Find Jobs
Hire Freelancers

Apache module development

$1000-10000 USD

Completed
Posted over 8 years ago

$1000-10000 USD

Paid on delivery
I'm currently looking for a developer who can build a production ready version of our concept plugin. One that is backwards compatible with older versions of Apache and can share share the majority of code with the Nginx plugin later. The concept plugin does not contain all final functionality, for example threading is not handled for some processes where it should and message authentication needs to be implemented via digital signatures. The concept plugin only works on the current Apache trunk (2.5) because it's using the 'init_server' hook which was just recently added. This is the biggest challenge to resolve. The module mod_sslhaf could potentially help you in the right direction as this is already extracting the required information in the TLS handshake. Apache Function: [login to view URL] mod_sslhaf (Apache module for passive SSL client fingerprinting): [login to view URL] The developer needs to find a way to make a similar 'hook' in older versions of Apache 2.x but with the existing functionality and without (re)writing mod_ssl. We can't make any changes to the Apache source, everything needs to happen in this module so that it can be installed with a simple 'apt-get install', 'yum install'. In the 'init_server' hook we use the OpenSSL hook 'SSL_CTX_set_tlsext_servername_callback', which makes the module compatible with OpenSSL version 0.9.8j and higher. We can share the concept plugin to developers who have a good idea to solve the problem, set your budget on the module based implementation of this change. We can agree on the final budget later. I can only accept your bid if you can explain how you would like to implement the back-port. Project fee will only be paid for a successful and secure implementation as described above.
Project ID: 9529143

About the project

7 proposals
Remote project
Active 8 yrs ago

Looking to make some money?

Benefits of bidding on Freelancer

Set your budget and timeframe
Get paid for your work
Outline your proposal
It's free to sign up and bid on jobs
Awarded to:
User Avatar
Hi, I carefully read your project description, here is what I understand. In the Apache 2.5 you use SSL_CTX_set_tlsext_servername_callback I guess to retrieve the TLS server name, if it’s the case we can have the same information with Apache 2.x compatible by two ways: 1) We use the same way as “mod_sslhaf” and extracting the server name from the raw ClientHello, it don’t need mod_ssl or OpenSSL. 2) We hook a function after the call of “mod_ssl” module then we get the environment variable SSL_TLS_SNI. (Maybe it will need the SSLOptions StdEnvVars directive) Please let me know if this is correct, I will have a better view if I know what your plug-in concept is. For example acceding to the mod_ssl context will be difficult. PS: The bid price include only the back-port without the new features threading, authentification... Best regards, Marouane
$1,222 USD in 30 days
5.0 (16 reviews)
5.1
5.1
7 freelancers are bidding on average $6,015 USD for this job
User Avatar
Hello I'm interesting your project very well I'm a excellent developer using c, c++, java, jsp, php, perl, python. I m quite well experienced in these jobs. after u sent me project details, we can discuss more details(budget, etc...) Let's go ahead with me I want to service for you continously. Thanks
$10,000 USD in 90 days
4.9 (421 reviews)
8.4
8.4
User Avatar
Can you send me the concept plugin via PM? Once I have it I will check it and get back to you. Regards
$5,000 USD in 30 days
0.0 (0 reviews)
4.3
4.3

About the client

Flag of NETHERLANDS
Halsteren, Netherlands
5.0
10
Payment method verified
Member since Oct 9, 2015

Client Verification

Thanks! We’ve emailed you a link to claim your free credit.
Something went wrong while sending your email. Please try again.
Registered Users Total Jobs Posted
Freelancer ® is a registered Trademark of Freelancer Technology Pty Limited (ACN 142 189 759)
Copyright © 2024 Freelancer Technology Pty Limited (ACN 142 189 759)
Loading preview
Permission granted for Geolocation.
Your login session has expired and you have been logged out. Please log in again.