summaryrefslogtreecommitdiff
path: root/usr.sbin/relayd/relayd.c
AgeCommit message (Expand)Author
2024-10-28relayd: add support for client certificatesTheo Buehler
2023-06-25remove ssl_init()Omar Polo
2022-11-10always call va_end.Moritz Buhl
2022-09-03Move the daemon() call in the parent process from after forking theSebastian Benoit
2022-08-31relayd(8): change agentx_getsock to return voidDave Voutila
2021-07-12Change the error reporting pattern throughout the tree when unveilBob Beck
2021-01-27these programs (with common ancestry) had a -fno-common problem relatedTheo de Raadt
2021-01-11Stop deleting the control socket on daemon shutdown, like we did on otherRicardo Mestre
2020-09-14Rewrite the agentx code of relayd. This new framework should allow usMartijn van Duren
2020-08-19add unveil(2) againRicardo Mestre
2019-09-15Add support for binary protocol health checking. Feedback and guidance fromrob
2019-08-30revert r1.175 which added unveil to relayd; "check script" needs access to theStuart Henderson
2019-06-26Add support for OCSP staplingReyk Floeter
2019-05-31Add support for SNI with new "tls keypair" option to load additional certs.Reyk Floeter
2019-05-31Move the relay keys/certs into a separate global list and look them up by id.Reyk Floeter
2019-05-29Move relay_load_*() functions into relayd.cReyk Floeter
2019-05-08Fix and tweak websocket upgrade handling.Reyk Floeter
2019-04-24restrict filesystem access to read only on main process via unveil(2)Ricardo Mestre
2018-09-09During the fork+exec implementation, daemon(3) was moved afterAlexander Bluhm
2018-09-01Accidentally relayd(8) closed file descriptor 0 in the pfe childAlexander Bluhm
2018-08-06replace the current log optionsSebastian Benoit
2017-11-29add options to specify the control socket in relayd and relayctl.Sebastian Benoit
2017-11-27Use file descriptor passing to load certificates into the relays. EspeciallyClaudio Jeker
2017-05-31Fix a memory leak in pkey_add() error path. All current callers fatalJonathan Gray
2017-05-28use __func__ in log messages. fix some whitespace while here.Sebastian Benoit
2017-05-27Migrate relayd to use libtls for TLS. Still does the TLS privsep via theClaudio Jeker
2017-05-06Convert explicit_bzero() + free() to freezero().Frederic Cambus
2017-01-24move the opening of /dev/pf from the parent process to the pfe processSebastian Benoit
2017-01-09Stop accessing verbose and debug variables from log.c directly.Reyk Floeter
2016-11-24The new fork+exec mode used too many fds in the parent process onReyk Floeter
2016-09-28sync proc.c incl. the p_env removalReyk Floeter
2016-09-27The fork+exec privsep commit broke the "block request method" httpAlexander Bluhm
2016-09-03Use the fork+exec privsep model in relayd; based on rzalamena@'s workReyk Floeter
2016-09-02Split "struct relayd" into two structs: "struct relayd" and "structReyk Floeter
2016-09-02As done in httpd, remove ps_ninstances and p_instance.Reyk Floeter
2016-09-02Terminate relayd using the socket status instead of watching SIGCHLDReyk Floeter
2016-09-01Switch from the not really working session cache (because of the multiprocessClaudio Jeker
2016-07-29Bump copyright in files that I touched last.Reyk Floeter
2016-07-27Improve parsing of the Host by following RFC 7230 Section 5.4 more strictly:Reyk Floeter
2016-02-02Remove setproctitle() for the parent process. Because rc.d(8) uses processStuart Henderson
2015-12-30SSL_CTX_free() and SSL_free() check for null so dont do it in relaydSebastian Benoit
2015-12-30now that ibuf_free() checks for null, we can remove the check here.Sebastian Benoit
2015-12-07Remove NULL-checks before free(). No functional change.mmcc
2015-12-02In most cases we don't need all arguments of proc_compose*_imsg(),Reyk Floeter
2015-11-29Use pledge("pf") in pfe.c.Sebastian Benoit
2015-11-28Use SOCK_NONBLOCK in relayd as well.Reyk Floeter
2015-11-22Update log.c: change fatal() and fatalx() into variadic functions,Reyk Floeter
2015-11-19Simplify all instances of get_string() and get_data() using malloc() andmmcc
2015-10-14More (unsigned char) casts for ctype functions.Reyk Floeter
2015-07-29fix bug where other than the last of multiple forward rules in httpSebastian Benoit