod_tls: Update for new server SSL syntax 16 years ago
Matthew Wild 0c333f589c mod_tls: Set the sslctx on outgoing connections (possibly the cause of outgoing s2s connections not being encrypted) 16 years ago
Matthew Wild d578bb8ff2 mod_tls: Switch to : syntax for connection methods 16 years ago
Matthew Wild 4bfd2f37a9 mod_tls: Don't offer TLS on hosts that don't have any certs 16 years ago
Waqas Hussain db783f4a21 mod_tls: Fixed an extra :up() in s2s stream feature generation. 16 years ago
Waqas Hussain 2e726abc77 mod_tls: Respond with proper error when TLS cannot be negotiated. 16 years ago
Matthew Wild a3472930c0 mod_tls: Offer the host-specific cert (when there is one) to incoming c2s/s2s connections, fixes #30 (thanks, albert, Flo, johnny, and all who nagged me :) ) 16 years ago
Matthew Wild ed822f1ef0 mod_tls: Don't try to start TLS if we can't actually do it (thanks Florob) 16 years ago
Matthew Wild fd3ddd9222 mod_tls: Catch s2s-stream-features and add starttls feature if possible 16 years ago
Matthew Wild f13dfe04be mod_tls: Mark sessions as not secure when negotiating outward TLS, so they get marked secure later. Fixes missing (encrypted) for outgoing sessions in s2s:show(). Thanks albert, McKael :) 16 years ago
Matthew Wild 9ea966ae38 mod_tls: require_s2s_encryption -> s2s_require_encryption 16 years ago
Matthew Wild de057a2b2b require_encryption deprecated, use c2s_require_encryption instead 16 years ago
Matthew Wild 57d6a05e83 mod_tls: Mark starttls feature as <required/> if require_s2s_encryption is enabled 16 years ago
Matthew Wild 6e6adedce2 mod_tls: Mark session as not secure before negotiating TLS 16 years ago
Matthew Wild 0737347176 mod_tls: Only advertise TLS if the server told us which host they are connecting to 16 years ago
Matthew Wild c6ec71bee0 mod_tls: :up() out of the starttls tag in stream:features 16 years ago
Paul Aurich 02d5993f79 Minor changes; outgoing TLS works. 16 years ago
Matthew Wild 2f436e1b7f mod_tls: Advertise and handle TLS for s2s connections 16 years ago
Tobias Markmann cbf4a37b6f Another unwanted spaces at the end of a line. 17 years ago
Waqas Hussain b3d4c0ec73 mod_tls: Updated to use module:get_option instead of configmanager 17 years ago
Matthew Wild 118883d655 Remove version number from copyright headers 17 years ago
Matthew Wild ff5a8142da mod_tls: Add <required/> to stream feature when TLS is required 17 years ago