We did not check if a selected wildcard match actually had any wildcard rule.
We do so now, next to that the redirection between any vserver check now forces an explicit
redirection which forces the Error box to be gone when pressing solve.

Thanks a million for @manykg who reported this issue #1017, commiting directly to master.
ssl: Allow to specify a fixed length

By default openssl will only get 512 or 1024 (depending only of the
"export" setting). But 1024 is a bit short nowadays and 2048 is
recommended. It does break compatibility in very rare case, so it's
left by default to auto. (there is no negotiation, the client has to
support whatever the server sends)

Signed-off-by: Sylvain Munaut <tnt@246tNt.com>
ssl: OpenSSL 0.9.8 can support ECDH as well

It's true that ECDH ciphers are not in the default cipher suites in this
release, but it fully supports ECDH and if you explicitely ask for theses
cipher, it will work just fine.

Signed-off-by: Sylvain Munaut <tnt@246tNt.com>
Merge pull request #1028 from smunaut/fix_ecdh_openssl_0.9.8

ssl: OpenSSL 0.9.8 can support ECDH as well
ssl: Add a 'tolerate' option for client certificate verification

This option is very similar to accept with the exception that if the
certificate that's sent by the client can't be validated, the SSL
handshake will not be abruptly terminate but it will continue.

The application that use the client certificate should in any case call
the SSL_get_verify_status and this will still return that the validation
failed and the cert be ignored.

This is mainly useful because Apple, in it's great wisdom, decided to
make Safari send just about any client cert, even those not matching at
all the CA list sent by the server ... The only way to use client cert
with Safari is then to just accept any client cert and just ignore it
if it's invalid rather than preventing the SSL negotiation.

Signed-off-by: Sylvain Munaut <tnt@246tNt.com>
Merge pull request #1023 from smunaut/feature_dh_length

ssl: Allow to specify a fixed length
Merge branch 'feature_ssl_client_cert_tolerate' of github.com:smunaut/webserver into smunaut-feature_ssl_client_cert_tolerate

Conflicts:
	admin/PageVServer.py
fix issue #1034
Merge pull request #1035 from BeQ/fix_admin_osx_10.9

Fix issue #1034 thanks for fixing this one guys!