pkgsrc/www/ap-ssl/distinfo

$NetBSD: distinfo,v 1.19 2003/11/02 05:38:56 grant Exp $

SHA1 (mod_ssl-2.8.16-1.3.29.tar.gz) = c098dfffd81a6e5959f414c5c3eec291f58d3e44
Size (mod_ssl-2.8.16-1.3.29.tar.gz) = 754325 bytes
SHA1 (patch-aa) = 6b66b8d9e8bd03613376dca3b4e0dad3a2e7ed15
SHA1 (patch-ab) = 936bc956761559c51263cf7645d135abe40069cd
SHA1 (patch-ac) = ebdd43a3ce98fbd20ea515e06eb7f41d440cd294
Updated ap-ssl to 2.8.16. Major changes since 2.8.15: ) Upgraded to Apache 1.3.29 ) Avoid memory corruption in certificate handling caused by a heap memory double-freeing situation. ) Allow "HTTPS" variable to be passed through by suEXEC. ) Clear the OpenSSL error code in pass phrase reading code to workaround the following situation: multiple keys, all with different passphrases -- entering the correct pass phrase at each prompt leads to an OpenSSL error message after the last prompt. ) Reverted the recent change where ap_cleanup_for_exec() called ap_kill_alloc_shared(). This caused nasty side-effects in other processes and is not necessary at all (because shared memory segments are not inherited across exec). ) mod_ssl was checking the OpenSSL error reason code against SSL_R_HTTP_REQUEST and concluded the result is an SSL error. Since OpenSSL reason codes are not unique, this isn't always the case. It now additionally checks that the library is the SSL library. 2003-11-02 06:38:56 +01:00			$NetBSD: distinfo,v 1.19 2003/11/02 05:38:56 grant Exp $
+ move the distfile digest/checksum value from files/md5 to distinfo + move the patch digest/checksum values from files/patch-sum to distinfo 2001-04-17 14:12:16 +02:00
Updated ap-ssl to 2.8.16. Major changes since 2.8.15: ) Upgraded to Apache 1.3.29 ) Avoid memory corruption in certificate handling caused by a heap memory double-freeing situation. ) Allow "HTTPS" variable to be passed through by suEXEC. ) Clear the OpenSSL error code in pass phrase reading code to workaround the following situation: multiple keys, all with different passphrases -- entering the correct pass phrase at each prompt leads to an OpenSSL error message after the last prompt. ) Reverted the recent change where ap_cleanup_for_exec() called ap_kill_alloc_shared(). This caused nasty side-effects in other processes and is not necessary at all (because shared memory segments are not inherited across exec). ) mod_ssl was checking the OpenSSL error reason code against SSL_R_HTTP_REQUEST and concluded the result is an SSL error. Since OpenSSL reason codes are not unique, this isn't always the case. It now additionally checks that the library is the SSL library. 2003-11-02 06:38:56 +01:00			`SHA1 (mod_ssl-2.8.16-1.3.29.tar.gz) = c098dfffd81a6e5959f414c5c3eec291f58d3e44`
			`Size (mod_ssl-2.8.16-1.3.29.tar.gz) = 754325 bytes`
Update ap-ssl to 2.8.5 from the mod_ssl-2.8.5-1.3.22 distribution. Changes from version 2.8.4 include: ) Upgraded to Apache 1.3.22 ) Fixed check whether server certificate wildcard CommonName (CN) matches the configured server name. *) Fixed buffer overflow. 2001-10-17 21:17:11 +02:00			`SHA1 (patch-aa) = 6b66b8d9e8bd03613376dca3b4e0dad3a2e7ed15`
allow 'mkcert' to work on Solaris by using ${SH} rather than /bin/sh. 2002-12-03 15:31:32 +01:00			`SHA1 (patch-ab) = 936bc956761559c51263cf7645d135abe40069cd`
Update to 2.8.14: Changes with mod_ssl 2.8.14 (18-Mar-2002 to 21-Mar-2003) ) Fixed logic in the destruction of a temporary certificate structure and this way avoid a crash due to freeing NULL object. ) Removed one newly introduced X509_free() call in the context of SSL_get_certificate(), because this function does not increment a reference count (although SSL_get_peer_certificate() does). ) Fixed hash-table based shared memory session cache (shmht) implementation by making sure that the underlying hash table library does not crash if memory cannot be allocated. Changes with mod_ssl 2.8.13 (23-Oct-2002 to 18-Mar-2003) ) Always enforce RSA blinding on RSA private keys in order to be resistent to timing attacks. ) Added timeout also to the "pre-sucking" of the trailing data in POST request handling. ) Correctly shutdown shared memory pools on fork+exec situations. ) Bugfix SSL client certificate verification: OpenSSL was not informed with SSL_set_verify_result(ssl, X509_V_OK) in case mod_ssl forced the verification to be ok. ) Consistently use OPENSSL_free() instead of plain free() to deallocate memory chunks allocated inside OpenSSL. *) Fixed various memory leaks related to X509 certificates. New patch-ac sent to maintainer. 2003-04-10 10:36:41 +02:00			`SHA1 (patch-ac) = ebdd43a3ce98fbd20ea515e06eb7f41d440cd294`