| Age | Commit message (Expand) | Author |
|---|
| 2017-05-27 | Migrate relayd to use libtls for TLS. Still does the TLS privsep via the | Claudio Jeker |
| 2017-02-02 | Disable client-initiated TLS renegotiation by default. | Reyk Floeter |
| 2017-01-24 | move the opening of /dev/pf from the parent process to the pfe process | Sebastian Benoit |
| 2017-01-09 | Stop accessing verbose and debug variables from log.c directly. | Reyk Floeter |
| 2016-11-24 | The new fork+exec mode used too many fds in the parent process on | Reyk Floeter |
| 2016-10-05 | sync proc.c with vmd: add p_pw to specify a non-standard user for a process. | Reyk Floeter |
| 2016-09-28 | sync proc.c incl. the p_env removal | Reyk Floeter |
| 2016-09-03 | Replace [RELAY|SERVER]_MAXPROC with the new PROC_MAX_INSTANCES | Reyk Floeter |
| 2016-09-03 | Use the fork+exec privsep model in relayd; based on rzalamena@'s work | Reyk Floeter |
| 2016-09-02 | Move snmp options into struct relayd_config and delay start of the | Reyk Floeter |
| 2016-09-02 | Split "struct relayd" into two structs: "struct relayd" and "struct | Reyk Floeter |
| 2016-09-02 | As done in httpd, remove ps_ninstances and p_instance. | Reyk Floeter |
| 2016-09-02 | Terminate relayd using the socket status instead of watching SIGCHLD | Reyk Floeter |
| 2016-09-01 | Switch from the not really working session cache (because of the multiprocess | Claudio Jeker |
| 2016-09-01 | Do not busy loop in the rsa engine callback waiting for the ca. Instead use | Claudio Jeker |
| 2016-07-29 | Bump copyright in files that I touched last. | Reyk Floeter |
| 2016-07-27 | Improve parsing of the Host by following RFC 7230 Section 5.4 more strictly: | Reyk Floeter |
| 2016-07-22 | fix some cases where we relay_abort_http() the connection too soon. | Sebastian Benoit |
| 2016-01-11 | This adds the host_error output and the http code (when available) to the | Sebastian Benoit |
| 2015-12-02 | relayd (when running relays) can distribute client sessions over hosts | Sebastian Benoit |
| 2015-12-02 | In most cases we don't need all arguments of proc_compose*_imsg(), | Reyk Floeter |
| 2015-11-29 | Use pledge("pf") in pfe.c. | Sebastian Benoit |
| 2015-11-28 | Use SOCK_NONBLOCK in relayd as well. | Reyk Floeter |
| 2015-11-22 | Update log.c: change fatal() and fatalx() into variadic functions, | Reyk Floeter |
| 2015-11-21 | Move local logging functions from log.c to new file util.c (that is | Reyk Floeter |
| 2015-10-27 | change cipher-server-preference to be on by default. It can be disabled with | Sebastian Benoit |
| 2015-08-21 | Increase the input side socket buffer size for "check icmp" not to | YASUOKA Masahiko |
| 2015-07-18 | Fix unbounded buffer growth. In the case of a slow client reading large files, | Sebastian Benoit |
| 2015-06-12 | To match relayd's style, use an explicit enum with prefixed names for | Reyk Floeter |
| 2015-06-11 | Use "compliant" header guards by avoiding the reserved '_' namespace. | Reyk Floeter |
| 2015-06-08 | Introduce a state on the ctl_relay_event struct. This makes it possible | Claudio Jeker |
| 2015-05-02 | Fix obvious problems with relayd config reload. | Claudio Jeker |
| 2015-03-09 | Make relayd TLSv1.2-only by default. | Reyk Floeter |
| 2015-01-22 | Clean up the relayd headers with help of include-what-you-use and some | Reyk Floeter |
| 2015-01-22 | LibreSSL now supports loading of CA certificates from memory, replace | Reyk Floeter |
| 2015-01-16 | SSL_CTX_use_certificate_chain() has been added to LibreSSL and there | Reyk Floeter |
| 2015-01-16 | Adapt to <limits.h> universe. | Theo de Raadt |
| 2015-01-13 | bump copyright year | Reyk Floeter |
| 2015-01-01 | Merge error page changes from httpd: send Content-Length:, change | Reyk Floeter |
| 2014-12-21 | Stop pulling in <arpa/inet.h> or <arpa/nameser.h> when unnecessary. | Philip Guenther |
| 2014-12-18 | Update relayd to use siphash instead of sys/hash. The source-hash, | Reyk Floeter |
| 2014-12-17 | Add missing flag in the description field. | Reyk Floeter |
| 2014-12-12 | Change the keyword "ssl" to "tls" to reflect reality since we | Reyk Floeter |
| 2014-11-19 | Support exporting relayd statistics via AgentX/snmpd | Bret Lambert |
| 2014-11-07 | Remove the sslv2 option since LibreSSL has no SSLv2 support (however retain | Joel Sing |
| 2014-11-02 | Convert the logic in yyerror(). Instead of creating a temporary | Alexander Bluhm |
| 2014-10-20 | Remove the "interface" option from the "transparent forward" directive. | Reyk Floeter |
| 2014-10-15 | Disable SSLv3 by default. | Reyk Floeter |
| 2014-09-05 | revert previous; was based on a work-in-progress, as well | Bret Lambert |
| 2014-08-29 | Implement consistent host hashing for relayd, based on | Bret Lambert |
