Archives/SSLproxy
2
0
Fork 0
mirror of https://github.com/sonertari/SSLproxy synced 2024-10-31 21:20:21 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,126 Commits 2 Branches 27 Tags 3.1 MiB
9bf883d3c4
Commit Graph

1126 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Daniel Roethlisberger
b27175f910 Reorder initialization in main() 2012-10-16 22:52:54 +02:00
Daniel Roethlisberger
eb6162389f Remove commit ids from NEWS file 2012-10-16 22:02:17 +02:00
Daniel Roethlisberger
807b7c1d3b Fix typo in manpage 2012-10-16 21:56:03 +02:00
Daniel Roethlisberger
6b2bef3920 Add separate LICENSE file 2012-10-03 01:12:12 +02:00
Daniel Roethlisberger
cdfaeedb80 Ignore all DH param files under extra/pki 2012-10-03 00:53:02 +02:00
Daniel Roethlisberger
ff6fbef91f Add 4096-bit Diffie-Hellman to dh target 2012-10-03 00:50:50 +02:00
Daniel Roethlisberger
35c3967eef Remove obsolete dhall target from .PHONY 2012-10-03 00:50:24 +02:00
Daniel Roethlisberger
bd77e6a228 Improve ssl_tmp_dh_callback() error messages 2012-10-01 14:55:55 +02:00
Daniel Roethlisberger
79c2c6e520 Add support for 2048 and 4096 bit Diffie-Hellman 
Add group parameters for 2048 and 4096 bit Diffie-Hellman in addition to
the previous 512 and 1024 bit parameters.  Also add a meaningful error
message when a group size is requested which is not provided.
 2012-10-01 14:49:24 +02:00
Daniel Roethlisberger
e19a97b21f Update NEWS and TODO 2012-10-01 14:49:24 +02:00
Daniel Roethlisberger
6b4b121da2 Fix address family check in netfilter NAT lookup 
Use src_addr instead of the (yet to be set) dst_addr for determining the
address family.  Fixes issue #4.
 2012-09-27 17:30:19 +02:00
Daniel Roethlisberger
6106940e0c Omit nat_getsockname_lookup_cb() unless it is used 2012-08-06 08:33:39 +02:00
Daniel Roethlisberger
1b20544333 Add temporary RSA keys to TODO 2012-08-06 08:33:17 +02:00
Daniel Roethlisberger
fda4f57aa7 Remove unused IPv6 code for netfilter NAT engine 2012-06-05 23:24:53 +02:00
Daniel Roethlisberger
fc8c0110c5 Do not generate ECC keys for unit tests 2012-06-05 23:24:53 +02:00
Daniel Roethlisberger
5ed3e5172b Make explanation of DEBUG_CFLAGS clearer 2012-06-05 23:12:08 +02:00
Daniel Roethlisberger
2266f07b4f Update TODO 2012-06-05 22:59:53 +02:00
Daniel Roethlisberger
a4040d8372 Suppress warnings for system headers with -isystem 
Use -isystem instead of -I in CPPFLAGS to suppress compiler warnings for
system and library headers.
 2012-05-23 19:09:52 +02:00
Daniel Roethlisberger
911e15763d Add opts->debug branch prediction test case 2012-05-14 22:50:20 +02:00
Daniel Roethlisberger
ef1330d69f Remove const from util_skipws() and add tests 2012-05-14 21:44:38 +02:00
Daniel Roethlisberger
5c048e3990 Remove unneeded include statements 2012-05-14 21:43:24 +02:00
Daniel Roethlisberger
6fe4c5bf01 Sign release tarball using GnuPG 2012-05-14 21:07:53 +02:00
Daniel Roethlisberger
62af96e413 Clarify when it is preferred to use SNI proxyspecs 2012-05-13 22:33:31 +02:00
Daniel Roethlisberger
11fdf52553 Add NEWS file, documenting release history 2012-05-13 21:07:43 +02:00
Daniel Roethlisberger
f75d1bc01b Use some more markdown syntax 2012-05-13 18:22:23 +02:00
Daniel Roethlisberger
457c2621b8 Fix warning when SSLv2 session cache is enabled 2012-05-13 15:29:39 +02:00
Daniel Roethlisberger
8eb5165760 Optimize debug branching using __builtin_expect() 2012-05-13 15:24:50 +02:00
Daniel Roethlisberger
e270fb127b Unconditionally define _GNU_SOURCE 
Get rid of the fragile glibc auto-detection mechanism and define
_GNU_SOURCE unconditionally in order to fix the build on recent GNU libc
systems such as Debian and Ubuntu.  On non-GNU libc implementations,
_GNU_SOURCE should not have any effect.

Issue:          #2
Reported by:    Vincent Bernat
 2012-05-13 14:28:22 +02:00
Daniel Roethlisberger
3742404fe9 Update ECDH default curve name in manual page 2012-05-11 18:19:07 +02:00
Daniel Roethlisberger
7ad1deb680 Document intended use of SSLsplit 2012-05-11 18:12:22 +02:00
Daniel Roethlisberger
a3b6d58df4 State why ECDH is disabled with OpenSSL < 1.0.0e 2012-05-11 18:03:07 +02:00
Daniel Roethlisberger
38d22415af Generic EC loading, new default curve 'secp160r2' 2012-05-11 17:39:12 +02:00
Daniel Roethlisberger
6d58824de2 Fix typo in manual page 2012-05-03 01:01:57 +02:00
Daniel Roethlisberger
759ce87ff9 Add some basic unit tests for dynbuf 2012-05-03 00:54:10 +02:00
Daniel Roethlisberger
707480a1dd Add file comments 2012-05-02 16:24:33 +02:00
Daniel Roethlisberger
a592f7149c Improve error handling for no origcrt situations 2012-05-02 15:37:47 +02:00
Daniel Roethlisberger
605c1ab6e6 Improve error recovery under low memory conditions 2012-05-02 15:02:59 +02:00
Daniel Roethlisberger
2d1ad219b9 Change default cipher suite to "ALL:-aNULL" 2012-05-02 14:59:47 +02:00
Daniel Roethlisberger
1bd2872b20 DH group parameters are also loaded from -c 2012-05-02 13:46:18 +02:00
Daniel Roethlisberger
0e19243307 Reorder wildcard rules and improve error messages 2012-05-02 13:35:36 +02:00
Daniel Roethlisberger
43df203914 Handle empty strings correctly in URL routines 2012-05-01 02:01:31 +02:00
Daniel Roethlisberger
b6a0ff0c76 Free proxyspecs if they (unexpectedly) parse okay 2012-05-01 01:47:01 +02:00
Daniel Roethlisberger
ddbb945406 Rename unit test sources to fix language detection 2012-05-01 01:42:59 +02:00
Daniel Roethlisberger
90351cda7f Handle SSL_ERROR_SSL quietly when shutting down 2012-04-30 23:27:51 +02:00
Daniel Roethlisberger
5861d786f5 Update TODO 2012-04-30 23:27:41 +02:00
Daniel Roethlisberger
982ad89f2f Add generation of a password protected RSA key 2012-04-30 22:48:19 +02:00
Daniel Roethlisberger
e6c7b2e3ca Mention PKG_CONFIG_PATH 2012-04-23 01:03:38 +02:00
Daniel Roethlisberger
fa425e08d4 Fix PURIFY and warn when not seeding the RNG 2012-04-23 00:51:02 +02:00
Daniel Roethlisberger
439e8a8267 Use WUNRES and MALLOC attribs and fix sloppy code 2012-04-23 00:35:17 +02:00
Daniel Roethlisberger
64cf874925 Header self-sufficience cleanup round 2012-04-23 00:33:33 +02:00