18 Commits (cf79be7b2b524aa933a807cc581214e0b74bfef1)

Author	SHA1	Message	Date
Daniel Roethlisberger	e632490888	Add exception handler to logger, exit on errors ... Add exception handler mechanism to logger and use that to exit cleanly when sslsplit fails to write to a log file or fails to open a log file. Issue: #113 Reported by: Matthias Kadenbach	8 years ago
Daniel Roethlisberger	0506024587	Update copyright notices to 2016	8 years ago
Daniel Roethlisberger	43b697d875	Initialize proxy before daemonizing ... Issue: #104	8 years ago
Daniel Roethlisberger	0e2b748bba	Only init DNS when DNS is required by proxy specs ... Only initialize evdns if DNS lookups are actually required by the loaded proxy specifications. This allows sslsplit to work in non-DNS modes in situations where the local DNS resolver does not work, such as for local use on a system without network connectivity. Currently, only SNI based proxy specs require DNS. On systems without network connectivity, DNS subsystem init may fail due to /etc/resolv.conf being (temporarily) unavailable. Issue: #104	9 years ago
Daniel Roethlisberger	c28ca34fe1	Revert "bugfix: actually parse resolv.conf at startup" ... This reverts commit aaa4e94f84. The initialize_nameservers argument to evdns_base_new was deliberately not set to 1 because we call evdns_resolv_conf_parse manually later, as we want more differentiated error reporting. Issue: #86	9 years ago
Richard Poole	aaa4e94f84	bugfix: actually parse resolv.conf at startup	9 years ago
Daniel Roethlisberger	91da4674e5	Update copyright, license and tagline ... - Update copyright to 2015 - Remove the non-standard "unmodified" from the 2-clause BSD license - Remove scalable from the tagline to avoid misinterpretations	9 years ago
Daniel Roethlisberger	e69b13f2eb	SIGUSR1 re-opens -l/-L log files; add defaults.h ... Issue: #52	10 years ago
Daniel Roethlisberger	c01ace1261	Introduce privilege separation architecture ... Fork into a monitor parent process and an actual proxy child process, communicating over AF_UNIX sockets. Certain privileged operations are performed through the privileged parent process, like opening log files or listener sockets, while all other operations happen in the child process, which can now drop its privileges without side-effects for log file opening and other privileged operations. This is also a preparation for -l/-L logfile reopening through SIGUSR1. This means that -S and -F are no longer relative to chroot() if used with -j. This is a deliberate POLA violation.	10 years ago
Daniel Roethlisberger	9338200705	Detect when libevent cannot parse resolv.conf ... Issue: #17 Reported by: Florian Schaefer	11 years ago
Daniel Roethlisberger	06a02f946a	Always explicitly name the non-null arguments ... Always explicitly name which arguments are non-null, even if all arguments are non-null. This is to avoid bugs where newly added arguments are automatically non-null by accident, possibly leading to optimisation errors. This also fixes a few potential errors related to non-null arguments; specifically it prevents the compiler optimising away a test for sni being NULL in cachedsess_mkkey(). Issue: #14 Reported by: kythyria	11 years ago
Daniel Roethlisberger	ca923ee7f1	Update copyright notices to 2014	11 years ago
Daniel Roethlisberger	080604e3c2	Fix segfault after thread manager start failure ... This should fix the segmentation fault in issue #10 but not the underlying reason why the thread manager fails to start in the first place. Issue: #10 Reported by: linuxton	11 years ago
Daniel Roethlisberger	a0fd9c1050	Start thrmgr threads after forking	11 years ago
Daniel Roethlisberger	c972501063	Update copyright notices	11 years ago
Daniel Roethlisberger	bd639bf847	Fix typo in comment	11 years ago
Daniel Roethlisberger	8eb5165760	Optimize debug branching using __builtin_expect()	12 years ago
Daniel Roethlisberger	4cfdef405a	Initial import of sslsplit-0.4.2	12 years ago