From 16d08e8cfbe8a82ca558705a20f3829bf58fd353 Mon Sep 17 00:00:00 2001 From: Hans Zandbelt Date: Wed, 2 Aug 2017 20:05:14 +0200 Subject: [PATCH] version 0.3.4: support draft-ietf-tokbind-ttrp-01 prefix header/envvar names with "Sec-" conform https://tools.ietf.org/html/draft-ietf-tokbind-ttrp-01 Signed-off-by: Hans Zandbelt --- ChangeLog | 4 ++++ configure.ac | 2 +- src/mod_token_binding.c | 8 ++++---- 3 files changed, 9 insertions(+), 5 deletions(-) diff --git a/ChangeLog b/ChangeLog index 8b57cb3..660c757 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,7 @@ +8/2/2017 +- prefix header/envvar names with "Sec-" conform https://tools.ietf.org/html/draft-ietf-tokbind-ttrp-01 +- version 0.3.4 + 7/18/2017 - always remove Sec-Token-Binding header from incoming headers conform draft-campbell-tokbind-ttrp-01#section-2.2 - version 0.3.3 diff --git a/configure.ac b/configure.ac index 820c73b..914e346 100644 --- a/configure.ac +++ b/configure.ac @@ -1,4 +1,4 @@ -AC_INIT([mod_token_binding],[0.3.3],[hans.zandbelt@zmartzone.eu]) +AC_INIT([mod_token_binding],[0.3.4],[hans.zandbelt@zmartzone.eu]) AC_SUBST(NAMEVER, AC_PACKAGE_TARNAME()-AC_PACKAGE_VERSION()) diff --git a/src/mod_token_binding.c b/src/mod_token_binding.c index 252faf9..e1e6789 100644 --- a/src/mod_token_binding.c +++ b/src/mod_token_binding.c @@ -80,9 +80,9 @@ module AP_MODULE_DECLARE_DATA token_binding_module; #define TB_CFG_POS_INT_UNSET -1 #define TB_CFG_SEC_TB_HDR_NAME "Sec-Token-Binding" -#define TB_CFG_PROVIDED_TBID_HDR_NAME "Provided-Token-Binding-ID" -#define TB_CFG_REFERRED_TBID_HDR_NAME "Referred-Token-Binding-ID" -#define TB_CFG_TB_CONTEXT_HDR_NAME "Token-Binding-Context" +#define TB_CFG_PROVIDED_TBID_HDR_NAME "Sec-Provided-Token-Binding-ID" +#define TB_CFG_REFERRED_TBID_HDR_NAME "Sec-Referred-Token-Binding-ID" +#define TB_CFG_TB_CONTEXT_HDR_NAME "Sec-Token-Binding-Context" #define TB_CFG_ENABLED_DEFAULT TRUE #define TB_CFG_PROVIDED_ENV_VAR_DEFAULT TB_CFG_PROVIDED_TBID_HDR_NAME @@ -229,7 +229,7 @@ static int tb_is_enabled(request_rec *r, tb_server_config *c, } if (!tbTokenBindingEnabled(get_ssl_from_request_fn(r), tls_key_type)) { - tb_warn(r, "Token Binding is not enabled by the peer"); + tb_debug(r, "Token Binding is not enabled by the peer"); return 0; }