Fossil

History of www/ssl.wiki of 841c78d2cd94b193
Login

Many hyperlinks are disabled.
Use anonymous login to enable hyperlinks.

History of file www/ssl.wiki at check-in 841c78d2cd94b193

2024-07-15
16:42
Update the TLS doc to mention the use of the Windows root certificates (intented more as a reminder from a non-tech-writer and non-security-expert to properly document the feature once more people have used it and not reported any problems). file: [d1fc950cf5] check-in: [b8b22d795e] user: florian branch: trunk, size: 14727
2024-03-30
20:48
Removed all references to "Fossil 2.1x" from the docs, excepting the changelog and the hashpolicy doc. The bulk of these were for 2.14 or older — *ten* versions back now! — and there is no reason to suppose such old versions are still in use any more. These notes were justified when they informed users about surprising changes and feature additions, but they now do nothing but clutter the docs. If I am wrong about people being surprised by these things, we still have the changelog, the timeline, and the forum. file: [c2bec741c6] check-in: [ad47a447c8] user: wyoung branch: trunk, size: 14151
2024-02-18
15:26
Removed manual indents in command and file examples in the ssl doc. file: [2c45e53ac9] check-in: [1e0c0d0414] user: wyoung branch: trunk, size: 14265
2023-05-10
17:02
In an effort to make www/* source documents read as cleanly as their rendered counterparts, replaced nearly all use of HTML "p" tags, relying instead on the Wiki and Markdown markup features to achieve the same appearance. The only uses remaining are: * in Markdown nested lists, where blank lines should render the list items as separate paragraphs just as at the list's top level; since it does not, if you want a line break, you either have to wrap the item in "p" tags or do the double-br hack. * in Wiki where blank lines within a list give you a separate list in the HTML output; this is fine for bullet lists, but with numbered lists it causes the numbering to restart unless you do the same sort of manual HTML workaround as with the prior item * in plain HTML docs and wiki docs between "nowiki" tags In many places, this cleanup gets rid of pointless stray "p" tags, placating HTML verifiers. file: [d0c7bb25c0] check-in: [1fd407f61a] user: wyoung branch: trunk, size: 14335
2022-10-07
23:28
Assorted fixes and improvements to the ssl.wiki doc file: [408d992f47] check-in: [27458ef7ba] user: wyoung branch: trunk, size: 14371
2022-02-21
20:54
docs: a typo fix and an updated date reference. file: [d86333efb0] check-in: [841c78d2cd] user: stephan branch: trunk, size: 14510
2022-01-04
01:13
Cross-link the ssl-server.md and ssl.wiki documents. Both of them still need improvements. Some Pikchr diagrams would be a great addition. file: [b78e0a9c5d] check-in: [939753d046] user: drh branch: trunk, size: 14504
2021-07-20
20:57
Updated the link to cURL's cacert.pem package from the "SSL" doc file: [857c82fac2] check-in: [af7bbdcee9] user: wyoung branch: trunk, size: 14478
2021-02-09
13:34
The canonical Fossil homepage is now https://fossil-scm.org/home without the "www." in the domain and with the main path at /home, not /index.html or /fossil. Update all URLs in documentation to reflect this fact. file: [228419f021] check-in: [09908ab058] user: drh branch: trunk, size: 14481
2021-01-12
16:00
Fix typos in Markdown and Wiki pages. file: [fd215d3c90] check-in: [e755561d73] user: danield branch: trunk, size: 14485
2020-11-16
02:48
Noted the fact that Fossil 2.9+ remembers the HTTPS URI in sync when accessed via an HTTP to HTTPS redirect. file: [73430a266b] check-in: [6b472ae172] user: wyoung branch: trunk, size: 14485
02:45
Linking to the new TLS info from the generic SSL doc file: [f387709cfc] check-in: [08c52c35ba] user: wyoung branch: trunk, size: 14158
02:05
Moved the www/tls-nginx.md doc contents into its companion doc www/server/debian/nginx.md and updated it for Ubuntu 20.04 LTS and Snap-based Certbot. file: [d6658fde00] check-in: [0e63df1490] user: wyoung branch: trunk, size: 14137
2020-05-27
16:56
The error message Fossil gives on TLS certificate check failure changed in Fossil 2.11, so updated www/ssl.wiki to show the new message. Left the old message in place, since many people will be running versions of Fossil that still use that format, and a big part of the reason why we have this error message in the document is to make it come up in web searches for the error, since we give solutions later in the same doc. file: [0dd97431ff] check-in: [3c0565ab5e] user: wyoung branch: trunk, size: 14117
2020-04-26
03:58
Expanded on the "Certificates" section of www/ssl.wiki to fill in some details. The key improvement is making the first line of the OpenSSL error when the CA trust store isn't set up searchable. As it was, you pretty much had to know the solution already in order to seek out this documentation! file: [002cf8272d] check-in: [b3c0c07c07] user: wyoung branch: trunk, size: 13738
2019-08-20
06:03
Updated all of the internal hyperlinks referencing www/server.wiki to point at either www/server/index.html or one of the docs it now points at. file: [832e553ddf] check-in: [74a6578cd4] user: wyoung branch: server-docs, size: 12985
2019-08-16
12:53
Moved the chroot and loadmgmt sections of www/server.wiki into separate documents. This change also adds info on /proc to the chroot doc, which was missing in its prior server.wiki form. Also reduced a few other "details" sections of server.wiki to bullet points in the new "Further Details" list at the end of the document. file: [8b71208e55] check-in: [85eaffb6a5] user: wyoung branch: server-docs, size: 12989
10:19
Several small refinements to prior check-ins. file: [869caaa449] check-in: [16e3cff648] user: wyoung branch: server-docs, size: 12973
10:11
Moved the "Serving via althttpd" material from www/ssl.wiki to a new document, www/server/any/althttpd.md, linked from www/server.wiki. file: [6f1ce6af07] check-in: [2e19fcee33] user: wyoung branch: server-docs, size: 13085
09:54
Moved the stunnel proxying docs from www/ssl.wiki to a new document www/server/any/stunnel.md, and pointed www/server.wiki at it. Also replaced some similar material in this branch's new www/server/windows/stunnel.md file at this generic document. Between these two changes, the generic stunnel docs now cover the reverse proxying option for the first time. (The old version used the socket activation method exclusively.) The new document also gives a more realistic configuration, showing Let's Encrypt paths and a sensible ciphersuite configuration. file: [fb199d6d04] check-in: [53b2e866e1] user: wyoung branch: server-docs, size: 13977
2019-08-07
11:50
More details on althttpd in the section of www/ssl.wiki that discusses the stunnel + althttpd + fossil serving option used by fossil-scm.org and sqlite.org. file: [bcc31b138c] check-in: [9c747e1cf3] user: wyoung branch: trunk, size: 15041
04:02
A better hyperlink for althttpd documentation in ssl.wiki. file: [199c0dad02] check-in: [977109d308] user: drh branch: trunk, size: 14784
2019-03-17
06:42
Moved the section on stunnel configuration from www/server.wiki to www/ssl.wiki, adding links from one to the other. Also changed all remaining references to "SSL" in server.wiki to "TLS". file: [1426dd805b] check-in: [355c16a528] user: wyoung branch: trunk, size: 14782
2019-02-07
00:01
Several improvements to the discussion of building against OpenSSL in www/ssl.wiki. file: [9cf995b3ad] check-in: [48b74fce3c] user: wyoung branch: trunk, size: 14179
2019-01-28
19:59
Markdownism fixes in previous file: [6593ad2427] check-in: [3982569195] user: wyoung branch: trunk, size: 13827
19:58
Noted that linking Fossil to an OpenSSL built from source opens the user to the "no root certs" problem previously solved in www/ssl.wiki. file: [e8926965b8] check-in: [c563be1552] user: wyoung branch: trunk, size: 13821
19:52
Clarified the "build from source" option for linking Fossil to a non-platform version of OpenSSL. file: [f739a7a07d] check-in: [1e21abda9a] user: wyoung branch: trunk, size: 13582
18:29
Expanded the discussion of OpenSSL options in www/ssl.wiki, mainly adding advice on installing it via package managers. The new OpenSSL discussion in build.wiki now points to this, rather than to the next section level up, as in the prior checkin. file: [802a6b73b7] check-in: [a13820dc04] user: wyoung branch: trunk, size: 13564
2019-01-22
03:02
Fixed a Markdown-ism in previous file: [e25fb1dca8] check-in: [485eda7664] user: wyoung branch: trunk, size: 11789
03:01
Updated www/ssl.wiki to cover the new "Redirect to HTTPS" setting and to add recovery methods for the case where enabling it causes a redirect loop. file: [df0983ab84] check-in: [226b14fc72] user: wyoung branch: trunk, size: 11775
2019-01-21
09:38
Assorted improvements to the TLS/SSL docs. file: [c5a5b02cf9] check-in: [43166dcda3] user: wyoung branch: trunk, size: 10936
2019-01-20
01:52
Largely rewrote www/ssl.wiki, it being 7 years since the last update, during which time much has changed in TLS land. Added the initial version of www/tls-nginx.md as a companion article to it, since the topic is too deep to get into within ssl.wiki. Finally, added a new script, tools/fslsrv, referred to by tls-nginx.md, since it's too big to put inline within the article. file: [29d8d4fc04] check-in: [062d2bf61b] user: wyoung branch: trunk, size: 10929
2011-08-12
09:21
Added: Add documentation for settings, SSL usage, and change log. file: [f381ee310d] check-in: [0769acd2e0] user: ben branch: ben-testing, size: 3235