- b886849 CLEANUP: ssl: remove dead code in ckch_inst_new_load_srv_store() by William Lallemand · 3 years, 8 months ago
- db26e2b CLEANUP: ssl: make load_srv_{ckchs,cert} match their bind counterpart by William Lallemand · 3 years, 8 months ago
- 795bd9b CLEANUP: ssl: remove SSL_CTX function parameter by William Lallemand · 3 years, 8 months ago
- f3eedfe MEDIUM: ssl: Enable backend certificate hot update by Remi Tricot-Le Breton · 3 years, 8 months ago
- d817dc7 MEDIUM: ssl: Load client certificates in a ckch for backend servers by Remi Tricot-Le Breton · 3 years, 8 months ago
- ec805a3 MINOR: ssl: Certificate chain loading refactorization by Remi Tricot-Le Breton · 3 years, 8 months ago
- 442b7f2 MINOR: ssl: Server ssl context prepare function refactoring by Remi Tricot-Le Breton · 3 years, 8 months ago
- 1fc44d4 BUILD: ssl: guard Client Hello callbacks with HAVE_SSL_CLIENT_HELLO_CB macro instead of openssl version by Ilya Shipitsin · 3 years, 8 months ago
- 4bd5d63 MINOR: ssl/show_fd: report some FDs as suspicious when possible by Willy Tarreau · 3 years, 8 months ago
- 8050efe MINOR: cli: give the show_fd helpers the ability to report a suspicious entry by Willy Tarreau · 3 years, 8 months ago
- 691d503 MINOR: xprt/mux: export all *_io_cb functions so that "show fd" resolves them by Willy Tarreau · 3 years, 8 months ago
- de5675a MINOR: ssl: provide a "show fd" helper to report important SSL information by Willy Tarreau · 3 years, 8 months ago
- 761d64c BUILD: ssl: guard openssl specific with SSL_READ_EARLY_DATA_SUCCESS by Ilya Shipitsin · 3 years, 8 months ago
- ec36c91 BUILD: ssl: guard EVP_PKEY_get_default_digest_nid with ASN1_PKEY_CTRL_DEFAULT_MD_NID by Ilya Shipitsin · 3 years, 8 months ago
- 1e9a666 CLEANUP: assorted typo fixes in the code and comments by Ilya Shipitsin · 3 years, 8 months ago
- b6fc524 MINOR: ssl: make tlskeys_list_get_next() take a list element by Willy Tarreau · 3 years, 8 months ago
- cb8b281 CLEANUP: ssl: Remove useless local variable in tlskeys_list_get_next() by Tim Duesterhus · 3 years, 8 months ago
- 2c7bb33 CLEANUP: ssl: Remove useless loop in tlskeys_list_get_next() by Tim Duesterhus · 3 years, 8 months ago
- e5ff141 CLEANUP: Compare the return value of `XXXcmp()` functions with zero by Tim Duesterhus · 3 years, 8 months ago
- e9473c7 MINOR: ssl: QUIC transport parameters parsing. by Frédéric Lécaille · 3 years, 10 months ago
- ec21652 MINOR: ssl: SSL CTX initialization modifications for QUIC. by Frédéric Lécaille · 3 years, 10 months ago
- 901ee2f MINOR: ssl: Export definitions required by QUIC. by Frédéric Lécaille · 3 years, 10 months ago
- 5aa9241 MINOR: ssl_sock: Initialize BIO and SSL objects outside of ssl_sock_init() by Frédéric Lécaille · 3 years, 10 months ago
- 967e7e7 MEDIUM: xxhash: use the XXH3 functions to generate 64-bit hashes by Dragan Dosen · 3 years, 9 months ago
- af20488 BUILD: ssl: fine guard for SSL_CTX_get0_privatekey call by Ilya Shipitsin · 3 years, 9 months ago
- ec60909 BUILD: SSL: fine guard for SSL_CTX_add_server_custom_ext call by Ilya Shipitsin · 3 years, 10 months ago
- 2ded48d MINOR: connection: make conn_sock_drain() use the control layer's ->drain() by Willy Tarreau · 3 years, 9 months ago
- b7fdfdf MEDIUM: ssl: fatal error with bundle + openssl < 1.1.1 by William Lallemand · 3 years, 9 months ago
- f34ed0b BUILD: SSL: guard TLS13 ciphersuites with HAVE_SSL_CTX_SET_CIPHERSUITES by Ilya Shipitsin · 3 years, 10 months ago
- 06ce84a BUG/MEDIUM: ssl: error when no certificate are found by William Lallemand · 3 years, 10 months ago
- bdec3ba BUILD: ssl: use SSL_MODE_ASYNC macro instead of OPENSSL_VERSION by Ilya Shipitsin · 3 years, 10 months ago
- f69cd68 BUG/MINOR: ssl: segv on startup when AKID but no keyid by William Lallemand · 3 years, 10 months ago
- f637044 MEDIUM: cli/ssl: configure ssl on server at runtime by William Dauchy · 3 years, 10 months ago
- 034c162 MEDIUM: stats: add counters for failed handshake by Amaury Denoyelle · 3 years, 10 months ago
- f70b7db MINOR: ssl: remove client hello counters by Amaury Denoyelle · 3 years, 10 months ago
- fc633b6 CLEANUP: config: Return ERR_NONE from config callbacks instead of 0 by Christopher Faulet · 3 years, 10 months ago
- 4299528 BUILD: ssl: silence build warning on uninitialised counters by Willy Tarreau · 3 years, 10 months ago
- d0447a7 MINOR: ssl: add counters for ssl sessions by Amaury Denoyelle · 3 years, 10 months ago
- fbc3377 MINOR: ssl: count client hello for stats by Amaury Denoyelle · 3 years, 10 months ago
- 9963fa7 MINOR: ssl: instantiate stats module by Amaury Denoyelle · 3 years, 10 months ago
- 6d27a92 BUG/MINOR: ssl: don't report 1024 bits DH param load error when it's higher by Willy Tarreau · 3 years, 10 months ago
- 0aa8c29 BUILD: ssl: use feature macros for detecting ec curves manipulation support by Ilya Shipitsin · 3 years, 10 months ago
- 04a5a44 BUILD: ssl: use HAVE_OPENSSL_KEYLOG instead of OpenSSL versions by Ilya Shipitsin · 3 years, 10 months ago
- b9b84a4 BUILD: ssl: more elegant OpenSSL early data support check by Ilya Shipitsin · 3 years, 11 months ago
- a73a222 BUG/MEDIUM: ssl: OCSP must work with BoringSSL by Emmanuel Hocdet · 3 years, 11 months ago
- 8e8581e MINOR: ssl: 'ssl-load-extra-del-ext' removes the certificate extension by William Lallemand · 3 years, 11 months ago
- b3201a3 BUG/MINOR: disable dynamic OCSP load with BoringSSL by Ilya Shipitsin · 3 years, 11 months ago
- 58feb49 CLEANUP: ssl: Release cached SSL sessions on deinit by Christopher Faulet · 4 years ago
- 70bf06e BUILD: fix build with openssl < 1.0.2 since bundle removal by William Lallemand · 4 years ago
- e7eb1fe CLEANUP: ssl: remove utility functions for bundle by William Lallemand · 4 years ago
- bd8e6ed CLEANUP: ssl: remove test on "multi" variable in ckch functions by William Lallemand · 4 years ago
- dfa93be MEDIUM: ssl: emulate multi-cert bundles loading in standard loading by William Lallemand · 4 years ago
- a459826 BUG/MEDIUM: ssl: Don't call ssl_sock_io_cb() directly. by Olivier Houchard · 4 years ago
- 2d6fd0a BUG/MINOR: ssl: verifyhost is case sensitive by William Lallemand · 4 years ago
- e52b6e5 CLEANUP: Do not use a fixed type for 'sizeof' in 'calloc' by Tim Duesterhus · 4 years ago
- 6767245 MEDIUM: fd: replace usages of fd_remove() with fd_stop_both() by Willy Tarreau · 4 years ago
- a78f3f0 BUG/MEDIUM: ssl: fix ssl_bind_conf double free w/ wildcards by William Lallemand · 4 years ago
- adabbfe MINOR: ssl: Support SAN extension for certificate generation by Shimi Gersner · 4 years, 1 month ago
- 5846c49 MEDIUM: ssl: Support certificate chaining for certificate generation by Shimi Gersner · 4 years, 1 month ago
- 30f9e09 BUG/MEDIUM: ssl: crt-list negative filters don't work by William Lallemand · 4 years, 1 month ago
- 5b1d1f6 CLEANUP: ssl: remove poorly readable nested ternary by William Lallemand · 4 years, 1 month ago
- 94bd319 BUG/MEDIUM: ssl: does not look for all SNIs before chosing a certificate by William Lallemand · 4 years, 1 month ago
- 935d829 BUG/MEDIUM: ssl: never generates the chain from the verify store by William Lallemand · 4 years, 1 month ago
- 9a1d839 BUG/MINOR: ssl: ssl-skip-self-issued-ca requires >= 1.0.2 by William Lallemand · 4 years, 1 month ago
- bf298af BUG/MEDIUM: ssl: fix the ssl-skip-self-issued-ca option by William Lallemand · 4 years, 1 month ago
- 76b4a12 BUG/MEDIUM: ssl: memory leak of ocsp data at SSL_CTX_free() by William Lallemand · 4 years, 1 month ago
- 86e4d63 BUG/MINOR: ssl: fix memory leak at OCSP loading by William Lallemand · 4 years, 1 month ago
- a560c06 BUG/MEDIUM: ssl: check OCSP calloc in ssl_sock_load_ocsp() by William Lallemand · 4 years, 1 month ago
- a9d7b76 MINOR: connection: use MT_LIST_ADDQ() to add connections to idle lists by Willy Tarreau · 4 years, 2 months ago
- de4db17 MINOR: lists: rename some MT_LIST operations to clarify them by Willy Tarreau · 4 years, 2 months ago
- 7d42ef5 WIP/MINOR: ssl: add sample fetches for keylog in frontend by William Lallemand · 4 years, 2 months ago
- f278eec BUILD: tree-wide: cast arguments to tolower/toupper to unsigned char by Willy Tarreau · 4 years, 2 months ago
- a74bb7e BUG/MEDIUM: connections: Let the xprt layer know a takeover happened. by Olivier Houchard · 4 years, 2 months ago
- b240869 MINOR: ssl: move the ckch/crtlist deinit to ssl_sock.c by William Lallemand · 4 years, 3 months ago
- 7df5c2d BUG/MEDIUM: ssl: fix ssl_bind_conf double free by William Lallemand · 4 years, 3 months ago
- d0712f3 BUG/MINOR: ssl: fix ssl-{min,max}-ver with openssl < 1.1.0 by William Lallemand · 4 years, 3 months ago
- b255105 CLEANUP: include: tree-wide alphabetical sort of include files by Willy Tarreau · 4 years, 3 months ago
- dfd3de8 REORG: include: move stream.h to haproxy/stream{,-t}.h by Willy Tarreau · 4 years, 3 months ago
- 1e56f92 REORG: include: move server.h to haproxy/server{,-t}.h by Willy Tarreau · 4 years, 3 months ago
- a264d96 REORG: include: move proxy.h to haproxy/proxy{,-t}.h by Willy Tarreau · 4 years, 3 months ago
- aeed4a8 REORG: include: move log.h to haproxy/log{,-t}.h by Willy Tarreau · 4 years, 3 months ago
- c2b1ff0 REORG: include: move http_ana.h to haproxy/http_ana{,-t}.h by Willy Tarreau · 4 years, 3 months ago
- f1d32c4 REORG: include: move channel.h to haproxy/channel{,-t}.h by Willy Tarreau · 4 years, 3 months ago
- 5e539c9 REORG: include: move stream_interface.h to haproxy/stream_interface{,-t}.h by Willy Tarreau · 4 years, 3 months ago
- 209108d REORG: include: move ssl_sock.h to haproxy/ssl_sock{,-t}.h by Willy Tarreau · 4 years, 3 months ago
- 83487a8 REORG: include: move cli.h to haproxy/cli{,-t}.h by Willy Tarreau · 4 years, 3 months ago
- 2eec9b5 REORG: include: move stats.h to haproxy/stats{,-t}.h by Willy Tarreau · 4 years, 3 months ago
- 3f0f82e REORG: move applet.h to haproxy/applet{,-t}.h by Willy Tarreau · 4 years, 3 months ago
- dcc048a REORG: include: move acl.h to haproxy/acl.h{,-t}.h by Willy Tarreau · 4 years, 3 months ago
- 7ea393d REORG: include: move connection.h to haproxy/connection{,-t}.h by Willy Tarreau · 4 years, 3 months ago
- fc77454 REORG: include: move proto_tcp.h to haproxy/proto_tcp.h by Willy Tarreau · 4 years, 3 months ago
- cea0e1b REORG: include: move task.h to haproxy/task{,-t}.h by Willy Tarreau · 4 years, 3 months ago
- f268ee8 REORG: include: split global.h into haproxy/global{,-t}.h by Willy Tarreau · 4 years, 3 months ago
- a171892 REORG: include: move vars.h to haproxy/vars{,-t}.h by Willy Tarreau · 4 years, 3 months ago
- 225a90a REORG: include: move pattern.h to haproxy/pattern{,-t}.h by Willy Tarreau · 4 years, 3 months ago
- 213e990 REORG: include: move listener.h to haproxy/listener{,-t}.h by Willy Tarreau · 4 years, 3 months ago
- 52d8872 REORG: move ssl_crtlist.h to haproxy/ssl_crtlist{,-t}.h by Willy Tarreau · 4 years, 3 months ago
- 47d7f90 REORG: include: move ssl_ckch.h to haproxy/ssl_ckch{,-t}.h by Willy Tarreau · 4 years, 3 months ago
- b2bd865 REORG: include: move ssl_utils.h to haproxy/ssl_utils.h by Willy Tarreau · 4 years, 3 months ago
- c761f84 REORG: include: move http_rules.h to haproxy/http_rules.h by Willy Tarreau · 4 years, 3 months ago