summaryrefslogtreecommitdiffstats
path: root/usr.sbin/relayd/relay.c (follow)
Commit message (Expand)AuthorAgeFilesLines
* Enable TLSv1.3 support in relayd(8)pvk2020-05-141-1/+3
* Don't "forward to <table>" when a "forward to destination" address is set.chrisz2019-07-131-2/+3
* When system calls indicate an error they return -1, not some arbitraryderaadt2019-06-281-3/+3
* Add support for OCSP staplingreyk2019-06-261-5/+17
* Move the relay keys/certs into a separate global list and look them up by id.reyk2019-05-311-27/+43
* Move relay_load_*() functions into relayd.creyk2019-05-291-101/+1
* Fix filter rules with "forward to" statement in persistent connections.reyk2019-05-131-19/+49
* Add support for from/to in relay filter rules.reyk2019-05-101-15/+33
* Fix and tweak websocket upgrade handling.reyk2019-05-081-8/+2
* Support for rfc 6455 Websockets connection upgrade. Add a new protocolbenno2019-03-041-2/+8
* Do not abort when the ca privenc runs into a timeout.reyk2018-09-191-1/+9
* replace the current log optionsbenno2018-08-061-41/+52
* When a TLS error occurs, print the tls_error() message as part of thebenno2018-06-101-5/+9
* Remove RELAY_MAX_SESSIONS from relayd, there is no reason to limit relaysclaudio2018-04-181-3/+2
* log specific error when connect() fails.benno2017-12-271-6/+17
* Introduce relay_reset_event() which closes and resets a relay connection.claudio2017-11-281-27/+37
* In TLS inspection mode we also need to keep the server tls object around.claudio2017-11-281-4/+5
* Add space between to and read like in other DPRINTFs.claudio2017-11-281-2/+2
* Change the ecdhe curve configuration to the same way httpd is doing it.claudio2017-11-271-4/+4
* lseek/read is racy when there is multiple consumers. Use pread instead.claudio2017-11-271-4/+5
* Add a DPRINTF() in relay_error() that helped me out way too many times.claudio2017-11-271-1/+3
* Use file descriptor passing to load certificates into the relays. Especiallyclaudio2017-11-271-34/+55
* Do not rip out the output buffer of the bufferevent. Instead just use anclaudio2017-11-271-7/+8
* relay_tls_connected() is playing with the inner bowels of bufferevents.claudio2017-11-271-1/+4
* The relayd regression tests for chunked HTTP traffic were failingbluhm2017-09-231-3/+5
* Do not close the relay if data is still in the output buffer.bluhm2017-08-281-4/+4
* Call tls_config_skip_private_key_check() to disable the key checking inclaudio2017-08-091-1/+4
* Fix a double free of the TLS config in the error path.bluhm2017-07-301-4/+3
* Always calculate the hash value of the x509 cert in ssl_load_pkey().bluhm2017-07-281-3/+7
* make relayd not crash in relay_udp_server() when using a dns relay.benno2017-07-041-3/+3
* use __func__ in log messages. fix some whitespace while here.benno2017-05-281-20/+20
* Migrate relayd to use libtls for TLS. Still does the TLS privsep via theclaudio2017-05-271-475/+338
* Disable client-initiated TLS renegotiation by default.reyk2017-02-021-61/+5
* Stop accessing verbose and debug variables from log.c directly.reyk2017-01-091-4/+2
* Fix tcp ip ttl / minttl on IPv6 sockets.jca2016-11-101-7/+25
* fix DEBUG build after ps->ps_instance changebenno2016-09-291-2/+2
* spacingreyk2016-09-261-3/+3
* use sizeof instead of constant 16 in function callsjsg2016-09-231-6/+10
* Change function arguments from "unsigned char keyname[16]" tojsg2016-09-221-5/+5
* correct invalid use of sizeofjsg2016-09-221-3/+3
* Split "struct relayd" into two structs: "struct relayd" and "structreyk2016-09-021-8/+10
* proc_id has been replaced by ps->ps_instance.reyk2016-09-021-10/+12
* As done in httpd, remove ps_ninstances and p_instance.reyk2016-09-021-4/+1
* Terminate relayd using the socket status instead of watching SIGCHLDreyk2016-09-021-6/+3
* Switch from the not really working session cache (because of the multiprocessclaudio2016-09-011-18/+86
* SSL_CTX_free() and SSL_free() check for null so dont do it in relaydbenno2015-12-301-5/+3
* completly -> completelymmcc2015-12-241-2/+2
* Remove NULL-checks before free(). No functional change.mmcc2015-12-071-13/+7
* initialize host, to get rid of gcc warning, the conditions are correct.benno2015-12-051-2/+2
* pledge the relay (layer 7 proxy) children, they can do with "stdiobenno2015-12-041-1/+4