mod_sslcrl Activity
Automatically updates and applies certificate revocation lists
Status: Inactive
Brought to you by:
pbuchbinder
Activity for mod_sslcrl
-
Pascal Buchbinder posted a comment on discussion Open Discussion
Hi First, ensure to compile against the correct OpenSSL API. All the errors relate to OpenSSL version 1.1 API. Looks like you are using a very old version (the very, very old Apache version also indicates this). Note: mod_sslcrl 1.14 might work. Second, ensure to link against the OpenSSL library, see https://modsslcrl.sourceforge.net/#build apxs -i -c mod_sslcrl.c -lcrypto
-
Hi First, ensure to compile against the correct OpenSSL API. All the errors relate to OpenSSL version 1.1 API. Looks like you are using a very old version (the very, very old Apache version also indicates this). Note: mod_sslcrl 1.14 might work. Second, ensure to link against the OpenSSL library, see https://modsslcrl.sourceforge.net/#build apxs -i -c mod_sslcrl.c -lcrypto
-
danni posted a comment on discussion Open Discussion
Hi, I have been doing some testing with mod_sslcrl 2.1 on Apache 2.4.6 running on Linux and I have some problems apache2]# apxs -i -c mod_sslcrl.c /usr/lib64/apr-1/build/libtool --silent --mode=compile gcc -std=gnu99 -prefer-pic -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic -DLINUX -D_REENTRANT -D_GNU_SOURCE -pthread -I/usr/include/httpd -I/usr/include/apr-1 -I/usr/include/apr-1 -c -o mod_sslcrl.lo...
-
Hi, I have been doing some testing with mod_sslcrl 2.1 on Apache 2.4.6 running on Linux and I have some problems apache2]# apxs -i -c mod_sslcrl.c /usr/lib64/apr-1/build/libtool --silent --mode=compile gcc -std=gnu99 -prefer-pic -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic -DLINUX -D_REENTRANT -D_GNU_SOURCE -pthread -I/usr/include/httpd -I/usr/include/apr-1 -I/usr/include/apr-1 -c -o mod_sslcrl.lo...
-
mod_sslcrl released /mod_sslcrl-2.1-src.tar.gz
-
2.1
-
UMR
-
delete
-
-
2.1
-
new build/test server
-
UMR while parsing HTTP response line
-
2020
-
mod_sslcrl 2.0 suports now OpenSSL API version 1.1. (but no longer OpenSSL 1.0.2 - use mod_sslcrl 1.14 as long as you use OpenSSL 1.0.2).
-
-
many thanks for sharing your findings
-
2.0
-
-
aling with trunk
-
final 2.0
-
align tests with trunk
-
openssl 1.1 test adaptions
-
openssl 1.0 api branch based on rel 1.14
-
openssl 1.1 api
-
proper sub-ca
-
norbert modified a comment on discussion Open Discussion
-- Double post --
-
Here is a list of other things which needs to be done to compile this mod on windows (Visual Studio Comunity Edition/Express 2017) 1) References to unistd.h need to be removed, and a reference to ioh added (and stdio.h?) 2) Reference to ws2tcpip.h needed to be added 3) I needed to readd old definitions of stdin etc https://stackoverflow.com/questions/30412951/unresolved-external-symbol-imp-fprintf-and-imp-iob-func-sdl2 4) I had to define WIN32_LEAN_AND_MEAN (this is by standard added to Desktop project...
-
Here is a list of other things which needs to be done to compile this mod on windows (Visual Studio Comunity Edition/Express 2017) 1) References to unistd.h need to be removed, and a reference to ioh added (and stdio.h?) 2) Reference to ws2tcpip.h needed to be added 3) I needed to readd old definitions of stdin etc https://stackoverflow.com/questions/30412951/unresolved-external-symbol-imp-fprintf-and-imp-iob-func-sdl2 4) I had to define WIN32_LEAN_AND_MEAN (this is by standard added to Desktop project...
-
Ok, Thank you I just wanted to know if there is a posibility for the update of mod_sslcrl, before 1.0.2 will be unsupported. I looked at the code and there is I think 5 issues where creation of structures was moved to openssl function + similar number of issues were for getting information from the structure you need to use apache function instead of accessing it directly But I'm not a C developer (nor did anything with Apache mods/ssl)...
-
Hi Norbert mod_sslcrl needs some code changes in order to support OpenSSL 1.1. I'll updated this topic when the new version becomes avaiable. Regards, Pascal
-
Hello Mod sslcrl currently runs against openssl version 1.0.2.xxx, however this version is only to be supported till end of 2019 The OpenSSL in version 1.1.1 is backward incompatible with version 1.1.1 (I thnik there are ~8 chnges/errors related to the fact that version 1.1. forces you to use methods for creation/destructions of object + maybe something more) Is there any plan to update mod_sslcrl to use version 1.1.1.... of openssl? Thanks
-
I commented out that line; technically it traslates it selft to a function (which name is based on ssl_engine_set) which is already defined in apache headers (however on windows the ssl_engine_set is not defined)
-
I suspect, it's the forward declaration APR_DECLARE_OPTIONAL_FN(int, ssl_engine_set, (conn_rec *, ap_conf_vector_t *, int proxy, int enable)); which makes trouble. Are you using an Apache version <2.4.32? If yes, you can skip this update as the fix is irrelevant for older Apache versions.
-
JockX posted a comment on discussion Open Discussion
Is there a chance to provide a more or less comprehensive instruction on how to build this source to get a binary compatible with Apache Lounge Win64 distribution as available here: https://www.apachelounge.com/download/ ? The previous release was buildable with only slight modification to the source (replace include of unistd.h with io.h), however this one produces different errors, e.g: mod_sslcrl.c(157): error C2059: syntax error: '<parameter-list>'.</parameter-list> My attempts to resolve the...
-
-
1.14
-
Improved Apache 2.4 compatibility supporting <2.4.32
-
-
-
1.13
-
Fixed: Apache 2.4 mod_ssl compatibility issue
-
Apache 2.4 SSL issue
-
-
proper ssl method name
-
-
1.12
-
SSLCRL_DISABLE_DEBUG
-
modsslcrl.sourceforge.net
-
-
1.11
-
1.11
-
confgure patch
-
1.11
-
2.4.37
-
propset Id/Header
-
c pool
-
--none-- committed [r53]
This commit was manufactured by cvs2svn to create tag 'REL_0_6'.
-
--none-- committed [r76]
This commit was manufactured by cvs2svn to create tag 'REL_0_11'.
-
snapshot
-
*** empty log message ***
-
snapshot
-
*** empty log message ***
-
doc
-
snapshot
-
--none-- committed [r39]
This commit was manufactured by cvs2svn to create tag 'REL_0_3'.
-
0.1
-
--none-- committed [r36]
This commit was manufactured by cvs2svn to create tag 'REL_0_2'.
-
--none-- committed [r71]
This commit was manufactured by cvs2svn to create tag 'REL_0_9'.
-
SSL_CrlEnable
-
content types
-
*** empty log message ***
-
write file
-
050
-
test config errors
-
*** empty log message ***
-
test hook
-
snapshot
-
--none-- committed [r61]
This commit was manufactured by cvs2svn to create tag 'REL_0_7'.
-
snapshot
-
log message text
-
exp
-
0.8
-
error notes
-
load crl in child_init
-
--none-- committed [r46]
This commit was manufactured by cvs2svn to create tag 'REL_0_5'.
-
*** empty log message ***
-
*** empty log message ***
-
perf test
-
*** empty log message ***
-
snapshot
-
import
-
*** empty log message ***
-
new project
-
SSLCACertificatePath
-
*** empty log message ***
-
alpha release
-
0.11
-
*** empty log message ***
-
--none-- committed [r74]
This commit was manufactured by cvs2svn to create tag 'REL_0_10'.
-
download crl if cache is not available
1 >
