summaryrefslogtreecommitdiff
path: root/usr.sbin/hoststated/relay.c
AgeCommit message (Expand)Author
2007-10-22we don't need mmap/munmap in relay_load_certificates anymore...Reyk Floeter
2007-10-22load certificates text at parse time. then load them in relay processes.Pierre-Yves Ritschard
2007-10-19Move relays from static TAILQs to allocated ones.Pierre-Yves Ritschard
2007-10-05stylistic changes in the relay/relay_config structure.Reyk Floeter
2007-10-05unbreak non-SSL relays by calling the ssl context init only if the SSLReyk Floeter
2007-10-01kill some remaining debug that snuk in.Pierre-Yves Ritschard
2007-09-28Change the ssl_privsep code to work on char buffers.Pierre-Yves Ritschard
2007-09-27Move SSL context creation after privileges are dropped.Pierre-Yves Ritschard
2007-09-27Simplify ssl_privsep.c, since it won't need to remain synced with thePierre-Yves Ritschard
2007-09-25Introduce two new functions to be able to load certificates whilePierre-Yves Ritschard
2007-09-10add support for relaying DNS traffic (with a little bit of packetReyk Floeter
2007-09-07add an interface to dump running relay sessions to the control socketReyk Floeter
2007-09-06rename relay_host to print_host in log.cReyk Floeter
2007-09-05be extra careful with pointers in session_cmpReyk Floeter
2007-09-05store relay sessions in SPLAY trees instead of TAILQ lists. this willReyk Floeter
2007-09-04small fix in the error path when accepting new relay sessionsReyk Floeter
2007-09-04support chained ssl certificates; a chain can be added to theReyk Floeter
2007-07-26Combine http filter/expect cases to simplify code.Jonathan Gray
2007-06-19Do not fatal out with ``pipe closed'' when a short read occurs on onePierre-Yves Ritschard
2007-06-12put the fd passing from bgpd back in to hoststated's version of imsg,Mathieu Sauve-Frankel
2007-06-07(finally) Enable reload support for layer 3 configurations.Pierre-Yves Ritschard
2007-05-29move the ssl cipher suite string to a (small) static charbuf,Pierre-Yves Ritschard
2007-05-29move struct relay to the runtime + config scheme.Pierre-Yves Ritschard
2007-05-28another small step towards hoststated reloading.Pierre-Yves Ritschard
2007-05-27Second step towards hoststated reload:Pierre-Yves Ritschard
2007-05-26first steps for implementing reload:Pierre-Yves Ritschard
2007-05-02It is no longer needed to pass a cleared timeval to event_loopexit() NULLClaudio Jeker
2007-04-12add a new relay 'path' action to filter the URL path and arguments.Reyk Floeter
2007-04-10move the decoding of the URL, independent from the node lookups, weReyk Floeter
2007-04-10it is a better idea to handle all enum values in the switch statementReyk Floeter
2007-04-10the relay filter action needs special handling to work correctlyReyk Floeter
2007-03-21in addition to the host retry option in tables, add support for theReyk Floeter
2007-03-17close unused relay2pfe privsep sockets correctlyReyk Floeter
2007-03-17fix the natlook mode.Reyk Floeter
2007-03-13allow to specify the IP_TTL and IP_MINTTL options for the relays toReyk Floeter
2007-03-07- fix the hoststatectl host disable/enable commands to work with relayReyk Floeter
2007-03-06add support for handling simple HTTP cookies (no per-path/domainReyk Floeter
2007-03-05do not strip the header for expect, hash, and log actions.Reyk Floeter
2007-03-02when the http read callback changes and some data is still left in theReyk Floeter
2007-02-27in addition to actions on request headers, allow to define relayReyk Floeter
2007-02-26handle strlcpy return values, make lint happyReyk Floeter
2007-02-26better error handling for buffer I/O, fix the log actionReyk Floeter
2007-02-26handle requests with chunked transfer-encoding.Reyk Floeter
2007-02-26tweak flushing of unwritten bytes on http mode changesReyk Floeter
2007-02-26spacingReyk Floeter
2007-02-26improve the relay bufferevent handler if one side closed the connectionReyk Floeter
2007-02-26re-use the retry value from table host entries for inbound relayReyk Floeter
2007-02-26fix small memleaksReyk Floeter
2007-02-25one example (of two) of tree breaking the "other gcc"Theo de Raadt
2007-02-24disable SSLv2 and use "HIGH" crypto cipher suites by default.Reyk Floeter