httpd-2.4.6/modules/ssl

SYNOPSIS

 This Apache module provides strong cryptography for the Apache 2 webserver
 via the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS
 v1) protocols by the help of the SSL/TLS implementation library OpenSSL which
 is based on SSLeay from Eric A. Young and Tim J. Hudson.

 The mod_ssl package was created in April 1998 by Ralf S. Engelschall
 and was originally derived from software developed by Ben Laurie for
 use in the Apache-SSL HTTP server project.  The mod_ssl implementation
 for Apache 1.3 continues to be supported by the modssl project
 <http://www.modssl.org/>.

SOURCES

 See the top-level LAYOUT file for file descriptions.

 The source files are written in clean ANSI C and pass the ``gcc -O -g
 -ggdb3 -Wall -Wshadow -Wpointer-arith -Wcast-align -Wmissing-prototypes
 -Wmissing-declarations -Wnested-externs -Winline'' compiler test
 (assuming `gcc' is GCC 2.95.2 or newer) without any complains. When
 you make changes or additions make sure the source still passes this
 compiler test.

FUNCTIONS

 Inside the source code you will be confronted with the following types of
 functions which can be identified by their prefixes:

   ap_xxxx() ............... Apache API function
   ssl_xxxx() .............. mod_ssl function
   SSL_xxxx() .............. OpenSSL function (SSL library)
   OpenSSL_xxxx() .......... OpenSSL function (SSL library)
   X509_xxxx() ............. OpenSSL function (Crypto library)
   PEM_xxxx() .............. OpenSSL function (Crypto library)
   EVP_xxxx() .............. OpenSSL function (Crypto library)
   RSA_xxxx() .............. OpenSSL function (Crypto library)

DATA STRUCTURES

 Inside the source code you will be confronted with the following
 data structures:

   server_rec .............. Apache (Virtual) Server
   conn_rec ................ Apache Connection
   request_rec ............. Apache Request
   SSLModConfig ............ mod_ssl (Global)  Module Configuration
   SSLSrvConfig ............ mod_ssl (Virtual) Server Configuration
   SSLDirConfig ............ mod_ssl Directory Configuration
   SSLConnConfig ........... mod_ssl Connection Configuration
   SSLFilterRec ............ mod_ssl Filter Context
   SSL_CTX ................. OpenSSL Context
   SSL_METHOD .............. OpenSSL Protocol Method
   SSL_CIPHER .............. OpenSSL Cipher
   SSL_SESSION ............. OpenSSL Session
   SSL ..................... OpenSSL Connection
   BIO ..................... OpenSSL Connection Buffer

 For an overview how these are related and chained together have a look at the
 page in README.dsov.{fig,ps}. It contains overview diagrams for those data
 structures. It's designed for DIN A4 paper size, but you can easily generate
 a smaller version inside XFig by specifing a magnification on the Export
 panel.

INCOMPATIBILITIES

 The following intentional incompatibilities exist between mod_ssl 2.x
 from Apache 1.3 and this mod_ssl version for Apache 2:

 o The complete EAPI-based SSL_VENDOR stuff was removed.
 o The complete EAPI-based SSL_COMPAT stuff was removed.
 o The <IfDefine> variable MOD_SSL is no longer provided automatically

MAJOR CHANGES

 For a complete history of changes for Apache 2 mod_ssl, see the
 CHANGES file in the top-level directory.  The following
 is a condensed summary of the major changes were made between
 mod_ssl 2.x from Apache 1.3 and this mod_ssl version for Apache 2:

 o The DBM based session cache is now based on APR's DBM API only.
 o The shared memory based session cache is now based on APR's APIs.
 o SSL I/O is now implemented in terms of filters rather than BUFF
 o Eliminated ap_global_ctx. Storing Persistant information in
   process_rec->pool->user_data. The ssl_pphrase_Handle_CB() and
   ssl_config_global_* () functions have an extra parameter now -
   "server_rec *" -  which is used to retrieve the SSLModConfigRec.
 o Properly support restarts, allowing mod_ssl to be added to a server
   that is already running and to change server certs/keys on restart
 o Various performance enhancements
 o proxy support is no longer an "extension", much of the mod_ssl core
   was re-written (ssl_engine_{init,kernel,config}.c) to be generic so
   it could be re-used in proxy mode.
   - the optional function ssl_proxy_enable is provide for mod_proxy
     to enable proxy support
   - proxy support now requires 'SSLProxyEngine on' to be configured
   - proxy now supports SSLProxyCARevocation{Path,File} in addition to
     the original SSLProxy* directives
 o per-directory SSLCACertificate{File,Path} is now thread-safe but
   requires SSL_set_cert_store patch to OpenSSL
 o the ssl_engine_{ds,ext}.c source files are obsolete and no longer
   exist

TODO

 See the top-level STATUS file for current efforts and goals.
Name		Date	Size	#Lines	LOC
..		15-Jul-2013	-
Makefile.in	H A D	06-Nov-2010	845	21	1
NWGNUmakefile	H A D	28-Sep-2011	6 KiB	328	268
README	H A D	07-Aug-2011	4.7 KiB	107	86
README.dsov.fig	H A D	21-Nov-2004	13 KiB	347	346
README.dsov.ps	H A D	21-Nov-2004	43.4 KiB
config.m4	H A D	26-Sep-2012	1.9 KiB	59	53
mod_ssl.c	H A D	23-May-2013	21.8 KiB	609	421
mod_ssl.dsp	H A D	07-Aug-2011	6.7 KiB	200	165
mod_ssl.h	H A D	23-Sep-2011	2.5 KiB	68	15
ssl_engine_config.c	H A D	23-May-2013	52 KiB	1,860	1,437
ssl_engine_dh.c	H A D	07-Aug-2011	6.8 KiB	245	80
ssl_engine_init.c	H A D	23-May-2013	54.7 KiB	1,767	1,253
ssl_engine_io.c	H A D	23-May-2013	69.9 KiB	2,045	1,285
ssl_engine_kernel.c	H A D	11-Dec-2012	76.9 KiB	2,189	1,321
ssl_engine_log.c	H A D	04-Aug-2012	8.6 KiB	245	153
ssl_engine_mutex.c	H A D	05-Dec-2011	3.6 KiB	112	65
ssl_engine_ocsp.c	H A D	12-Dec-2011	10.4 KiB	298	208
ssl_engine_pphrase.c	H A D	04-Aug-2012	31.1 KiB	817	495
ssl_engine_rand.c	H A D	05-Dec-2011	5.6 KiB	176	104
ssl_engine_vars.c	H A D	11-Dec-2012	34.7 KiB	1,082	839
ssl_private.h	H A D	23-May-2013	33.3 KiB	1,001	667
ssl_scache.c	H A D	04-Aug-2012	7.1 KiB	230	140
ssl_util.c	H A D	04-Aug-2012	14.1 KiB	508	355
ssl_util_ocsp.c	H A D	03-Jul-2013	10.4 KiB	321	226
ssl_util_ssl.c	H A D	23-May-2013	16.5 KiB	570	365
ssl_util_ssl.h	H A D	23-May-2013	2.9 KiB	80	26
ssl_util_stapling.c	H A D	29-May-2013	22.3 KiB	696	528