Re: client CA list in TS-3125

2016-05-01 Thread Brian Geffon
Hi James, Unfortunately, I don't fully remember. I believe it was based on an observation from the nginx guys around security related to session keys. Brian On Mon, May 2, 2016 at 6:50 AM, James Peach wrote: > Hi Brian, > > In TS-3125 you generate a server ID by hashing all the subject names in

[GitHub] trafficserver pull request: TS-3948 Lock g_records during in RecDu...

2016-05-01 Thread PSUdaemon
Github user PSUdaemon commented on the pull request: https://github.com/apache/trafficserver/pull/304#issuecomment-216096770 Is there a new issue for this? I have some more information to share. --- If your project is set up for it, you can reply to this email and have your reply appe

Back-ports for 6.2.x

2016-05-01 Thread Phil Sorber
Hi all, I've been working through the back-port requests for 6.2.x. If you happen to see activity on your issue can you make sure I was able to complete the back-port properly. I am only going off the commits marked in JIRA. Thanks.

[GitHub] trafficserver pull request: TS-4156: remove the traffic_sac, stand...

2016-05-01 Thread jpeach
Github user jpeach commented on the pull request: https://github.com/apache/trafficserver/pull/593#issuecomment-216085057 @masaori335 ``doc/locale/ja/LC_MESSAGES/admin/working-log-files.en.po`` needs to be regenerated after this change. Can you document how to do that? --- If your pr

[GitHub] trafficserver pull request: [TS-4373] Add TSSslServerContextCreate...

2016-05-01 Thread calavera
Github user calavera commented on the pull request: https://github.com/apache/trafficserver/pull/594#issuecomment-216080283 Awesome, thanks @jpeach! :raised_hands: --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your

[GitHub] trafficserver pull request: [TS-4373] Add TSSslServerContextCreate...

2016-05-01 Thread jpeach
Github user jpeach closed the pull request at: https://github.com/apache/trafficserver/pull/594 --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wishes so, or if the feature

[GitHub] trafficserver pull request: [TS-4373] Add TSSslServerContextCreate...

2016-05-01 Thread jpeach
Github user jpeach commented on the pull request: https://github.com/apache/trafficserver/pull/594#issuecomment-216079787 Merged. --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature

client CA list in TS-3125

2016-05-01 Thread James Peach
Hi Brian, In TS-3125 you generate a server ID by hashing all the subject names in the server CA cert file (assuming there is one). You also set the client CA list using SSL_CTX_set_client_CA_list() … why is that? J