summaryrefslogtreecommitdiff
path: root/usr.sbin/relayd/relayd.h
AgeCommit message (Expand)Author
2023-06-25remove ssl_init()Omar Polo
2023-06-21Simplify and clean up the code. Try to use more ibuf idioms but theClaudio Jeker
2022-08-31relayd(8): change agentx_getsock to return voidDave Voutila
2021-07-25The output of server_root_strip() is a string. Use the correct formatSebastian Benoit
2021-04-20Move TAILQ initialization to files where they are used.dv
2021-03-23Timed out RSA key ops, may leave uncalled for responses in the imsg returnClaudio Jeker
2021-01-27remove bogus key hack now that it's handled by libtlsEric Faurot
2021-01-27these programs (with common ancestry) had a -fno-common problem relatedTheo de Raadt
2021-01-09Add 'strip' directivedenis
2020-09-14Rewrite the agentx code of relayd. This new framework should allow usMartijn van Duren
2020-05-14Enable TLSv1.3 support in relayd(8)pvk
2019-09-15Add support for binary protocol health checking. Feedback and guidance fromrob
2019-06-26Add support for OCSP staplingReyk Floeter
2019-05-31Add support for SNI with new "tls keypair" option to load additional certs.Reyk Floeter
2019-05-31Move the relay keys/certs into a separate global list and look them up by id.Reyk Floeter
2019-05-29Move relay_load_*() functions into relayd.cReyk Floeter
2019-05-13Fix filter rules with "forward to" statement in persistent connections.Reyk Floeter
2019-05-10Add support for from/to in relay filter rules.Reyk Floeter
2019-05-08Fix and tweak websocket upgrade handling.Reyk Floeter
2019-03-04Support for rfc 6455 Websockets connection upgrade. Add a new protocolSebastian Benoit
2018-09-09During the fork+exec implementation, daemon(3) was moved afterAlexander Bluhm
2018-08-06replace the current log optionsSebastian Benoit
2018-04-18Remove RELAY_MAX_SESSIONS from relayd, there is no reason to limit relaysClaudio Jeker
2017-11-28One less lie in commentsClaudio Jeker
2017-11-28Introduce relay_reset_event() which closes and resets a relay connection.Claudio Jeker
2017-11-28In TLS inspection mode we also need to keep the server tls object around.Claudio Jeker
2017-11-27Change the ecdhe curve configuration to the same way httpd is doing it.Claudio Jeker
2017-11-27Use file descriptor passing to load certificates into the relays. EspeciallyClaudio Jeker
2017-11-15make the maximum size of http headers configurable in the protocol.Sebastian Benoit
2017-07-28Always calculate the hash value of the x509 cert in ssl_load_pkey().Alexander Bluhm
2017-07-04make relayd not crash in relay_udp_server() when using a dns relay.Sebastian Benoit
2017-05-27Migrate relayd to use libtls for TLS. Still does the TLS privsep via theClaudio Jeker
2017-02-02Disable client-initiated TLS renegotiation by default.Reyk Floeter
2017-01-24move the opening of /dev/pf from the parent process to the pfe processSebastian Benoit
2017-01-09Stop accessing verbose and debug variables from log.c directly.Reyk Floeter
2016-11-24The new fork+exec mode used too many fds in the parent process onReyk Floeter
2016-10-05sync proc.c with vmd: add p_pw to specify a non-standard user for a process.Reyk Floeter
2016-09-28sync proc.c incl. the p_env removalReyk Floeter
2016-09-03Replace [RELAY|SERVER]_MAXPROC with the new PROC_MAX_INSTANCESReyk Floeter
2016-09-03Use the fork+exec privsep model in relayd; based on rzalamena@'s workReyk Floeter
2016-09-02Move snmp options into struct relayd_config and delay start of theReyk Floeter
2016-09-02Split "struct relayd" into two structs: "struct relayd" and "structReyk Floeter
2016-09-02As done in httpd, remove ps_ninstances and p_instance.Reyk Floeter
2016-09-02Terminate relayd using the socket status instead of watching SIGCHLDReyk Floeter
2016-09-01Switch from the not really working session cache (because of the multiprocessClaudio Jeker
2016-09-01Do not busy loop in the rsa engine callback waiting for the ca. Instead useClaudio Jeker
2016-07-29Bump copyright in files that I touched last.Reyk Floeter
2016-07-27Improve parsing of the Host by following RFC 7230 Section 5.4 more strictly:Reyk Floeter
2016-07-22fix some cases where we relay_abort_http() the connection too soon.Sebastian Benoit
2016-01-11This adds the host_error output and the http code (when available) to theSebastian Benoit