summary refs log tree commit diff
path: root/tls_server.c
diff options
context:
space:
mode:
authorJune McEnroe <june@causal.agency>2020-07-28 11:45:40 -0400
committerJune McEnroe <june@causal.agency>2020-07-31 12:12:53 -0400
commitc5854ce8d90fbb87cff76637c25d1675e5692ed0 (patch)
treedbe7e56c0eee6c592c3c96d9eee6075d45392571 /tls_server.c
parenttls: Use SSL_CTX_get0_param and X509_STORE_get0_param (diff)
downloadlibretls-c5854ce8d90fbb87cff76637c25d1675e5692ed0.tar.gz
libretls-c5854ce8d90fbb87cff76637c25d1675e5692ed0.zip
tls: Implement use_certificate_chain_mem
Based on ssl/ssl_rsa.c.
Diffstat (limited to 'tls_server.c')
0 files changed, 0 insertions, 0 deletions
 

generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-06-01 18:09:37 +0000


 


zx2c4.com/pipermail/cgit/2013-May/001393.html
   http://lists.zx2c4.com/pipermail/cgit/2014-January/001904.html

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>



2014-01-17filter: don't forget to reap the auth filterJason A. Donenfeld

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>



2014-01-17cgit.c: free tmp variableJason A. Donenfeld

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>



2014-01-17Switch to exclusively using global ctxLukas Fleischer

Drop the context parameter from the following functions (and all static
helpers used by them) and use the global context instead:

* cgit_print_http_headers()
* cgit_print_docstart()
* cgit_print_pageheader()

Remove context parameter from all commands

Drop the context parameter from the following functions (and all static
helpers used by them) and use the global context instead:

* cgit_get_cmd()
* All cgit command functions.
* cgit_clone_info()
* cgit_clone_objects()
* cgit_clone_head()
* cgit_print_plain()
* cgit_show_stats()

In initialization routines, use the global context variable instead of
passing a pointer around locally.

Remove callback data parameter for cache slots

This is no longer needed since the context is always read from the
global context variable.

Signed-off-by: Lukas Fleischer <cgit@cryptocrack.de>



2014-01-16auth: have cgit calculate login addressJason A. Donenfeld

This way we're sure to use virtual root, or any other strangeness
encountered.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>



2014-01-16auth: lua string comparisons are time invariantJason A. Donenfeld

By default, strings are compared by hash, so we can remove this comment.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>



2014-01-16authentication: use hidden form instead of refererJason A. Donenfeld

This also gives us some CSRF protection. Note that we make use of the
hmac to protect the redirect value.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>



2014-01-16auth: add basic authentication filter frameworkJason A. Donenfeld

This leverages the new lua support. See
filters/simple-authentication.lua for explaination of how this works.
There is also additional documentation in cgitrc.5.txt.

Though this is a cookie-based approach, cgit's caching mechanism is
preserved for authenticated pages.

Very plugable and extendable depending on user needs.

The sample script uses an HMAC-SHA1 based cookie to store the
currently logged in user, with an expiration date.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>



2014-01-16t0111: Additions and fixesLukas Fleischer

* Rename the capitalize-* filters to dump.* since they also dump the
  arguments.

* Add full argument validation to the email filters.

Signed-off-by: Lukas Fleischer <cgit@cryptocrack.de>



2014-01-16parsing.c: Remove leading space from committerLukas Fleischer