SOURCES: apache-mod_gnutls.conf (NEW), apache-mod_gnutls-dhfile (N...

adamg adamg at pld-linux.org
Sun Sep 9 01:30:08 CEST 2007


Author: adamg                        Date: Sat Sep  8 23:30:08 2007 GMT
Module: SOURCES                       Tag: HEAD
---- Log message:
- new

---- Files affected:
SOURCES:
   apache-mod_gnutls.conf (NONE -> 1.1)  (NEW), apache-mod_gnutls-dhfile (NONE -> 1.1)  (NEW), apache-mod_gnutls-paths.patch (NONE -> 1.1)  (NEW), apache-mod_gnutls-rsafile (NONE -> 1.1)  (NEW)

---- Diffs:

================================================================
Index: SOURCES/apache-mod_gnutls.conf
diff -u /dev/null SOURCES/apache-mod_gnutls.conf:1.1
--- /dev/null	Sun Sep  9 01:30:08 2007
+++ SOURCES/apache-mod_gnutls.conf	Sun Sep  9 01:30:03 2007
@@ -0,0 +1,43 @@
+#LoadModule gnutls_module modules/mod_gnutls.so
+
+# This is the Apache server configuration file providing TLS support.
+# It contains the configuration directives to instruct the server how to
+# serve pages over an https connection. For detailing information about these
+# directives see <URL:http://www.outoforder.cc/projects/apache/mod_gnutls/docs>
+
+<IfModule mod_gnutls.c>
+
+#
+# When we also provide TLL we have to listen to the
+# standard HTTP port (see above) and to the HTTPS port
+#
+# Note: Configurations that use IPv6 but not IPv4-mapped addresses need two
+#	   Listen directives: "Listen [::]:443" and "Listen 0.0.0.0:443"
+#
+Listen 443
+
+AddType application/x-x509-ca-cert .crt
+AddType application/x-pkcs7-crl    .crl
+
+##
+## TLS Virtual Host Context
+##
+
+<VirtualHost _default_:443:>
+
+	# TLS Engine Switch:
+	# Enable/Disable TLS for this virtual host.
+	GnuTLSEnable on
+	
+	# PEM Encoded Server Certificate
+	GnuTLSCertificateFile /etc/httpd/tls/vhost1.crt
+	
+	# Server Private Key (keep secret!)
+	GnuTLSKeyFile /etc/httpd/tls/vhost1.key
+
+	# ServerName
+	# ServerName vhost1.example.com
+
+</VirtualHost>
+
+</IfModule>

================================================================
Index: SOURCES/apache-mod_gnutls-dhfile
diff -u /dev/null SOURCES/apache-mod_gnutls-dhfile:1.1
--- /dev/null	Sun Sep  9 01:30:08 2007
+++ SOURCES/apache-mod_gnutls-dhfile	Sun Sep  9 01:30:03 2007
@@ -0,0 +1,21 @@
+
+Generator: 05
+
+Prime: e4:a8:5f:9f:f8:25:a0:28:3b:3e:b3:f2
+	ea:72:3c:21:5b:fe:35:88:a0:46:6e:ab
+	53:95:13:a4:4c:3e:fe:c4:5c:a4:79:4c
+	b2:26:ae:ea:9d:b8:47:65:25:31:6e:a6
+	ae:f6:0d:93:7b:8a:f8:a3:6a:81:f3:6b
+	41:ca:c5:dc:d1:c4:ff:a3:4c:dd:4c:54
+	b4:1d:0b:e2:f3:fe:7d:1b:4a:c1:e7:7d
+	67:d5:98:a5:54:36:59:50:23:2c:46:bf
+	ef:86:b5:ba:58:fa:1e:94:43:4f:ea:2a
+	41:b7:05:3a:d3:d6:7b:ec:92:0b:7d:d0
+	9e:70:ae:c3:1e:fa:b4:9f
+
+
+-----BEGIN DH PARAMETERS-----
+MIGGAoGA5Khfn/gloCg7PrPy6nI8IVv+NYigRm6rU5UTpEw+/sRcpHlMsiau6p24
+R2UlMW6mrvYNk3uK+KNqgfNrQcrF3NHE/6NM3UxUtB0L4vP+fRtKwed9Z9WYpVQ2
+WVAjLEa/74a1ulj6HpRDT+oqQbcFOtPWe+ySC33QnnCuwx76tJ8CAQU=
+-----END DH PARAMETERS-----

================================================================
Index: SOURCES/apache-mod_gnutls-paths.patch
diff -u /dev/null SOURCES/apache-mod_gnutls-paths.patch:1.1
--- /dev/null	Sun Sep  9 01:30:08 2007
+++ SOURCES/apache-mod_gnutls-paths.patch	Sun Sep  9 01:30:03 2007
@@ -0,0 +1,17 @@
+--- mod_gnutls-0.2.0/src/gnutls_config.c~	2005-04-25 08:55:33.000000000 +0200
++++ mod_gnutls-0.2.0/src/gnutls_config.c	2007-09-08 16:36:09.000000000 +0200
+@@ -262,11 +262,11 @@
+     sc->cert_x509 = NULL;
+     sc->cache_timeout = apr_time_from_sec(300);
+     sc->cache_type = mgs_cache_dbm;
+-    sc->cache_config = ap_server_root_relative(p, "conf/gnutls_cache");
++    sc->cache_config = ap_server_root_relative(p, "tls/gnutls_cache");
+     
+     /* TODO: Make this Configurable. But it isn't configurable in mod_ssl? */
+-    sc->dh_params_file = ap_server_root_relative(p, "conf/dhfile");
+-    sc->rsa_params_file = ap_server_root_relative(p, "conf/rsafile");
++    sc->dh_params_file = ap_server_root_relative(p, "tls/dhfile");
++    sc->rsa_params_file = ap_server_root_relative(p, "tls/rsafile");
+     
+     /* Finish SSL Client Certificate Support */
+     sc->client_verify_mode = GNUTLS_CERT_IGNORE;

================================================================
Index: SOURCES/apache-mod_gnutls-rsafile
diff -u /dev/null SOURCES/apache-mod_gnutls-rsafile:1.1
--- /dev/null	Sun Sep  9 01:30:08 2007
+++ SOURCES/apache-mod_gnutls-rsafile	Sun Sep  9 01:30:03 2007
@@ -0,0 +1,9 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIBOgIBAAJBAKNdHFdA29wLUpsf0Mx4BcSA6DNzKCB+F5Dc/fjIGXZC0WLEJ45D
+TNO9DCH4QDlJfOloXKqgzhYoZsbz+ZfnM6UCAwEAAQJAQ/Rf7SW0LzDgkFmoM927
+XHXY4UoGR5nb+K0M0nd+K/ROWLgqKYTfI3dod9ab+tfUlMG4OSvzFuO/pEb/IWAf
+wwIhAMmQHLDgKKppQqB0H9sn/UdMjAJELa2b8+4LAAi5yb5bAiEAz3vv6tgNHYNk
+DsRPuNThe2cA0338RyAn7iYCHeRJdf8CIFig3ozDs/3ilOJazVsfRVZhiTrB4dfx
+uBuWiKhNkTD7AiEAgKpp2GeMko3FQccJbSROg9kXUQ/inzTYrj1RuLm1uH8CIETQ
+6A36V8qe2IfQY+w5vSdNzdIkgFp5qUQ0KAq1nRvd
+-----END RSA PRIVATE KEY-----
================================================================


More information about the pld-cvs-commit mailing list