CVS log for loncom/configuration/SSL.pm
Up to [LON-CAPA] / loncom / configuration
Request diff between arbitrary revisions
Keyword substitution: kv
Default branch: MAIN
Revision 1.10: download - view: text, markup, annotated - select for diffs
Thu Jul 11 18:12:06 2019 UTC (5 years, 4 months ago) by raeburn
Branches: MAIN
CVS tags: version_2_12_X,
HEAD
Diff to previous 1.9: preferred, colored to selected 1.8: preferred, colored
Changes since revision 1.9: +57 -28
lines
- Information about Certificate Revocations List included in SSL Certificates
status report. LONCAPA-prerequisites needs perl-Crypt-X509-CRL.
Revision 1.9: download - view: text, markup, annotated - select for diffs
Fri Apr 12 02:41:47 2019 UTC (5 years, 7 months ago) by raeburn
Branches: MAIN
Diff to previous 1.8: preferred, colored
Changes since revision 1.8: +2 -2
lines
- Detect case where no SSL keys, certs or csrs exist.
Revision
1.8:
download - view:
text,
markup,
annotated -
[selected for diffs]
Sat Dec 22 17:06:06 2018 UTC (5 years, 10 months ago) by
raeburn
Branches:
MAIN
Diff to previous 1.7:
preferred,
colored
Changes since revision 1.7: +3 -2
lines
- LON-CAPA SSL certificate status incudes issuer comparison for CA cert and
Connections and Replication certs.
Revision 1.7: download - view: text, markup, annotated - select for diffs
Sat Aug 18 22:07:53 2018 UTC (6 years, 2 months ago) by raeburn
Branches: MAIN
Diff to previous 1.6: preferred, colored to selected 1.8: preferred, colored
Changes since revision 1.6: +50 -9
lines
- LON-CAPA SSL certificate verification
- Detect revoked or expired certs, or certs with incorrect Common Name.
- If host cert or hostname cert are not OK, check if a valid CSR exists,
and if so, report status of that.
- perl-Crypt-PKCS10 needs to be added to LONCAPA-prerequisites.
Revision 1.6: download - view: text, markup, annotated - select for diffs
Fri May 26 03:43:43 2017 UTC (7 years, 5 months ago) by raeburn
Branches: MAIN
Diff to previous 1.5: preferred, colored to selected 1.8: preferred, colored
Changes since revision 1.5: +2 -2
lines
- Typo
Revision 1.5: download - view: text, markup, annotated - select for diffs
Thu May 18 22:13:57 2017 UTC (7 years, 5 months ago) by raeburn
Branches: MAIN
Diff to previous 1.4: preferred, colored to selected 1.8: preferred, colored
Changes since revision 1.4: +19 -5
lines
- Only translate SSL key and certificate status if target is web.
- Include additional status types for SSL certificates (host and hostname)
-- nokey and otherkey -- if key is missing, or certificate uses another
key.
Revision 1.4: download - view: text, markup, annotated - select for diffs
Sun Aug 7 04:18:21 2016 UTC (8 years, 3 months ago) by raeburn
Branches: MAIN
Diff to previous 1.3: preferred, colored to selected 1.8: preferred, colored
Changes since revision 1.3: +65 -5
lines
- Check start and end date/times for certificates.
- Display date as "Expired" or "Future validity" unless currently valid.
- For web target use LON-CAPA's lonlocal::locallocaltime() to format
start and end dates for valid certificates.
Revision 1.3: download - view: text, markup, annotated - select for diffs
Mon Aug 1 18:03:53 2016 UTC (8 years, 3 months ago) by raeburn
Branches: MAIN
Diff to previous 1.2: preferred, colored to selected 1.8: preferred, colored
Changes since revision 1.2: +3 -3
lines
- Change format for reporting error.
Revision 1.2: download - view: text, markup, annotated - select for diffs
Mon Aug 1 13:55:05 2016 UTC (8 years, 3 months ago) by raeburn
Branches: MAIN
Diff to previous 1.1: preferred, colored to selected 1.8: preferred, colored
Changes since revision 1.1: +10 -9
lines
- w3c xhtml validation.
Revision 1.1: download - view: text, markup, annotated - select for diffs
Mon Jul 25 19:50:16 2016 UTC (8 years, 3 months ago) by raeburn
Branches: MAIN
Diff to selected 1.8: preferred, colored
- Use Server Name Indication (SNI) and SSL when replicating content from
/raw/.
- Domain status screen has link to show status of LON-CAPA SSL certificates.
- "SSL" domain config for (a) "internal" LON-CAPA SSL connection to servers/VMs
in other domain, (b) Replication of domain's resources to other domains.
- Replication can use name-based virtual hosts with SSL, with verification of
client certificate (cert: /home/httpd/lonCerts/lonhostnamecert.pem, signed
by LON-CAPA CA, with Common Name of internal-<server hostname>, same IP address
as server hostname).
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>