summaryrefslogtreecommitdiff
path: root/usr.sbin/relayd/relay.c
AgeCommit message (Expand)Author
2017-12-27log specific error when connect() fails.Sebastian Benoit
2017-11-28Introduce relay_reset_event() which closes and resets a relay connection.Claudio Jeker
2017-11-28In TLS inspection mode we also need to keep the server tls object around.Claudio Jeker
2017-11-28Add space between to and read like in other DPRINTFs.Claudio Jeker
2017-11-27Change the ecdhe curve configuration to the same way httpd is doing it.Claudio Jeker
2017-11-27lseek/read is racy when there is multiple consumers. Use pread instead.Claudio Jeker
2017-11-27Add a DPRINTF() in relay_error() that helped me out way too many times.Claudio Jeker
2017-11-27Use file descriptor passing to load certificates into the relays. EspeciallyClaudio Jeker
2017-11-27Do not rip out the output buffer of the bufferevent. Instead just use anClaudio Jeker
2017-11-27relay_tls_connected() is playing with the inner bowels of bufferevents.Claudio Jeker
2017-09-23The relayd regression tests for chunked HTTP traffic were failingAlexander Bluhm
2017-08-28Do not close the relay if data is still in the output buffer.Alexander Bluhm
2017-08-09Call tls_config_skip_private_key_check() to disable the key checking inClaudio Jeker
2017-07-30Fix a double free of the TLS config in the error path.Alexander Bluhm
2017-07-28Always calculate the hash value of the x509 cert in ssl_load_pkey().Alexander Bluhm
2017-07-04make relayd not crash in relay_udp_server() when using a dns relay.Sebastian Benoit
2017-05-28use __func__ in log messages. fix some whitespace while here.Sebastian Benoit
2017-05-27Migrate relayd to use libtls for TLS. Still does the TLS privsep via theClaudio Jeker
2017-02-02Disable client-initiated TLS renegotiation by default.Reyk Floeter
2017-01-09Stop accessing verbose and debug variables from log.c directly.Reyk Floeter
2016-11-10Fix tcp ip ttl / minttl on IPv6 sockets.Jeremie Courreges-Anglas
2016-09-29fix DEBUG build after ps->ps_instance changeSebastian Benoit
2016-09-26spacingReyk Floeter
2016-09-23use sizeof instead of constant 16 in function callsJonathan Gray
2016-09-22Change function arguments from "unsigned char keyname[16]" toJonathan Gray
2016-09-22correct invalid use of sizeofJonathan Gray
2016-09-02Split "struct relayd" into two structs: "struct relayd" and "structReyk Floeter
2016-09-02proc_id has been replaced by ps->ps_instance.Reyk Floeter
2016-09-02As done in httpd, remove ps_ninstances and p_instance.Reyk Floeter
2016-09-02Terminate relayd using the socket status instead of watching SIGCHLDReyk Floeter
2016-09-01Switch from the not really working session cache (because of the multiprocessClaudio Jeker
2015-12-30SSL_CTX_free() and SSL_free() check for null so dont do it in relaydSebastian Benoit
2015-12-24completly -> completelymmcc
2015-12-07Remove NULL-checks before free(). No functional change.mmcc
2015-12-05initialize host, to get rid of gcc warning, the conditions are correct.Sebastian Benoit
2015-12-04pledge the relay (layer 7 proxy) children, they can do with "stdioSebastian Benoit
2015-12-02relayd (when running relays) can distribute client sessions over hostsSebastian Benoit
2015-12-02In most cases we don't need all arguments of proc_compose*_imsg(),Reyk Floeter
2015-11-28Use SOCK_NONBLOCK in relayd as well.Reyk Floeter
2015-07-28spacingReyk Floeter
2015-07-18Fix unbounded buffer growth. In the case of a slow client reading large files,Sebastian Benoit
2015-06-12To match relayd's style, use an explicit enum with prefixed names forReyk Floeter
2015-06-08Introduce a state on the ctl_relay_event struct. This makes it possibleClaudio Jeker
2015-05-18Fix a crash reported and analyzed by Bertrand PROVOST. When a HTTPAlexander Bluhm
2015-04-29When the HTTP client did close the connection while relayd was stillAlexander Bluhm
2015-04-23We cannot log errors with relay_close() before allocatingFlorian Obser
2015-02-06Rename SSL_CTX_use_certificate_chain() to SSL_CTX_use_certificate_chain_mem().Reyk Floeter
2015-01-22Clean up the relayd headers with help of include-what-you-use and someReyk Floeter
2015-01-22spacingReyk Floeter
2015-01-22LibreSSL now supports loading of CA certificates from memory, replaceReyk Floeter