version 0.3.4: support draft-ietf-tokbind-ttrp-01

prefix header/envvar names with "Sec-" conform https://tools.ietf.org/html/draft-ietf-tokbind-ttrp-01 Signed-off-by: Hans Zandbelt <hans.zandbelt@zmartzone.eu>
zmartzone · Aug 2, 2017 · 16d08e8 · 16d08e8
1 parent 458261d
commit 16d08e8
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 5 deletions.
diff --git a/ChangeLog b/ChangeLog
@@ -1,3 +1,7 @@
+8/2/2017
+- prefix header/envvar names with "Sec-" conform https://tools.ietf.org/html/draft-ietf-tokbind-ttrp-01
+- version 0.3.4
+
 7/18/2017
 - always remove Sec-Token-Binding header from incoming headers conform draft-campbell-tokbind-ttrp-01#section-2.2
 - version 0.3.3

diff --git a/configure.ac b/configure.ac
@@ -1,4 +1,4 @@
-AC_INIT([mod_token_binding],[0.3.3],[hans.zandbelt@zmartzone.eu])
+AC_INIT([mod_token_binding],[0.3.4],[hans.zandbelt@zmartzone.eu])
 
 AC_SUBST(NAMEVER, AC_PACKAGE_TARNAME()-AC_PACKAGE_VERSION())
 

diff --git a/src/mod_token_binding.c b/src/mod_token_binding.c
@@ -80,9 +80,9 @@ module AP_MODULE_DECLARE_DATA token_binding_module;
 #define TB_CFG_POS_INT_UNSET                  -1
 
 #define TB_CFG_SEC_TB_HDR_NAME                "Sec-Token-Binding"
-#define TB_CFG_PROVIDED_TBID_HDR_NAME         "Provided-Token-Binding-ID"
-#define TB_CFG_REFERRED_TBID_HDR_NAME         "Referred-Token-Binding-ID"
-#define TB_CFG_TB_CONTEXT_HDR_NAME            "Token-Binding-Context"
+#define TB_CFG_PROVIDED_TBID_HDR_NAME         "Sec-Provided-Token-Binding-ID"
+#define TB_CFG_REFERRED_TBID_HDR_NAME         "Sec-Referred-Token-Binding-ID"
+#define TB_CFG_TB_CONTEXT_HDR_NAME            "Sec-Token-Binding-Context"
 
 #define TB_CFG_ENABLED_DEFAULT                 TRUE
 #define TB_CFG_PROVIDED_ENV_VAR_DEFAULT       TB_CFG_PROVIDED_TBID_HDR_NAME
@@ -229,7 +229,7 @@ static int tb_is_enabled(request_rec *r, tb_server_config *c,
 	}
 
 	if (!tbTokenBindingEnabled(get_ssl_from_request_fn(r), tls_key_type)) {
-		tb_warn(r, "Token Binding is not enabled by the peer");
+		tb_debug(r, "Token Binding is not enabled by the peer");
 		return 0;
 	}