Kaspar Brand a6a324f9bb Streamline ephemeral key handling: ...

- drop support for ephemeral RSA keys (only allowed/needed
  for export ciphers)

- drop pTmpKeys from the per-process SSLModConfigRec, and remove
  the temp key generation at startup (unnecessary for DHE/ECDHE)

- unconditionally disable null and export-grade ciphers by always
  prepending "!aNULL:!eNULL:!EXP:" to any cipher suite string

- do not configure per-connection SSL_tmp_*_callbacks, as it is
  sufficient to set them for the SSL_CTX

- set default curve for ECDHE at startup, obviating the need
  for a per-handshake callback, for the time being (and also
  configure SSL_OP_SINGLE_ECDH_USE, previously left out)

For additional background, see
https://mail-archives.apache.org/mod_mbox/httpd-dev/201309.mbox/%3C52358ED1.2070704@velox.ch%3E


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1526168 13f79535-47bb-0310-9956-ffa450edef68

2013-09-25 12:52:35 +00:00

..

cgi-examples

Added a warning that these scripts leak information.

2012-12-17 21:44:32 +00:00

conf

use IANA registered mime type application/font-woff for woff fonts

2013-07-24 19:42:53 +00:00

docroot

…

error

…

icons

Change GIF icons to use a different palette, for more smoothness.

2013-05-04 12:51:33 +00:00

log-message-tags

Borrow a fix from mod_authnz_fcgi:

2013-09-21 18:48:20 +00:00

man

xforms

2013-07-06 21:48:19 +00:00

manual

Streamline ephemeral key handling:

2013-09-25 12:52:35 +00:00

doxygen.conf

…

STATUS

More updates to the STATUS/TODO list

2013-02-25 21:08:41 +00:00