Age | Commit message (Expand) | Author |
2017-03-25 | Implement TLS ticket support in httpd. Off by default. Use | Claudio Jeker |
2017-02-07 | /tmp/cvsspEkok | Reyk Floeter |
2017-01-27 | More s/OSCP/OCSP/ typos | Tom Cosgrove |
2017-01-05 | Replace hand-rolled for(;;) emptying of 'symhead' TAILQ with more | Kenneth R Westerback |
2017-01-05 | Replace symset()'s hand-rolled for(;;) traversal of 'symhead' TAILQ | Kenneth R Westerback |
2016-11-17 | Move OCSP loading into a separate function - it is not part of the keypair | Joel Sing |
2016-11-06 | since ocsp stapling is optional, make sure we guard if we do not have it. | Bob Beck |
2016-11-06 | Add OCSP stapling support to httpd | Bob Beck |
2016-09-03 | Replace [RELAY|SERVER]_MAXPROC with the new PROC_MAX_INSTANCES | Reyk Floeter |
2016-08-22 | Enable SNI support in httpd(8). | Joel Sing |
2016-08-15 | Move server_match() from parse.y to server.c; use env instead of conf, | Joel Sing |
2016-08-15 | Make httpd stricter with respect to TLS configuration - in particular, do | Joel Sing |
2016-06-21 | do not allow whitespace in macro names, i.e. "this is" = "a variable". | Sebastian Benoit |
2015-11-22 | Update log.c: change fatal() and fatalx() into variadic functions, | Reyk Floeter |
2015-08-20 | stdlib.h is in scope; do not cast malloc/calloc/realloc* | Theo de Raadt |
2015-08-20 | Change httpd(8) to use C99-style fixed-width integers (uintN_t instead | Reyk Floeter |
2015-08-19 | spacing | Reyk Floeter |
2015-07-19 | For the completeness of HSTS, add the non-standard preload option. | Reyk Floeter |
2015-07-18 | Allow to change the default media type globally or per-location, | Reyk Floeter |
2015-07-18 | Implement HTTP Strict Transport Security (HSTS). | Florian Obser |
2015-07-16 | spacing | Reyk Floeter |
2015-07-15 | Unbreak configurations that have a non-TLS listen statement followed by a | Joel Sing |
2015-06-23 | Add initial support for pattern matching using Lua's pattern matching code. | Reyk Floeter |
2015-04-01 | Zero the tls cert/key length variables when inheriting a server | Jonathan Gray |
2015-03-09 | Make httpd TLSv1.2-only by default. Some older browsers, like IE 10, | Reyk Floeter |
2015-02-12 | Allow TLS protocols to be specified via a "tls protocols" configuration | Joel Sing |
2015-02-08 | Use AI_ADDRCONFIG when resolv hosts on startup. | Reyk Floeter |
2015-02-08 | spacing | Reyk Floeter |
2015-02-07 | Add httpd configuration options to allow the specification of DHE | Joel Sing |
2015-02-07 | Add support for blocking, dropping, and redirecting requests. | Reyk Floeter |
2015-02-06 | Fix log options in locations. | Reyk Floeter |
2015-01-29 | Fix a regression that removed support for using service names instead | Reyk Floeter |
2015-01-21 | httpd is based on relayd and had included many headers that are only | Reyk Floeter |
2015-01-19 | No need to include pfvar.h, another leftover from relayd. It was also | Reyk Floeter |
2015-01-19 | Decouple auth parameters from struct server_config into struct auth. | Reyk Floeter |
2015-01-18 | First stab at implementing basic auth. | Florian Obser |
2015-01-16 | Replace <sys/param.h> with <limits.h> and other less dirty headers where | Theo de Raadt |
2015-01-13 | bump copyright year | Reyk Floeter |
2015-01-07 | Relax configuration list parsing to allow multi-line blocks for tls, | Reyk Floeter |
2015-01-06 | Only open a socket once for each unique "listen on" statement. This | Reyk Floeter |
2015-01-04 | add new url stripping option: | Christopher Zimmermann |
2015-01-03 | Reset tls key and cert to NULL when duplicating a server - avoids a | Reyk Floeter |
2015-01-03 | Tweak previous - add a missing free in the error path. | Reyk Floeter |
2015-01-03 | Support alias names and multiple listen statements per server block. | Reyk Floeter |
2014-12-21 | Stop pulling in <arpa/inet.h> or <arpa/nameser.h> when unnecessary. | Philip Guenther |
2014-12-18 | Accept * as an alias for the default ipv4 listen address. | Reyk Floeter |
2014-12-12 | Like previously done in relayd, change the keyword "ssl" to "tls" to | Reyk Floeter |
2014-12-04 | stop viral header propagation. none of this code uses sys/hash.h | Ted Unangst |
2014-11-20 | Don't allow embedded nul characters in strings. | Jonathan Gray |
2014-11-11 | Allow the log directory to be configurable in the config file, rather than | Bob Beck |