Gitiles
Code Review Sign In
git01.mediatek.com / haproxy / 4873384a779059a4d4222f4cf045ce249a6f2827 / src / ssl_sock.c
  1. 842976d BUILD: ssl: fine guard for SSL_CTX_get0_privatekey call by Ilya Shipitsin · 3 years, 11 months ago
  2. e7f81bc BUILD: SSL: fine guard for SSL_CTX_add_server_custom_ext call by Ilya Shipitsin · 4 years ago
  3. 00b831e MEDIUM: ssl: fatal error with bundle + openssl < 1.1.1 by William Lallemand · 4 years ago
  4. 7efbaf1 BUG/MEDIUM: ssl: error when no certificate are found by William Lallemand · 4 years ago
  5. 829d071 BUG/MINOR: ssl: segv on startup when AKID but no keyid by William Lallemand · 4 years ago
  6. 58ee231 BUG/MINOR: ssl: don't report 1024 bits DH param load error when it's higher by Willy Tarreau · 4 years ago
  7. 0aa8c29 BUILD: ssl: use feature macros for detecting ec curves manipulation support by Ilya Shipitsin · 4 years ago
  8. 04a5a44 BUILD: ssl: use HAVE_OPENSSL_KEYLOG instead of OpenSSL versions by Ilya Shipitsin · 4 years ago
  9. b9b84a4 BUILD: ssl: more elegant OpenSSL early data support check by Ilya Shipitsin · 4 years, 1 month ago
  10. a73a222 BUG/MEDIUM: ssl: OCSP must work with BoringSSL by Emmanuel Hocdet · 4 years ago
  11. 8e8581e MINOR: ssl: 'ssl-load-extra-del-ext' removes the certificate extension by William Lallemand · 4 years, 1 month ago
  12. b3201a3 BUG/MINOR: disable dynamic OCSP load with BoringSSL by Ilya Shipitsin · 4 years, 1 month ago
  13. 58feb49 CLEANUP: ssl: Release cached SSL sessions on deinit by Christopher Faulet · 4 years, 1 month ago
  14. 70bf06e BUILD: fix build with openssl < 1.0.2 since bundle removal by William Lallemand · 4 years, 2 months ago
  15. e7eb1fe CLEANUP: ssl: remove utility functions for bundle by William Lallemand · 4 years, 2 months ago
  16. bd8e6ed CLEANUP: ssl: remove test on "multi" variable in ckch functions by William Lallemand · 4 years, 2 months ago
  17. dfa93be MEDIUM: ssl: emulate multi-cert bundles loading in standard loading by William Lallemand · 4 years, 2 months ago
  18. a459826 BUG/MEDIUM: ssl: Don't call ssl_sock_io_cb() directly. by Olivier Houchard · 4 years, 2 months ago
  19. 2d6fd0a BUG/MINOR: ssl: verifyhost is case sensitive by William Lallemand · 4 years, 2 months ago
  20. e52b6e5 CLEANUP: Do not use a fixed type for 'sizeof' in 'calloc' by Tim Duesterhus · 4 years, 2 months ago
  21. 6767245 MEDIUM: fd: replace usages of fd_remove() with fd_stop_both() by Willy Tarreau · 4 years, 3 months ago
  22. a78f3f0 BUG/MEDIUM: ssl: fix ssl_bind_conf double free w/ wildcards by William Lallemand · 4 years, 3 months ago
  23. adabbfe MINOR: ssl: Support SAN extension for certificate generation by Shimi Gersner · 4 years, 3 months ago
  24. 5846c49 MEDIUM: ssl: Support certificate chaining for certificate generation by Shimi Gersner · 4 years, 3 months ago
  25. 30f9e09 BUG/MEDIUM: ssl: crt-list negative filters don't work by William Lallemand · 4 years, 3 months ago
  26. 5b1d1f6 CLEANUP: ssl: remove poorly readable nested ternary by William Lallemand · 4 years, 3 months ago
  27. 94bd319 BUG/MEDIUM: ssl: does not look for all SNIs before chosing a certificate by William Lallemand · 4 years, 3 months ago
  28. 935d829 BUG/MEDIUM: ssl: never generates the chain from the verify store by William Lallemand · 4 years, 3 months ago
  29. 9a1d839 BUG/MINOR: ssl: ssl-skip-self-issued-ca requires >= 1.0.2 by William Lallemand · 4 years, 3 months ago
  30. bf298af BUG/MEDIUM: ssl: fix the ssl-skip-self-issued-ca option by William Lallemand · 4 years, 3 months ago
  31. 76b4a12 BUG/MEDIUM: ssl: memory leak of ocsp data at SSL_CTX_free() by William Lallemand · 4 years, 3 months ago
  32. 86e4d63 BUG/MINOR: ssl: fix memory leak at OCSP loading by William Lallemand · 4 years, 3 months ago
  33. a560c06 BUG/MEDIUM: ssl: check OCSP calloc in ssl_sock_load_ocsp() by William Lallemand · 4 years, 3 months ago
  34. a9d7b76 MINOR: connection: use MT_LIST_ADDQ() to add connections to idle lists by Willy Tarreau · 4 years, 4 months ago
  35. de4db17 MINOR: lists: rename some MT_LIST operations to clarify them by Willy Tarreau · 4 years, 4 months ago
  36. 7d42ef5 WIP/MINOR: ssl: add sample fetches for keylog in frontend by William Lallemand · 4 years, 4 months ago
  37. f278eec BUILD: tree-wide: cast arguments to tolower/toupper to unsigned char by Willy Tarreau · 4 years, 4 months ago
  38. a74bb7e BUG/MEDIUM: connections: Let the xprt layer know a takeover happened. by Olivier Houchard · 4 years, 4 months ago
  39. b240869 MINOR: ssl: move the ckch/crtlist deinit to ssl_sock.c by William Lallemand · 4 years, 5 months ago
  40. 7df5c2d BUG/MEDIUM: ssl: fix ssl_bind_conf double free by William Lallemand · 4 years, 5 months ago
  41. d0712f3 BUG/MINOR: ssl: fix ssl-{min,max}-ver with openssl < 1.1.0 by William Lallemand · 4 years, 5 months ago
  42. b255105 CLEANUP: include: tree-wide alphabetical sort of include files by Willy Tarreau · 4 years, 5 months ago
  43. dfd3de8 REORG: include: move stream.h to haproxy/stream{,-t}.h by Willy Tarreau · 4 years, 5 months ago
  44. 1e56f92 REORG: include: move server.h to haproxy/server{,-t}.h by Willy Tarreau · 4 years, 5 months ago
  45. a264d96 REORG: include: move proxy.h to haproxy/proxy{,-t}.h by Willy Tarreau · 4 years, 5 months ago
  46. aeed4a8 REORG: include: move log.h to haproxy/log{,-t}.h by Willy Tarreau · 4 years, 5 months ago
  47. c2b1ff0 REORG: include: move http_ana.h to haproxy/http_ana{,-t}.h by Willy Tarreau · 4 years, 5 months ago
  48. f1d32c4 REORG: include: move channel.h to haproxy/channel{,-t}.h by Willy Tarreau · 4 years, 5 months ago
  49. 5e539c9 REORG: include: move stream_interface.h to haproxy/stream_interface{,-t}.h by Willy Tarreau · 4 years, 5 months ago
  50. 209108d REORG: include: move ssl_sock.h to haproxy/ssl_sock{,-t}.h by Willy Tarreau · 4 years, 5 months ago
  51. 83487a8 REORG: include: move cli.h to haproxy/cli{,-t}.h by Willy Tarreau · 4 years, 5 months ago
  52. 2eec9b5 REORG: include: move stats.h to haproxy/stats{,-t}.h by Willy Tarreau · 4 years, 5 months ago
  53. 3f0f82e REORG: move applet.h to haproxy/applet{,-t}.h by Willy Tarreau · 4 years, 5 months ago
  54. dcc048a REORG: include: move acl.h to haproxy/acl.h{,-t}.h by Willy Tarreau · 4 years, 5 months ago
  55. 7ea393d REORG: include: move connection.h to haproxy/connection{,-t}.h by Willy Tarreau · 4 years, 5 months ago
  56. fc77454 REORG: include: move proto_tcp.h to haproxy/proto_tcp.h by Willy Tarreau · 4 years, 5 months ago
  57. cea0e1b REORG: include: move task.h to haproxy/task{,-t}.h by Willy Tarreau · 4 years, 5 months ago
  58. f268ee8 REORG: include: split global.h into haproxy/global{,-t}.h by Willy Tarreau · 4 years, 5 months ago
  59. a171892 REORG: include: move vars.h to haproxy/vars{,-t}.h by Willy Tarreau · 4 years, 5 months ago
  60. 225a90a REORG: include: move pattern.h to haproxy/pattern{,-t}.h by Willy Tarreau · 4 years, 5 months ago
  61. 213e990 REORG: include: move listener.h to haproxy/listener{,-t}.h by Willy Tarreau · 4 years, 5 months ago
  62. 52d8872 REORG: move ssl_crtlist.h to haproxy/ssl_crtlist{,-t}.h by Willy Tarreau · 4 years, 5 months ago
  63. 47d7f90 REORG: include: move ssl_ckch.h to haproxy/ssl_ckch{,-t}.h by Willy Tarreau · 4 years, 5 months ago
  64. b2bd865 REORG: include: move ssl_utils.h to haproxy/ssl_utils.h by Willy Tarreau · 4 years, 5 months ago
  65. c761f84 REORG: include: move http_rules.h to haproxy/http_rules.h by Willy Tarreau · 4 years, 5 months ago
  66. 762d7a5 REORG: include: move frontend.h to haproxy/frontend.h by Willy Tarreau · 4 years, 5 months ago
  67. aa74c4e REORG: include: move arg.h to haproxy/arg{,-t}.h by Willy Tarreau · 4 years, 5 months ago
  68. 0f6ffd6 REORG: include: move fd.h to haproxy/fd{,-t}.h by Willy Tarreau · 4 years, 5 months ago
  69. 334099c REORG: include: move shctx to haproxy/shctx{,-t}.h by Willy Tarreau · 4 years, 5 months ago
  70. 48fbcae REORG: tools: split common/standard.h into haproxy/tools{,-t}.h by Willy Tarreau · 4 years, 5 months ago
  71. c2f7c58 REORG: include: move common/ticks.h to haproxy/ticks.h by Willy Tarreau · 4 years, 5 months ago
  72. 2741c8c REORG: include: move common/buffer.h to haproxy/dynbuf{,-t}.h by Willy Tarreau · 4 years, 5 months ago
  73. c13ed53 REORG: include: move common/chunk.h to haproxy/chunk.h by Willy Tarreau · 4 years, 5 months ago
  74. 6634794 REORG: include: move freq_ctr to haproxy/ by Willy Tarreau · 4 years, 5 months ago
  75. 92b4f13 REORG: include: move time.h from common/ to haproxy/ by Willy Tarreau · 4 years, 5 months ago
  76. af613e8 CLEANUP: thread: rename __decl_hathreads() to __decl_thread() by Willy Tarreau · 4 years, 5 months ago
  77. 58017ee REORG: include: move the BUG_ON() code to haproxy/bug.h by Willy Tarreau · 4 years, 6 months ago
  78. 6019fab REORG: include: move openssl-compat.h from common/ to haproxy/ by Willy Tarreau · 4 years, 6 months ago
  79. 8d36697 REORG: include: move base64.h, errors.h and hash.h from common to to haproxy/ by Willy Tarreau · 4 years, 6 months ago
  80. 4c7e4b7 REORG: include: update all files to use haproxy/api.h or api-t.h if needed by Willy Tarreau · 4 years, 6 months ago
  81. 8d2b777 REORG: ebtree: move the include files from ebtree to include/import/ by Willy Tarreau · 4 years, 6 months ago
  82. f187ce6 Revert "MINOR: ssl: rework add cert chain to CTX to be libssl independent" by William Lallemand · 4 years, 5 months ago
  83. 50df1cb MINOR: ssl: set ssl-min-ver in ambiguous configurations by William Lallemand · 4 years, 5 months ago
  84. 2f44a59 MEDIUM: ssl: use TLSv1.2 as the minimum default on bind lines by William Lallemand · 4 years, 5 months ago
  85. 6a66a5e REORG: ssl: move utility functions to src/ssl_utils.c by William Lallemand · 4 years, 6 months ago
  86. 15e1694 REORG: ssl: move sample fetches to src/ssl_sample.c by William Lallemand · 4 years, 6 months ago
  87. c0cdaff REORG: ssl: move ssl_sock_ctx and fix cross-dependencies issues by William Lallemand · 4 years, 6 months ago
  88. ef76107 MINOR: ssl: remove static keyword in some SSL utility functions by William Lallemand · 4 years, 6 months ago
  89. dad3105 REORG: ssl: move ssl configuration to cfgparse-ssl.c by William Lallemand · 4 years, 6 months ago
  90. da8584c REORG: ssl: move the CLI 'cert' functions to src/ssl_ckch.c by William Lallemand · 4 years, 6 months ago
  91. c756bbd REORG: ssl: move the crt-list CLI functions in src/ssl_crtlist.c by William Lallemand · 4 years, 6 months ago
  92. fa1d8b4 REORG: ssl: move ckch_inst functions to src/ssl_ckch.c by William Lallemand · 4 years, 6 months ago
  93. 03c331c REORG: ssl: move the ckch_store related functions to src/ssl_ckch.c by William Lallemand · 4 years, 6 months ago
  94. 6e9556b REORG: ssl: move crtlist functions to src/ssl_crtlist.c by William Lallemand · 4 years, 6 months ago
  95. c69973f CLEANUP: ssl: add ckch prototypes in proto/ssl_ckch.h by William Lallemand · 4 years, 6 months ago
  96. d4632b2 REORG: ssl: move the ckch structures to types/ssl_ckch.h by William Lallemand · 4 years, 6 months ago
  97. 336c4bb CLEANUP: ssl: remove the shsess_* macros by William Lallemand · 4 years, 6 months ago
  98. 7fd8b45 REORG: ssl: move macros and structure definitions to ssl_sock.h by William Lallemand · 4 years, 6 months ago
  99. 2dec6a3 MEDIUM: ssl: use ssl_sock_get_ssl_object() in fetchers where appropriate by Dragan Dosen · 4 years, 6 months ago
  100. eb607fe MINOR: ssl: add a new function ssl_sock_get_ssl_object() by Dragan Dosen · 4 years, 6 months ago