Drop support for the RSA BSAFE SSL-C toolkit from configure, and remove #ifdef'ed code from mod_ssl and ab where applicable. Consensus for dropping support for SSL/TLS toolkits other than OpenSSL was reached on dev@httpd in June 2010 (message with ID <20100602162310.GA11156@redhat.com> and follow-ups).

minor doc changes already on 2.2 branch

Drop archiac notes - no special steps required once we test for ENGINE_init()

2.0 -> 2.1

Based on DougM's feedback to the list...

Apparently Roy missed this comment. Rephrase as a seperate paragraph to more clearly split credit for OpenSSL from credit for mod_ssl.

Split out the LAYOUT

As we find the right places for this content, move them out in bits

All rather stale. Any new/remaining issues should be moved to CHANGES in the present tense, as opposed to the "Future port to 2.0". Heh

note a desirable goal

another todo

another todo

various updates

note about the temporary DH keys

a few updates

ssl_var_lookup() is enabled apr optional functions do not need to be unregistered PR: Obtained from: Submitted by: Reviewed by:

Implement CRYPTO_set_locking_callback() for mod_ssl PR: Obtained from: Submitted by: Madhusudan Mathihalli <madhusudan_mathihalli@hp.com> Reviewed by: dougm

remove #if 0-ed ssl_hook_NewConnection code; was only left for reference, no longer needed remove #if 0-ed ssl_hook_TimeoutConnection code; ssl no longer talks directly to the socket PR: Obtained from: Submitted by: madhu Reviewed by: dougm

another update from madhu

client auth is enabled

some updated pointed out by madhu

Update TODO list

Apply mod_ssl MEGA porting patch. This is a cleaned up version of the latest patches from Madhusudan which makes mod_ssl 95% working inside Apache 2.0. There is still a lot of more work (both porting and cleanup) to do be done. See modules/ssl/README for details. Submitted by: Madhusudan Mathihalli <madhusudan_mathihalli@hp.com>

Remember current porting state

Fix todo list

Port ssl_util.c stuff to APR.

Port ssl_util_table.[ch] to Apache 2.0 by just removing all platform depended code (table_read, table_write). This is possible because this table library is local to mod_ssl and inside mod_ssl this library is used for manipulating hash tables inside shared memory segments only. So we can just get rid of the unportable parts at all.

Port ssl_util_ssl.[ch] stuff to APR.

Port ssl_engine_ds.c to APR.

Nothing to port for ssl_engine_dh.c except that SSL_LIBRARY_VERSION has to be already available.

Remember which code parts are already ported...

Change mostly all old module structure hooks and EAPI hooks to ap_hook_xxx equivalents. More work has to be done here to clean all this up and reduce to a minimum...

Axe out SSL_CONSERVATIVE stuff which for Apache 1.3 did I/O data pre-sucking on POST requests and I/O re-injection in case of SSL renegotiations. This all either cannot be solved any longer or at least has to be implemented totally different through I/O layering/filtering.

Remove one more EAPI-based thing we no longer really need.

compat and local sdbm stuff is already gone

Axe out SSL_USE_SDBM stuff, i.e., get rid of the local SDBM copy and use APR's DBM API instead. The remaining question just is whether APR's DBM allows "larger" things like SSL sessions to be stored...

Axe out the complete SSL_COMPAT stuff. Because Apache 2.0 is already incompatible at many places to Apache 1.3 we also don't want this stuff anymore. Apache 2.0's mod_ssl will be mostly compatibile with Apache 1.3's mod_ssl, of course. But we really no longer want to be compatible to Sioux and other obsolete SSL things...

Start writing down incompatibilities to mod_ssl 2.x from Apache 1.3. Our general goal is to axe down mod_ssl to a minimum, because what we don't have anymore we don't have to port and as simpler mod_ssl becomes. Nevertheless we will try to minimize incompatibilities if possible.

Axe out EAPI-based SSL_VENDOR stuff. If we want this later again, we have to do it differently anyway. So, for now we try to strip down mod_ssl as heavy as possible and hence we kick out this stuff at all.

Update file description list.

adjust file list for removed files, too.

Initial revision