5 Commits

Author SHA1 Message Date
brad
4a880bca0f Fix SNI handling; only use key+cert from SNI specific config. CVE-2013-4508
ok sthen@
2013-11-08 21:39:43 +00:00
sthen
cbe6df0aac update to lighttpd 1.4.30, from Brad (maintainer). 2011-12-20 22:27:28 +00:00
sthen
2d32c24ac0 ssl-related fixes from lighttpd upstream via Brad
- [ssl] count renegotiations to prevent client renegotiations
- [ssl] add option to honor server cipher order, true by default
2011-12-03 22:26:08 +00:00
sthen
076483e0f2 update lighttpd to 1.4.29, from Brad
- while there, remove patch-src_server_c too, all the various /dev/*random
are equivalent now, ok Brad
2011-07-07 14:34:36 +00:00
sthen
bd91594371 Fixes from upstream via Brad (maintainer)
* mod_proxy: fix delayed connect
* mod_cgi: make read buffer as big as incoming data block
* ssl: Support for Diffie-Hellman and Elliptic-Curve Diffie-Hellman
key exchange (add ssl.use-sslv3)

While there, update autoconf version comment, should be 2.67.
2011-03-20 13:42:53 +00:00