[doc] remove references to removed modules

[core] fall back to getauxval(AT_RANDOM), if avail

fall back to use getauxval(AT_RANDOM), if available, for srand() init

getauxval(AT_RANDOM) is a glibc extension

[core] use diff var name w/ CCRandomGenerateBytes (fixes #3141)

(thx ryandesign)

CCRandomGenerateBytes is a fallback and might be present alongside
crypto libraries which (previously) used the same

[core] use diff var name w/ CCRandomGenerateBytes (fixes #3141)

(thx ryandesign)

CCRandomGenerateBytes is a fallback and might be present alongside
crypto libraries which (previously) used the same variable name.

x-ref:
"error: redefinition of 'i'"
https://redmine.lighttpd.net/issues/3141

show more ...

[core] avoid CCRandomGenerateBytes on MacOS <10.12 (fixes #3140)

(thx ryandesign)

x-ref:
"lighttpd build failure on macOS 10.13 and earlier"
https://redmine.lighttpd.net/issues/3140

[core] CCRandomGenerateBytes() for rand on macOS (fixes #3129)

(thx devnexen)

x-ref:
"rand macOs case handling update"
https://redmine.lighttpd.net/issues/3129

[core] move backtrace and assert macros to ck.[ch]

[multiple] rename safe_memclear() -> ck_memzero()

[core] consistent inclusion of sys-time.h

[multiple] include mbedtls/config.h after select

include mbedtls/config.h crypto lib config
after selecting crypto lib to use

[multiple] consistent order for crypto lib select

[build] WITHOUT_LIB_CRYPTO option in code

(not (yet?) an end-user option in the build system)
(If extended to build system, build system should also unset CRYPTO_LIB)

If WITHOUT_LIB_CRYPTO is defin

[build] WITHOUT_LIB_CRYPTO option in code

(not (yet?) an end-user option in the build system)
(If extended to build system, build system should also unset CRYPTO_LIB)

If WITHOUT_LIB_CRYPTO is defined in sys-crypto.h, then non-TLS modules
will have access to MD5() and SHA1() built with lighttpd (algo_md5.[ch]
and algo_sha1.[ch]), but not to other message digest algorithms.

As of this commit, this affects only mod_secdownload with SHA256 digest
and mod_auth* modules using HTTP Digest Auth with digest=SHA-256, which
is not currently well-supported by client browers (besides Opera)

show more ...

[multiple] test for nss includes

some distro packages deploy NSS includes under nss/, others nss3/
(and similar for nspr/ vs nspr4/)

[core] add missing declaration for NSS rand

(bug on master branch; never released)

[multiple] use NSS crypto if no other crypto avail

use NSS crypto if no other crypto avail, but NSS crypto is available

"NSS crypto support" is not included in tests/LightyTest.pm:has_crypto()
due

[multiple] use NSS crypto if no other crypto avail

use NSS crypto if no other crypto avail, but NSS crypto is available

"NSS crypto support" is not included in tests/LightyTest.pm:has_crypto()
due to NSS libraries (freebl3) lacking public export for HMAC funcs

show more ...

[core] allow symlinks under /dev for rand devices

(fix code to match comment)

[mod_wolfssl] standalone module

standalone module forked from mod_openssl

[multiple] address coverity warnings

[mod_openssl] prefer some WolfSSL native APIs

Prefer some WolfSSL native APIs when building with WolfSSL.

However, some functionality in WolfSSL is available only through the
WolfSSL compatibility

[mod_openssl] prefer some WolfSSL native APIs

Prefer some WolfSSL native APIs when building with WolfSSL.

However, some functionality in WolfSSL is available only through the
WolfSSL compatibility layer for OpenSSL, so the effort to create a
native mod_wolfssl halted here.

show more ...

[multiple] add summaries to top of some modules

[mod_gnutls] GnuTLS option for TLS (fixes #109)

(experimental)

mod_gnutls supports most ssl.* config options supported by mod_openssl

x-ref:
"GnuTLS support for the mod_ssl"
https://redmine.li

[mod_gnutls] GnuTLS option for TLS (fixes #109)

(experimental)

mod_gnutls supports most ssl.* config options supported by mod_openssl

x-ref:
"GnuTLS support for the mod_ssl"
https://redmine.lighttpd.net/issues/109

show more ...

[mod_mbedtls] mbedTLS option for TLS

(experimental)

mod_mbedtls supports most ssl.* config options supported by mod_openssl

thx Ward Willats for the initial discussion and attempt in the comments

[mod_mbedtls] mbedTLS option for TLS

(experimental)

mod_mbedtls supports most ssl.* config options supported by mod_openssl

thx Ward Willats for the initial discussion and attempt in the comments
https://redmine.lighttpd.net/boards/3/topics/7029

show more ...

[core] add seed before openssl RAND_pseudo_bytes()

[multiple] ./configure --with-nettle to use Nettle

./configure --with-nettle to use Nettle crypto lib for algorithms,
instead of OpenSSL or wolfSSL. Note: Nettle does not provide TLS.

x-ref:
"Ho

[multiple] ./configure --with-nettle to use Nettle

./configure --with-nettle to use Nettle crypto lib for algorithms,
instead of OpenSSL or wolfSSL. Note: Nettle does not provide TLS.

x-ref:
"How to use SHA-256 without OpenSSL?"
https://redmine.lighttpd.net/boards/2/topics/8903

show more ...

[core] remove include base.h where unused

[core] pass conf.follow_symlink in more places