lighty labs

2025-08-11

09:07 Lighttpd Feature #3286 (Patch Pending): "-f -" switch is undocumented

I added a brief note about '-' to @lighttpd -h@ and to the lighttpd man page.
There are additional ways to read fr... gstrauss

2025-08-07

08:06 Lighttpd Revision bae3fe61: [mod_mbedtls] mbedtls 4.x makes oid private

[mod_mbedtls] mbedtls 4.x makes oid interfaces private
mbedtls_oid_get_attr_short_name() was renamed to
mbedtls_x509_... gstrauss

08:05 Lighttpd Revision 9dff5d6d: [mod_mbedtls] mbedtls 4.x curve_info,list private

mbedtls 4.x makes private
mbedtls_ecp_curve_info
mbedtls_ecp_curve_list()
x-ref:
mbedtls 4.x does not expose m... gstrauss

2025-08-06

20:27 Lighttpd Revision 98ed599b: [mod_mbedtls] mbedtls 4.x removes RSA key exch

mbedtls 4.x removes RSA key exchanges
(under #ifdef MBEDTLS_KEY_EXCHANGE_RSA_ENABLED)
https://github.com/Mbed-TLS/mb... gstrauss

20:23 Lighttpd Revision 90d7ed59: [mod_mbedtls] mbedtls 4.x PSA crypto handles RNG

mbedtls 4.x changes function signatures to remove RNG params
and removes mbedtls_ssl_conf_rng() gstrauss

20:20 Lighttpd Revision 32d5cf54: [mod_mbedtls] mbedtls 4.x removes MBEDTLS_DHM_C

https://github.com/Mbed-TLS/mbedtls/commit/15fd5c99250740b741f560f9b12f70cbb6d274aa gstrauss

20:13 Lighttpd Revision 2f0d0765: [mod_wolfssl] handle additional wolfssl socket err

handle additional wolfssl socket error codes gstrauss

19:48 Lighttpd Revision ea97baca: [TLS] skip SSL_shutdown after non-recoverable error

x-ref:
`man SSL_get_error` states that SSL_shutdown() should not be called
after non-recoverable SSL_ERROR_SYSCAL... gstrauss

19:48 Lighttpd Revision 1dfd2337: [mod_wolfssl] check for WOLFSSL_SHUTDOWN_NOT_DONE

gstrauss

19:48 Lighttpd Revision 96253ddd: [mod_openssl] workaround OpenSSL 3 SSL_sendfile bug

OpenSSL 3.x before OpenSSL 3.4.0 did not properly set the error in
the OpenSSL error queue if `sendfile()` failed, in... gstrauss

19:48 Lighttpd Revision 679f0f83: [mod_openssl] update lib version EOL warning

gstrauss

19:48 Lighttpd Revision e49b053f: [TLS] SSL error handling improvements

error log remote addr (IP) if client error
extend TLS error log msg to include remote addr (IP) if client error
chec... gstrauss