require OpenSSL
Get rid of custom HMAC implementation in favor of OpenSSLs (upgrade to SHA256 as well)
update reaadme
Add missing m4 file for OpenSSL detection
Include OpenSSL dependency in spec file
[security] Stop printing generated server-secret
[security] Keep all enthropy bits of the generated secret
[security] Make sure to explain cookies need to be sent via HTTPS
and with the PersonaAuthCookieSecure option set to ON. In docs and
sample config files
[security] replace uses of strcmp() with strncmp()
Cookies are now JSON encoded
version cookies
dup the string
Silence clang warning
fix format mistake
Add base64url (RFC4648) encoders/decoders for cookie-safe encodings
Cookies are now Base64URL encoded, no more plain JSON visible
Merge branch 'secreview-2013-11-01' of github.com:gozer-mozilla/mod_authn_persona into secreview-2013-11-01
make indent
Test for various warning compiler flags
Merge branch 'gozer'
add m4 macro for checking compiler flags