Commit Graph

21 Commits (06a02f946a9ad6a3c19edb1d42afbb71c2c97f36)

Author SHA1 Message Date
Daniel Roethlisberger ca923ee7f1 Update copyright notices to 2014 11 years ago
Daniel Roethlisberger ac9a2613e0 Only generate RSA leaf key if CA key present
Issue:          #9
Reported by:    ceear
11 years ago
Daniel Roethlisberger c972501063 Update copyright notices 12 years ago
Daniel Roethlisberger 711448759c Bind to ports before dropping privileges
This fixes a regression which caused bind() to ports < 1024 to fail with
the default settings of dropping privileges to nobody.

Issue:          #8
Reported by:    Ian Grispan
12 years ago
Daniel Roethlisberger 005ebd1b95 Fix syslog for more error cases
Also fix issue #6 for target certificate loading error cases.
12 years ago
Daniel Roethlisberger bb15224d11 Flush error queue prior to exiting
Reorganize the cleanup code after detaching from the TTY in order to be
able to flush the error queue before calling exit().  Addresses issue #6
12 years ago
Daniel Roethlisberger 7713f82b62 Move more log writes after log initialization 12 years ago
Daniel Roethlisberger 1995dc4b89 Reinitialize SSL mutexes after fork
See issue #5.
12 years ago
Daniel Roethlisberger 067521924a Cleanup tgcrt loading to protect mutexes from fork
See issue #5.
12 years ago
Daniel Roethlisberger 3d15f14239 Fix lost error message 12 years ago
Daniel Roethlisberger bb9c353ecb Initialize proxy after detaching from TTY
Fixes issue #5.
12 years ago
Daniel Roethlisberger 0073cbdc47 Make cache initialization fork()-safe
POSIX threads require mutexes to be reinitialized after fork().  Not
doing so will break daemon mode, depending on pthread implementation.
See issue #5.
12 years ago
Daniel Roethlisberger b27175f910 Reorder initialization in main() 12 years ago
Daniel Roethlisberger 8eb5165760 Optimize debug branching using __builtin_expect() 12 years ago
Daniel Roethlisberger 38d22415af Generic EC loading, new default curve 'secp160r2' 13 years ago
Daniel Roethlisberger 2d1ad219b9 Change default cipher suite to "ALL:-aNULL" 13 years ago
Daniel Roethlisberger 439e8a8267 Use WUNRES and MALLOC attribs and fix sloppy code 13 years ago
Daniel Roethlisberger 7aca81a7b7 Improve CA cert/key config code and docs
Make -c and -k functional twins by also loading DH params in -c and by
fixing certificate loading in -k.  Improve the documentation for both
switches and simplify the SYNOPSIS in sslsplit(1).
13 years ago
Daniel Roethlisberger ee98c04b29 Add generic OCSP denial 13 years ago
Daniel Roethlisberger 423c1b0a32 Move volatile build-time information into separate compilation unit 13 years ago
Daniel Roethlisberger 4cfdef405a Initial import of sslsplit-0.4.2 13 years ago