summaryrefslogtreecommitdiff
path: root/usr.sbin/httpd/server.c
AgeCommit message (Expand)Author
2016-11-17Check the return value of tls_config_set_protocols(), now that it returnsJoel Sing
2016-11-17Move OCSP loading into a separate function - it is not part of the keypairJoel Sing
2016-11-10Fix tcp ip ttl / minttl on IPv6 sockets.Jeremie Courreges-Anglas
2016-11-06conditionalize ocsp load properlyBob Beck
2016-11-06Add OCSP stapling support to httpdBob Beck
2016-08-30Kill (remove) the ps_pid from privsep struct since it is not being usedRafael Zalamena
2016-08-27Kill p_instance from proc.c and remove static proc_id unused variables.Rafael Zalamena
2016-08-26Replace the static env variables with a single global variable.Rafael Zalamena
2016-08-22Enable SNI support in httpd(8).Joel Sing
2016-08-16stop including sys/param.h for nitems. define locally as needed.Ted Unangst
2016-08-16Turn "TLS handshake failed -" log message into a debug message - itReyk Floeter
2016-08-16Rename server_handshake_tls() to server_tls_handshake() to align withReyk Floeter
2016-08-15Move server_match() from parse.y to server.c; use env instead of conf,Joel Sing
2016-08-15Use lowercase 'tls' in debug and log messages for consistency.Joel Sing
2016-08-15Make httpd stricter with respect to TLS configuration - in particular, doJoel Sing
2016-04-28Include the TLS configuration errors in log messages. Also set theJoel Sing
2016-04-19Use log_warnx() instead of log_warn() when the failure will not haveJoel Sing
2015-12-02sync with relayd, use proc_compose()Reyk Floeter
2015-11-23Retire socket_set_blockmode() in favor of the SOCK_NONBLOCK type flag.Reyk Floeter
2015-11-05pledge(2) for httpd.Florian Obser
2015-09-11Fix server_handshake_tls() - we should only call server_input() in the caseJoel Sing
2015-09-10fix return type for tls_read/writeBob Beck
2015-09-10fix after libtls api changesBob Beck
2015-09-10Update httpd to call tls_handshake() after tls_accept_socket().Joel Sing
2015-09-07Fix a regression that was introduced with server.c r1.64: Do NOT freeReyk Floeter
2015-08-20Change httpd(8) to use C99-style fixed-width integers (uintN_t insteadReyk Floeter
2015-08-03Fix rev 1.70 of server.c by only re-enabling the bufferevent if weFlorian Obser
2015-07-29backout the previous: it broke wordpress somehow.Reyk Floeter
2015-07-29Read fcgi response records until we have the whole http header and canFlorian Obser
2015-07-18libtls has been changed to set SSL_MODE_ENABLE_PARTIAL_WRITE andReyk Floeter
2015-07-16If we can read faster from disk than send data to the client stopFlorian Obser
2015-07-15Escape the message in server_log() as well.Reyk Floeter
2015-07-15Close connections that fail to complete a TLS handshake.Joel Sing
2015-07-15Fix typo in comment.Joel Sing
2015-07-15Send the TLS certificate and key via separate imsgs, rather thanJoel Sing
2015-07-15Explicitly check for and handle EOF on a TLS connection.Joel Sing
2015-07-15Fix memory leaks that can occur when config_getserver() fails.Joel Sing
2015-04-23We cannot log errors with server_close() before allocatingFlorian Obser
2015-04-11Always check the return value of proc_composev_imsg() and handle failuresJoel Sing
2015-03-15Prevent use after free.Florian Obser
2015-02-23Add return_uri to serverconfig_reset() to avoid using garbage from theReyk Floeter
2015-02-12Allow TLS protocols to be specified via a "tls protocols" configurationJoel Sing
2015-02-12Change TLS_PROTOCOLS_DEFAULT to be TLSv1.2 only. Add a TLS_PROTOCOLS_ALLJoel Sing
2015-02-07Remove server_load_file() in favor of tls_load_file(3)Reyk Floeter
2015-02-07Add httpd configuration options to allow the specification of DHEJoel Sing
2015-02-07Add support for blocking, dropping, and redirecting requests.Reyk Floeter
2015-01-21httpd is based on relayd and had included many headers that are onlyReyk Floeter
2015-01-19Decouple auth parameters from struct server_config into struct auth.Reyk Floeter
2015-01-16Replace <sys/param.h> with <limits.h> and other less dirty headers whereTheo de Raadt
2015-01-13bump copyright yearReyk Floeter