- new

Changed files:
    apache-mod_gnutls-dhfile -> 1.1
    apache-mod_gnutls-paths.patch -> 1.1
    apache-mod_gnutls-rsafile -> 1.1
    apache-mod_gnutls.conf -> 1.1

diff --git a/apache-mod_gnutls-dhfile b/apache-mod_gnutls-dhfile
new file mode 100644 (file)
index 0000000..9430cfe
--- /dev/null
+++ b/apache-mod_gnutls-dhfile
@@ -0,0 +1,21 @@
+
+Generator: 05
+
+Prime: e4:a8:5f:9f:f8:25:a0:28:3b:3e:b3:f2
+       ea:72:3c:21:5b:fe:35:88:a0:46:6e:ab
+       53:95:13:a4:4c:3e:fe:c4:5c:a4:79:4c
+       b2:26:ae:ea:9d:b8:47:65:25:31:6e:a6
+       ae:f6:0d:93:7b:8a:f8:a3:6a:81:f3:6b
+       41:ca:c5:dc:d1:c4:ff:a3:4c:dd:4c:54
+       b4:1d:0b:e2:f3:fe:7d:1b:4a:c1:e7:7d
+       67:d5:98:a5:54:36:59:50:23:2c:46:bf
+       ef:86:b5:ba:58:fa:1e:94:43:4f:ea:2a
+       41:b7:05:3a:d3:d6:7b:ec:92:0b:7d:d0
+       9e:70:ae:c3:1e:fa:b4:9f
+
+
+-----BEGIN DH PARAMETERS-----
+MIGGAoGA5Khfn/gloCg7PrPy6nI8IVv+NYigRm6rU5UTpEw+/sRcpHlMsiau6p24
+R2UlMW6mrvYNk3uK+KNqgfNrQcrF3NHE/6NM3UxUtB0L4vP+fRtKwed9Z9WYpVQ2
+WVAjLEa/74a1ulj6HpRDT+oqQbcFOtPWe+ySC33QnnCuwx76tJ8CAQU=
+-----END DH PARAMETERS-----

diff --git a/apache-mod_gnutls-paths.patch b/apache-mod_gnutls-paths.patch
new file mode 100644 (file)
index 0000000..fc36956
--- /dev/null
+++ b/apache-mod_gnutls-paths.patch
@@ -0,0 +1,17 @@
+--- mod_gnutls-0.2.0/src/gnutls_config.c~      2005-04-25 08:55:33.000000000 +0200
++++ mod_gnutls-0.2.0/src/gnutls_config.c       2007-09-08 16:36:09.000000000 +0200
+@@ -262,11 +262,11 @@
+     sc->cert_x509 = NULL;
+     sc->cache_timeout = apr_time_from_sec(300);
+     sc->cache_type = mgs_cache_dbm;
+-    sc->cache_config = ap_server_root_relative(p, "conf/gnutls_cache");
++    sc->cache_config = ap_server_root_relative(p, "tls/gnutls_cache");
+     
+     /* TODO: Make this Configurable. But it isn't configurable in mod_ssl? */
+-    sc->dh_params_file = ap_server_root_relative(p, "conf/dhfile");
+-    sc->rsa_params_file = ap_server_root_relative(p, "conf/rsafile");
++    sc->dh_params_file = ap_server_root_relative(p, "tls/dhfile");
++    sc->rsa_params_file = ap_server_root_relative(p, "tls/rsafile");
+     
+     /* Finish SSL Client Certificate Support */
+     sc->client_verify_mode = GNUTLS_CERT_IGNORE;

diff --git a/apache-mod_gnutls-rsafile b/apache-mod_gnutls-rsafile
new file mode 100644 (file)
index 0000000..9326aaf
--- /dev/null
+++ b/apache-mod_gnutls-rsafile
@@ -0,0 +1,9 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIBOgIBAAJBAKNdHFdA29wLUpsf0Mx4BcSA6DNzKCB+F5Dc/fjIGXZC0WLEJ45D
+TNO9DCH4QDlJfOloXKqgzhYoZsbz+ZfnM6UCAwEAAQJAQ/Rf7SW0LzDgkFmoM927
+XHXY4UoGR5nb+K0M0nd+K/ROWLgqKYTfI3dod9ab+tfUlMG4OSvzFuO/pEb/IWAf
+wwIhAMmQHLDgKKppQqB0H9sn/UdMjAJELa2b8+4LAAi5yb5bAiEAz3vv6tgNHYNk
+DsRPuNThe2cA0338RyAn7iYCHeRJdf8CIFig3ozDs/3ilOJazVsfRVZhiTrB4dfx
+uBuWiKhNkTD7AiEAgKpp2GeMko3FQccJbSROg9kXUQ/inzTYrj1RuLm1uH8CIETQ
+6A36V8qe2IfQY+w5vSdNzdIkgFp5qUQ0KAq1nRvd
+-----END RSA PRIVATE KEY-----

diff --git a/apache-mod_gnutls.conf b/apache-mod_gnutls.conf
new file mode 100644 (file)
index 0000000..ad10e8f
--- /dev/null
+++ b/apache-mod_gnutls.conf
@@ -0,0 +1,43 @@
+#LoadModule gnutls_module modules/mod_gnutls.so
+
+# This is the Apache server configuration file providing TLS support.
+# It contains the configuration directives to instruct the server how to
+# serve pages over an https connection. For detailing information about these
+# directives see <URL:http://www.outoforder.cc/projects/apache/mod_gnutls/docs>
+
+<IfModule mod_gnutls.c>
+
+#
+# When we also provide TLL we have to listen to the
+# standard HTTP port (see above) and to the HTTPS port
+#
+# Note: Configurations that use IPv6 but not IPv4-mapped addresses need two
+#         Listen directives: "Listen [::]:443" and "Listen 0.0.0.0:443"
+#
+Listen 443
+
+AddType application/x-x509-ca-cert .crt
+AddType application/x-pkcs7-crl    .crl
+
+##
+## TLS Virtual Host Context
+##
+
+<VirtualHost _default_:443:>
+
+       # TLS Engine Switch:
+       # Enable/Disable TLS for this virtual host.
+       GnuTLSEnable on
+       
+       # PEM Encoded Server Certificate
+       GnuTLSCertificateFile /etc/httpd/tls/vhost1.crt
+       
+       # Server Private Key (keep secret!)
+       GnuTLSKeyFile /etc/httpd/tls/vhost1.key
+
+       # ServerName
+       # ServerName vhost1.example.com
+
+</VirtualHost>
+
+</IfModule>