summaryrefslogtreecommitdiff
path: root/usr.sbin/relayd/relayd.c
AgeCommit message (Expand)Author
2017-11-29add options to specify the control socket in relayd and relayctl.Sebastian Benoit
2017-11-27Use file descriptor passing to load certificates into the relays. EspeciallyClaudio Jeker
2017-05-31Fix a memory leak in pkey_add() error path. All current callers fatalJonathan Gray
2017-05-28use __func__ in log messages. fix some whitespace while here.Sebastian Benoit
2017-05-27Migrate relayd to use libtls for TLS. Still does the TLS privsep via theClaudio Jeker
2017-05-06Convert explicit_bzero() + free() to freezero().Frederic Cambus
2017-01-24move the opening of /dev/pf from the parent process to the pfe processSebastian Benoit
2017-01-09Stop accessing verbose and debug variables from log.c directly.Reyk Floeter
2016-11-24The new fork+exec mode used too many fds in the parent process onReyk Floeter
2016-09-28sync proc.c incl. the p_env removalReyk Floeter
2016-09-27The fork+exec privsep commit broke the "block request method" httpAlexander Bluhm
2016-09-03Use the fork+exec privsep model in relayd; based on rzalamena@'s workReyk Floeter
2016-09-02Split "struct relayd" into two structs: "struct relayd" and "structReyk Floeter
2016-09-02As done in httpd, remove ps_ninstances and p_instance.Reyk Floeter
2016-09-02Terminate relayd using the socket status instead of watching SIGCHLDReyk Floeter
2016-09-01Switch from the not really working session cache (because of the multiprocessClaudio Jeker
2016-07-29Bump copyright in files that I touched last.Reyk Floeter
2016-07-27Improve parsing of the Host by following RFC 7230 Section 5.4 more strictly:Reyk Floeter
2016-02-02Remove setproctitle() for the parent process. Because rc.d(8) uses processStuart Henderson
2015-12-30SSL_CTX_free() and SSL_free() check for null so dont do it in relaydSebastian Benoit
2015-12-30now that ibuf_free() checks for null, we can remove the check here.Sebastian Benoit
2015-12-07Remove NULL-checks before free(). No functional change.mmcc
2015-12-02In most cases we don't need all arguments of proc_compose*_imsg(),Reyk Floeter
2015-11-29Use pledge("pf") in pfe.c.Sebastian Benoit
2015-11-28Use SOCK_NONBLOCK in relayd as well.Reyk Floeter
2015-11-22Update log.c: change fatal() and fatalx() into variadic functions,Reyk Floeter
2015-11-19Simplify all instances of get_string() and get_data() using malloc() andmmcc
2015-10-14More (unsigned char) casts for ctype functions.Reyk Floeter
2015-07-29fix bug where other than the last of multiple forward rules in httpSebastian Benoit
2015-06-03Do not assume that asprintf() clears the pointer on failure, whichTodd C. Miller
2015-05-30Plug a memory leak by simplifying kv_free(). By checking the type andClaudio Jeker
2015-05-28Do not try to unlink the control socket in an unprivileged childFlorian Obser
2015-05-02Fix obvious problems with relayd config reload.Claudio Jeker
2015-01-22Clean up the relayd headers with help of include-what-you-use and someReyk Floeter
2015-01-22spacingReyk Floeter
2015-01-16Adapt to <limits.h> universe.Theo de Raadt
2014-12-18Update relayd to use siphash instead of sys/hash. The source-hash,Reyk Floeter
2014-12-12Change the keyword "ssl" to "tls" to reflect reality since weReyk Floeter
2014-11-22use size_t where appropriate. ok deraadt reykTed Unangst
2014-11-19Support exporting relayd statistics via AgentX/snmpdBret Lambert
2014-08-18Sync proc.c with httpd. httpd needs SIGUSR1 but relayd will ignore itReyk Floeter
2014-07-13improve log output for relays. adjust regress testsSebastian Benoit
2014-07-11Simplify the code that handles the HTTP headers by using an RB treeReyk Floeter
2014-07-10Fix another free error.Reyk Floeter
2014-07-09Don't assign garbage in kv_extend().Reyk Floeter
2014-07-09Replace the protocol directives for HTTP with a new generic filteringReyk Floeter
2014-06-27knf, no functional change.Andre de Oliveira
2014-05-08remove debug prints that snuck in; found by reyk@Bret Lambert
2014-05-08match relayd proc.c infrastructure with snmpdBret Lambert
2014-04-22Support the CA key for SSL inspection in the ca process. Instead ofReyk Floeter