summaryrefslogtreecommitdiff
path: root/usr.sbin/httpd/server.c
AgeCommit message (Expand)Author
2015-09-10fix return type for tls_read/writeBob Beck
2015-09-10fix after libtls api changesBob Beck
2015-09-10Update httpd to call tls_handshake() after tls_accept_socket().Joel Sing
2015-09-07Fix a regression that was introduced with server.c r1.64: Do NOT freeReyk Floeter
2015-08-20Change httpd(8) to use C99-style fixed-width integers (uintN_t insteadReyk Floeter
2015-08-03Fix rev 1.70 of server.c by only re-enabling the bufferevent if weFlorian Obser
2015-07-29backout the previous: it broke wordpress somehow.Reyk Floeter
2015-07-29Read fcgi response records until we have the whole http header and canFlorian Obser
2015-07-18libtls has been changed to set SSL_MODE_ENABLE_PARTIAL_WRITE andReyk Floeter
2015-07-16If we can read faster from disk than send data to the client stopFlorian Obser
2015-07-15Escape the message in server_log() as well.Reyk Floeter
2015-07-15Close connections that fail to complete a TLS handshake.Joel Sing
2015-07-15Fix typo in comment.Joel Sing
2015-07-15Send the TLS certificate and key via separate imsgs, rather thanJoel Sing
2015-07-15Explicitly check for and handle EOF on a TLS connection.Joel Sing
2015-07-15Fix memory leaks that can occur when config_getserver() fails.Joel Sing
2015-04-23We cannot log errors with server_close() before allocatingFlorian Obser
2015-04-11Always check the return value of proc_composev_imsg() and handle failuresJoel Sing
2015-03-15Prevent use after free.Florian Obser
2015-02-23Add return_uri to serverconfig_reset() to avoid using garbage from theReyk Floeter
2015-02-12Allow TLS protocols to be specified via a "tls protocols" configurationJoel Sing
2015-02-12Change TLS_PROTOCOLS_DEFAULT to be TLSv1.2 only. Add a TLS_PROTOCOLS_ALLJoel Sing
2015-02-07Remove server_load_file() in favor of tls_load_file(3)Reyk Floeter
2015-02-07Add httpd configuration options to allow the specification of DHEJoel Sing
2015-02-07Add support for blocking, dropping, and redirecting requests.Reyk Floeter
2015-01-21httpd is based on relayd and had included many headers that are onlyReyk Floeter
2015-01-19Decouple auth parameters from struct server_config into struct auth.Reyk Floeter
2015-01-16Replace <sys/param.h> with <limits.h> and other less dirty headers whereTheo de Raadt
2015-01-13bump copyright yearReyk Floeter
2015-01-06Only open a socket once for each unique "listen on" statement. ThisReyk Floeter
2014-12-21Stop pulling in <arpa/inet.h> or <arpa/nameser.h> when unnecessary.Philip Guenther
2014-12-12Like previously done in relayd, change the keyword "ssl" to "tls" toReyk Floeter
2014-12-04stop viral header propagation. none of this code uses sys/hash.hTed Unangst
2014-10-31Update httpd(8) to use libtls instead of libressl.Joel Sing
2014-10-25Remove unnecessary netinet/in_systm.h include.Lawrence Teo
2014-10-03Update ressl configuration to handle recent changes in the library.Joel Sing
2014-10-02Fix an error case that was never handled ending up in an endless eventReyk Floeter
2014-09-05Remove a limitation that only allowed to specify a server name once.Reyk Floeter
2014-09-02FastCGI did not support persistent connections. Add initial supportReyk Floeter
2014-08-27Write all data before closing the server socket if the output bufferReyk Floeter
2014-08-06Use memset(buf instead of memset(&buf.Reyk Floeter
2014-08-06Also clean up the public key when it is no longer needed.Joel Sing
2014-08-06Configure the default SSL ciphers as HIGH:!aNULL.Joel Sing
2014-08-06http POST supportFlorian Obser
2014-08-06spacingReyk Floeter
2014-08-06The watermark exposed a bug in server_write that broke keep-aliveReyk Floeter
2014-08-06Bring back the last read (done) / last write (done) messages instead of justReyk Floeter
2014-08-06Adjust the read/write watermarks according to the TCP send buffer.Reyk Floeter
2014-08-06add missing va_start/va_end callsJonathan Gray
2014-08-06Load the SSL public/private keys in the parent process, then provide themJoel Sing