]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
mod_md: update to v2.4.26
authorStefan Eissing <icing@apache.org>
Mon, 8 Apr 2024 11:24:18 +0000 (11:24 +0000)
committerStefan Eissing <icing@apache.org>
Mon, 8 Apr 2024 11:24:18 +0000 (11:24 +0000)
commit8ffa19a1f7eb03b156e6bdbda65b3d2a2de9dfe8
treed35722cd2abd68e42eaf9ddcc05cf05e8d57b703
parentd3c4bf9ffe93e0a7dae2f1257782cdf087a68778
mod_md: update to v2.4.26

- Using OCSP stapling information to trigger certificate renewals. Proposed
  by @frasertweedale.
- Added directive `MDCheckInterval` to control how often the server checks
  for detected revocations. Added proposals for configurations in the
  README.md chapter "Revocations".
- OCSP stapling: accept OCSP responses without a `nextUpdate` entry which is
  allowed in RFC 6960. Treat those as having an update interval of 12 hours.
  Added by @frasertweedale.
- Adapt OpenSSL usage to changes in their API. By Yann Ylavic.

Test Updates
- workarounds for using Pebble v2.5
- disable EAB tests for Pebble since v2.5 no longer
  supports HS256 FWT for EAB keys
- some stability improvemnets in error/warning checks

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916861 13f79535-47bb-0310-9956-ffa450edef68
17 files changed:
changes-entries/md_2.4.26.txt [new file with mode: 0644]
docs/manual/mod/mod_md.xml
modules/md/md_ocsp.c
modules/md/md_reg.c
modules/md/md_reg.h
modules/md/md_version.h
modules/md/mod_md_config.c
modules/md/mod_md_config.h
modules/md/mod_md_drive.c
test/modules/md/conftest.py
test/modules/md/md_cert_util.py
test/modules/md/md_env.py
test/modules/md/test_300_conf_validate.py
test/modules/md/test_310_conf_store.py
test/modules/md/test_502_acmev2_drive.py
test/modules/md/test_602_roundtrip.py
test/modules/md/test_750_eab.py