| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Check the return value of tls_config_set_protocols(), now that it returns |   jsing | 2016-11-17 | 1 | -4/+7 |
| | | | | | an int. | ||||
| * | Move OCSP loading into a separate function - it is not part of the keypair | jsing | 2016-11-17 | 3 | -22/+42 |
| | | | | | | | and this way we can give a separate specific error message. ok beck@ reyk@ | ||||
| * | specify ordering and precedence of location { } sections; |   schwarze | 2016-11-14 | 1 | -2/+7 |
| | | | | | patch from grunk@; feedback and OK jmc@; OK florian@ | ||||
| * | Fix tcp ip ttl / minttl on IPv6 sockets. |   jca | 2016-11-10 | 1 | -7/+25 |
| | | | | | ok florian@ | ||||
| * | conditionalize ocsp load properly |   beck | 2016-11-06 | 1 | -8/+10 |
| | | | | | ok jsing@ | ||||
| * | since ocsp stapling is optional, make sure we guard if we do not have it. | beck | 2016-11-06 | 1 | -4/+6 |
| | | | | | ok jsing@ | ||||
| * | tweak previous; |   jmc | 2016-11-06 | 1 | -4/+4 |
| | | |||||
| * | Add OCSP stapling support to httpd | beck | 2016-11-06 | 5 | -10/+96 |
| | | | | | ok jsing@ bcook@ | ||||
| * | copy updated log.c from vmd: for correctness, save errno when doing |   reyk | 2016-10-12 | 1 | -8/+11 |
| | | | | | additional actions before printing it. OK rzalamena@ | ||||
| * | Prevent fd exhaustion in the parent when loading the listening server | reyk | 2016-10-12 | 3 | -8/+42 |
| | | | | | | | | | sockets by sending the fd one-by-one. This allows to start httpd with max 32 server instances and many server sockets without changing the default rlimits in any way. OK rzalamena@ | ||||
| * | Modify httpd(8)'s proc.c to use less file descriptors during the daemon |   rzalamena | 2016-10-10 | 1 | -66/+73 |
| | | | | | | | | | | | start up. To achieve this proc_init() initiates only the necessary pipes between child and parent, allocate and distribute fds in proc_connect(). In case of configuration checks ('-n') we do nothing in proc_init() and proc_connect(). ok reyk@ | ||||
| * | Fix msgbuf_write() usage idiom and modify the treatment for socket close | rzalamena | 2016-10-10 | 1 | -2/+8 |
| | | | | | | | to exit gracefully instead of fatal()ing. ok reyk@ | ||||
| * | Add more context to fatal*() messages so it makes easier to debug proc.c | rzalamena | 2016-10-10 | 1 | -12/+11 |
| | | | | | | | internals. ok phessler@ | ||||
| * | The strchr() call either returns a NULL pointer, on which the code will |   patrick | 2016-10-07 | 1 | -7/+4 |
| | | | | | | | | break out of the loop, or a pointer to ':'. Thus the extra check for ':' is unnecessary and can be removed. ok jung@ | ||||
| * | Empty lines cause server_fcgi_getheaders() to immediately return. | patrick | 2016-10-07 | 1 | -3/+6 |
| | | | | | | | | | Unfortunately in that case the line was not freed. This lead to a memleak on each request. Thus, save the return value prior to returning, free the line and return the saved value. ok jung@ | ||||
| * | Check if oldd == newd before dup2(), if that is the case we need to remove | rzalamena | 2016-10-05 | 1 | -2/+8 |
| | | | | | | | the CLOEXEC flag ourselves. ok bluhm@, deraadt@ | ||||
| * | Call setsid() to create a new session for the executed processes. | reyk | 2016-10-05 | 1 | -1/+5 |
| | | | | | | From deraadt@ OK rzalamena@ | ||||
| * | sync proc.c with vmd: add p_pw to specify a non-standard user for a process. | reyk | 2016-10-05 | 2 | -4/+11 |
| | | | | | OK rzalamena@ | ||||
| * | Add -Wcast-qual after syncing proc.c fix | reyk | 2016-09-28 | 1 | -2/+2 |
| | | |||||
| * | sync proc.c from switchd, includes minor cast qual fix and removal of p_env. | reyk | 2016-09-28 | 3 | -9/+9 |
| | | |||||
| * | add some Xr for acme-client(1); | jmc | 2016-09-15 | 1 | -2/+3 |
| | | |||||
| * | Replace [RELAY|SERVER]_MAXPROC with the new PROC_MAX_INSTANCES | reyk | 2016-09-03 | 3 | -12/+9 |
| | | | | | | | | variable and limit it from 128 to 32 instances (the old value). While here, move a few PROC_ defines around. OK rzalamena@ | ||||
| * | Use DPRINTF instead of #ifdef DEBUG + log_debug(). | reyk | 2016-09-03 | 1 | -4/+2 |
| | | | | | Pointed out by benno@ | ||||
| * | proc.c tweaks: Rename proc_listento() to proc_accept() as it is the | reyk | 2016-09-02 | 3 | -46/+50 |
| | | | | | | | | | receiving side of proc_connect(). Move some code from main into proc_init(), the function is now called by parent and children, not just the parent and it is less copy + paste for other daemons. OK florian@ | ||||
| * | The fork+exec diff broke "what?!", the ps_what field determines the | reyk | 2016-09-01 | 1 | -7/+6 |
| | | | | | | | | | configuration that has to be initialized in each process and was inherited from the parent instead of setting it everywhere. I'm surprised that it worked. OK florian | ||||
| * | Don't print "lost child" if the child process exited okay. This is | reyk | 2016-09-01 | 1 | -3/+5 |
| | | | | | the old behaviour and unbreaks the regress tests. | ||||
| * | struct client starts to become the kitchen sink. Move fastcgi data to |   florian | 2016-09-01 | 2 | -47/+51 |
| | | | | | its own struct. Requested by and OK reyk@ | ||||
| * | spacing | reyk | 2016-09-01 | 5 | -11/+14 |
| | | |||||
| * | Adjust log message, use process title now that it works again | reyk | 2016-09-01 | 1 | -4/+6 |
| | | |||||
| * | Teach httpd/proc.c how to fork+exec. | rzalamena | 2016-09-01 | 3 | -173/+334 |
| | | | | | | | | | This commit implemented the basic functions to proc.c to make it not rely on global variables, malloc()ed memory and CLOEXEC pipes. Fix child proc titles from reyk@ ok reyk@, florian@ | ||||
| * | Kill (remove) the ps_pid from privsep struct since it is not being used | rzalamena | 2016-08-30 | 4 | -16/+12 |
| | | | | | | | anymore. Also fix the process initialization prototypes. ok reyk@ | ||||
| * | Terminate daemon using the socket status instead of watching SIGCHLD or | rzalamena | 2016-08-30 | 2 | -61/+27 |
| | | | | | | | | kill()ing child process. "Looks good to me" millert@ ok benno@ | ||||
| * | Remove duplicated prototypes from header. | rzalamena | 2016-08-30 | 1 | -4/+1 |
| | | | | | "Looks good to me" natano@ | ||||
| * | Do not assume that the full http response header is in the first | florian | 2016-08-30 | 2 | -11/+23 |
| | | | | | | | | | | fastcgi stdout record. Keep processing stdout records until we found the header / body separator and only then generate the header response. Problem reported by many. OK jung@ | ||||
| * | Kill p_instance from proc.c and remove static proc_id unused variables. | rzalamena | 2016-08-27 | 5 | -29/+15 |
| | | | | | | | | | | To keep the debug functionality intact and correct we'll use the pid field in the imsg header to pass the instance number. Remember to always pass 'ps_instance + 1' otherwise libutil will fill imsg header pid field with the imsgbuf pid (which is the current process pid). ok reyk@ | ||||
| * | Kill the ps_ninstances from proc.c. | rzalamena | 2016-08-26 | 3 | -14/+14 |
| | | | | | | | | We got the same information in ps_instances[proc] (more accurate) and we avoid allocating unnecessary memory for pipe storage. ok reyk@ | ||||
| * | Replace the static env variables with a single global variable. | rzalamena | 2016-08-26 | 4 | -43/+36 |
| | | | | | ok reyk@ | ||||
| * | Enable SNI support in httpd(8). | jsing | 2016-08-22 | 3 | -10/+31 |
| | | | | | ok reyk@ | ||||
| * | stop including sys/param.h for nitems. define locally as needed. |   tedu | 2016-08-16 | 4 | -7/+8 |
| | | | | | ok natano reyk | ||||
| * | Turn "TLS handshake failed -" log message into a debug message - it | reyk | 2016-08-16 | 1 | -2/+2 |
| | | | | | | | happens way too often and does not provide much information. OK jung@ | ||||
| * | Rename server_handshake_tls() to server_tls_handshake() to align with | reyk | 2016-08-16 | 1 | -6/+6 |
| | | | | | | the other server_tls_* functions (and I like the prefix notation better). No functional change. | ||||
| * | Move server_match() from parse.y to server.c; use env instead of conf, | jsing | 2016-08-15 | 3 | -31/+32 |
| | | | | | which is actually the same thing (cluebat from reyk@). | ||||
| * | Use lowercase 'tls' in debug and log messages for consistency. | jsing | 2016-08-15 | 2 | -11/+11 |
| | | | | | Requested by reyk@ | ||||
| * | Make httpd stricter with respect to TLS configuration - in particular, do | jsing | 2016-08-15 | 3 | -37/+101 |
| | | | | | | | | | | | | | not allow TLS and non-TLS to be configured on the same port, do not allow TLS options to be specified without a TLS listener and ensure that the TLS options are the same when a server is specified on the same address/port. Currently, these configurations are permitted but do not work as intended. Also factor out and reuse the server matching code, which was previously duplicated. ok reyk@ | ||||
| * | sync http.h with relayd |   benno | 2016-08-01 | 1 | -1/+2 |
| | | | | | ok reyk@ | ||||
| * | According to RFC 7231 4.3.7, OPTIONS may have body. "Although this | reyk | 2016-07-27 | 1 | -2/+2 |
| | | | | | | | | | | specification does not define any use for such a payload, future extensions to HTTP might use the OPTIONS body to make more detailed queries about the target resource." The future has arrived. Found and tested by Michael Lechtermann OK benno@ | ||||
| * | Adjust existing tls_config_set_cipher() callers for TLS cipher group | jsing | 2016-07-13 | 1 | -2/+2 |
| | | | | | | | | changes - map the previous configuration to the equivalent in the new groups. This will be revisited post release. Discussed with beck@ | ||||
| * | do not allow whitespace in macro names, i.e. "this is" = "a variable". | benno | 2016-06-21 | 1 | -1/+9 |
| | | | | | | | | | change this in all config parsers in our tree that support macros. problem reported by sven falempin. feedback from henning@, stsp@, deraadt@ ok florian@ mikeb@ | ||||
| * | grammar fix; from nick permyakov | jmc | 2016-06-10 | 1 | -3/+3 |
| | | |||||
| * | & expands to the maximum amount of needed space; fix comment. | florian | 2016-06-10 | 1 | -2/+2 |
| | | | | | Pointed out by Frank Schoep, thanks! | ||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |