index
:
src
cvs/HEAD
kms/intel
kms/radeon
master
OpenBSD base system
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
usr.sbin
/
relayd
/
ca.c
Age
Commit message (
Expand
)
Author
2022-01-20
catch poll() returning EINTR.
Sebastian Benoit
2022-01-11
Convert relayd for opaque RSA_METHOD
Theo Buehler
2021-12-08
zap a stray space
Theo Buehler
2021-03-23
Timed out RSA key ops, may leave uncalled for responses in the imsg return
Claudio Jeker
2019-05-31
Move the relay keys/certs into a separate global list and look them up by id.
Reyk Floeter
2018-09-19
Do not abort when the ca privenc runs into a timeout.
Reyk Floeter
2018-01-24
Log some more errors in the ca code, since there seems to be still a bug
Claudio Jeker
2018-01-01
RSA_private_{en,de}crypt() can fail and will return -1 in that case.
Claudio Jeker
2017-11-28
relay_load_fd() is no longer clobering errno in the error case so use
Claudio Jeker
2017-11-27
Make ca_launch error messages unique.
Alexander Bluhm
2017-11-27
Use file descriptor passing to load certificates into the relays. Especially
Claudio Jeker
2017-08-09
Use X509_pubkey_digest() like libtls to hash the keys for the TLS privsep
Claudio Jeker
2017-07-28
Always calculate the hash value of the x509 cert in ssl_load_pkey().
Alexander Bluhm
2017-05-28
use __func__ in log messages. fix some whitespace while here.
Sebastian Benoit
2017-05-27
Migrate relayd to use libtls for TLS. Still does the TLS privsep via the
Claudio Jeker
2017-04-06
fix format string found by clang -Wformat-security
Gleydson Soares
2016-09-28
Add -Wcast-qual and cast away one false positive where we use a const
Reyk Floeter
2016-09-03
Use the fork+exec privsep model in relayd; based on rzalamena@'s work
Reyk Floeter
2016-09-02
Split "struct relayd" into two structs: "struct relayd" and "struct
Reyk Floeter
2016-09-02
proc_id has been replaced by ps->ps_instance.
Reyk Floeter
2016-09-02
As done in httpd, remove ps_ninstances and p_instance.
Reyk Floeter
2016-09-02
Terminate relayd using the socket status instead of watching SIGCHLD
Reyk Floeter
2016-09-01
Do not busy loop in the rsa engine callback waiting for the ca. Instead use
Claudio Jeker
2015-12-05
EAGAIN handling for imsg_read. OK henning@ benno@
Claudio Jeker
2015-12-02
In most cases we don't need all arguments of proc_compose*_imsg(),
Reyk Floeter
2015-10-10
relayd's ca process pledges to only use stdio.
Sebastian Benoit
2015-05-02
Fix obvious problems with relayd config reload.
Claudio Jeker
2015-01-22
Clean up the relayd headers with help of include-what-you-use and some
Reyk Floeter
2015-01-16
Adapt to <limits.h> universe.
Theo de Raadt
2014-12-12
Change the keyword "ssl" to "tls" to reflect reality since we
Reyk Floeter
2014-10-02
no need to set the same field NULL twice ;-)
Gilles Chehade
2014-05-04
Create a new default RSA engine instead of patching the existing one
Reyk Floeter
2014-04-22
Support the CA key for SSL inspection in the ca process. Instead of
Reyk Floeter
2014-04-21
Use RSA_set_ex_data()/RSA_get_ex_data() directly instead of
Reyk Floeter
2014-04-21
The OpenSSL engine passes a "const u_char *" to the callback but
Reyk Floeter
2014-04-18
spacing
Reyk Floeter
2014-04-18
Fix SSL client-only mode when no RSA private key is needed.
Reyk Floeter
2014-04-18
The RSA_FLAG_SIGN_VER is not yet supported and the current code uses
Reyk Floeter
2014-04-18
Introduce privsep for private keys:
Reyk Floeter
