summaryrefslogtreecommitdiff
path: root/usr.sbin/relayd/ca.c
AgeCommit message (Expand)Author
2017-05-28use __func__ in log messages. fix some whitespace while here.Sebastian Benoit
2017-05-27Migrate relayd to use libtls for TLS. Still does the TLS privsep via theClaudio Jeker
2017-04-06fix format string found by clang -Wformat-securityGleydson Soares
2016-09-28Add -Wcast-qual and cast away one false positive where we use a constReyk Floeter
2016-09-03Use the fork+exec privsep model in relayd; based on rzalamena@'s workReyk Floeter
2016-09-02Split "struct relayd" into two structs: "struct relayd" and "structReyk Floeter
2016-09-02proc_id has been replaced by ps->ps_instance.Reyk Floeter
2016-09-02As done in httpd, remove ps_ninstances and p_instance.Reyk Floeter
2016-09-02Terminate relayd using the socket status instead of watching SIGCHLDReyk Floeter
2016-09-01Do not busy loop in the rsa engine callback waiting for the ca. Instead useClaudio Jeker
2015-12-05EAGAIN handling for imsg_read. OK henning@ benno@Claudio Jeker
2015-12-02In most cases we don't need all arguments of proc_compose*_imsg(),Reyk Floeter
2015-10-10relayd's ca process pledges to only use stdio.Sebastian Benoit
2015-05-02Fix obvious problems with relayd config reload.Claudio Jeker
2015-01-22Clean up the relayd headers with help of include-what-you-use and someReyk Floeter
2015-01-16Adapt to <limits.h> universe.Theo de Raadt
2014-12-12Change the keyword "ssl" to "tls" to reflect reality since weReyk Floeter
2014-10-02no need to set the same field NULL twice ;-)Gilles Chehade
2014-05-04Create a new default RSA engine instead of patching the existing oneReyk Floeter
2014-04-22Support the CA key for SSL inspection in the ca process. Instead ofReyk Floeter
2014-04-21Use RSA_set_ex_data()/RSA_get_ex_data() directly instead ofReyk Floeter
2014-04-21The OpenSSL engine passes a "const u_char *" to the callback butReyk Floeter
2014-04-18spacingReyk Floeter
2014-04-18Fix SSL client-only mode when no RSA private key is needed.Reyk Floeter
2014-04-18The RSA_FLAG_SIGN_VER is not yet supported and the current code usesReyk Floeter
2014-04-18Introduce privsep for private keys:Reyk Floeter