Gitiles
Code Review Sign In
git01.mediatek.com / haproxy / 6c90379d6f325891c6d73a2e02d9b8d5c39c6620 / src / ssl_ckch.c
  1. d513644 BUG/MINOR: ssl/cli: can't find ".crt" files when replacing a certificate by William Lallemand · 1 year, 3 months ago
  2. 208c712 MINOR: stconn: Rename SC_FL_SHUTW in SC_FL_SHUT_DONE by Christopher Faulet · 1 year, 8 months ago
  3. 7faac7c MINOR: tree-wide: Simplifiy some tests on SHUT flags by accessing SCs directly by Christopher Faulet · 1 year, 8 months ago
  4. 87633c3 MEDIUM: tree-wide: Move flags about shut from the channel to the SC by Christopher Faulet · 1 year, 8 months ago
  5. 11fddb9 MINOR: ssl-ckch: Stop to test CF_WRITE_ERROR to commit CA/CRL file by Christopher Faulet · 1 year, 10 months ago
  6. da89e9b MINOR: channel/applets: Stop to test CF_WRITE_ERROR flag if CF_SHUTW is enough by Christopher Faulet · 1 year, 11 months ago
  7. cc34667 MEDIUM: ssl: Add ocsp_certid in ckch structure and discard ocsp buffer early by Remi Tricot-Le Breton · 2 years ago
  8. 52ddd99 MEDIUM: ssl: rename the struct "cert_key_and_chain" to "ckch_data" by William Lallemand · 2 years ago
  9. 0a2d632 BUG/MINOR: ssl: shut the ca-file errors emitted during httpclient init by William Lallemand · 2 years ago
  10. 3992f55 MINOR: ssl: forgotten newline in error messages on ca-file by William Lallemand · 2 years ago
  11. 3cbf09e MEDIUM: ssl: add minimal WolfSSL support with OpenSSL compatibility mode by Uriah Pollock · 2 years ago
  12. 78c7a06 MINOR: ssl: reintroduce ERR_GET_LIB(ret) == ERR_LIB_PEM in ssl_sock_load_pem_into_ckch() by William Lallemand · 2 years ago
  13. 6fcc86b BUILD: ssl: use __fallthrough in cli_io_handler_commit_{cert,cafile_crlfile}() by Willy Tarreau · 2 years ago
  14. 1ef1b85 CLEANUP: ssl: remove dead code in ssl_sock_load_pem_into_ckch() by William Lallemand · 2 years, 1 month ago
  15. 432cd1a MEDIUM: ssl: be stricter about chain error by William Lallemand · 2 years, 1 month ago
  16. a538452 MINOR: ssl: add the SSL error string before the chain by William Lallemand · 2 years, 1 month ago
  17. f784b90 MINOR: ssl: add the SSL error string when failing to load a certificate by William Lallemand · 2 years, 1 month ago
  18. e0fa91f BUG/MINOR: ssl: leak of ckch_inst_link in ckch_inst_free() v2 by William Lallemand · 2 years, 3 months ago
  19. 0bfa3e7 BUG/MINOR: ssl: revert two wrong fixes with ckhi_link by William Lallemand · 2 years, 3 months ago
  20. ddd480c BUG/MEDIUM: ssl: Fix a UAF when old ckch instances are released by Christopher Faulet · 2 years, 3 months ago
  21. 056ad01 BUG/MINOR: ssl: leak of ckch_inst_link in ckch_inst_free() by William Lallemand · 2 years, 3 months ago
  22. 946580e BUG/MINOR: ssl: fix deinit of the ca-file tree by William Lallemand · 2 years, 3 months ago
  23. 62c0b99 MINOR: ssl/cli: implement "add ssl ca-file" by William Lallemand · 2 years, 4 months ago
  24. d4774d3 MINOR: ssl: handle ca-file appending in cafile_entry by William Lallemand · 2 years, 4 months ago
  25. ec7eb59 BUG/MINOR: ssl/cli: error when the ca-file is empty by William Lallemand · 2 years, 3 months ago
  26. 0f17ab2 MINOR: ssl: enhance ca-file error emitting by William Lallemand · 2 years, 4 months ago
  27. 4348232 BUG/MINOR: ssl: allow duplicate certificates in ca-file directories by William Lallemand · 2 years, 4 months ago
  28. 1bad7db BUG/MINOR: ssl: Do not look for key in extra files if already in pem by Remi Tricot-Le Breton · 2 years, 6 months ago
  29. d543ae0 BUILD: ssl_ckch: fix "maybe-uninitialized" build error on gcc-9.4 + ARM by Willy Tarreau · 2 years, 5 months ago
  30. 1f90f33 BUG/MINOR: ssl_ckch: Fix another possible uninitialized value by Christopher Faulet · 2 years, 6 months ago
  31. ea2c8c6 BUILD: ssl_ckch: Fix build error about a possible uninitialized value by Christopher Faulet · 2 years, 6 months ago
  32. 88041b3 BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_crlfile I/O handler by Christopher Faulet · 2 years, 6 months ago
  33. 677cb4f BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cafile I/O handler by Christopher Faulet · 2 years, 6 months ago
  34. d1d2e4d BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler by Christopher Faulet · 2 years, 6 months ago
  35. d6c66f0 MINOR: ssl_ckch: Remove service context for "set ssl crl-file" command by Christopher Faulet · 2 years, 6 months ago
  36. 132c595 MINOR: ssl_ckch: Remove service context for "set ssl ca-file" command by Christopher Faulet · 2 years, 6 months ago
  37. 24a20b9 MINOR: ssl_ckch: Remove service context for "set ssl cert" command by Christopher Faulet · 2 years, 6 months ago
  38. 6af2fc6 MINOR: ssl_ckch: Simplify structure used to commit changes on CA/CRL entries by Christopher Faulet · 2 years, 6 months ago
  39. dd0c483 CLEANUP: ssl_ckch: Remove unused field in commit_cacrlfile_ctx structure by Christopher Faulet · 2 years, 6 months ago
  40. f814c4a BUG/MINOR: ssl_ckch: Init right field when parsing "commit ssl crl-file" cmd by Christopher Faulet · 2 years, 6 months ago
  41. 3e94f5d BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield by Christopher Faulet · 2 years, 6 months ago
  42. 5a2154b BUG/MINOR: ssl_ckch: Dump CA transaction only once if show command yield by Christopher Faulet · 2 years, 6 months ago
  43. 9a99e54 BUG/MINOR: ssl_ckch: Dump CRL transaction only once if show command yield by Christopher Faulet · 2 years, 6 months ago
  44. 51095ee BUG/MINOR: ssl_ckch: Use right type for old entry in show_crlfile_ctx by Christopher Faulet · 2 years, 6 months ago
  45. ddc8e1c MINOR: ssl_ckch: Simplify I/O handler to commit changes on CA/CRL entry by Christopher Faulet · 2 years, 6 months ago
  46. 14df913 CLEANUP: ssl_ckch: Use corresponding enum for commit_cacrlfile_ctx.cafile_type by Christopher Faulet · 2 years, 6 months ago
  47. e9c3bd1 BUG/MEDIUM: ssl_ckch: Rework 'commit ssl ca-file' to handle full buffer cases by Christopher Faulet · 2 years, 6 months ago
  48. 9d56e24 BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases by Christopher Faulet · 2 years, 6 months ago
  49. 1e00c7e BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a CA/CRL entry by Christopher Faulet · 2 years, 6 months ago
  50. e2ef4dd BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry by Christopher Faulet · 2 years, 6 months ago
  51. 1f08fa4 BUG/MEDIUM: ssl_ckch: Don't delete CA/CRL entry if it is being modified by Christopher Faulet · 2 years, 6 months ago
  52. 926fefc BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified by Christopher Faulet · 2 years, 6 months ago
  53. 4329dcc BUG/MINOR: ssl_ckch: Free error msg if commit changes on a CA/CRL entry fails by Christopher Faulet · 2 years, 6 months ago
  54. 01a09e2 BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails by Christopher Faulet · 2 years, 6 months ago
  55. c12b321 CLEANUP: applet: rename appctx_cs() to appctx_sc() by Willy Tarreau · 2 years, 6 months ago
  56. 475e463 CLEANUP: cli: rename all occurrences of stconn "cs" to "sc" by Willy Tarreau · 2 years, 6 months ago
  57. cb086c6 REORG: stconn: rename conn_stream.{c,h} to stconn.{c,h} by Willy Tarreau · 2 years, 6 months ago
  58. 5edca2f REORG: rename cs_utils.h to sc_strm.h by Willy Tarreau · 2 years, 6 months ago
  59. 4164eb9 MINOR: stconn: start to rename cs_rx_endp_{more,done}() to se_have_{no_,}more_data() by Willy Tarreau · 2 years, 6 months ago
  60. 40a9c32 CLEANUP: stconn: rename cs_{i,o}{b,c} to sc_{i,o}{b,c} by Willy Tarreau · 2 years, 6 months ago
  61. d0a06d5 CLEANUP: applet: use applet_put*() everywhere possible by Willy Tarreau · 2 years, 6 months ago
  62. 4596fe2 CLEANUP: conn_stream: tree-wide rename to stconn (stream connector) by Willy Tarreau · 2 years, 7 months ago
  63. 9bf3a1f BUG/MINOR: ssl: Fix crash when no private key is found in pem by Remi Tricot-Le Breton · 2 years, 7 months ago
  64. 0698c80 CLEANUP: applet: remove the unneeded appctx->owner by Willy Tarreau · 2 years, 7 months ago
  65. 444d702 BUG/MINOR: ssl: Fix typos in crl-file related CLI commands by Remi Tricot-Le Breton · 2 years, 7 months ago
  66. e4b93eb MINOR: ssl: ignore dotfiles when loading a dir w/ ca-file by William Lallemand · 2 years, 7 months ago
  67. 1d6dd80 CLEANUP: ssl/cli: stop using appctx->st2 for "commit ssl ca/crl" by Willy Tarreau · 2 years, 7 months ago
  68. dec23dc CLEANUP: ssl/cli: use a local context for "commit ssl {ca|crl}file" by Willy Tarreau · 2 years, 7 months ago
  69. a06b9a5 CLEANUP: ssl/cli: use a local context for "set ssl crlfile" by Willy Tarreau · 2 years, 7 months ago
  70. a37693f CLEANUP: ssl/cli: use a local context for "set ssl cafile" by Willy Tarreau · 2 years, 7 months ago
  71. 329f4b4 CLEANUP: ssl/cli: use a local context for "set ssl cert" by Willy Tarreau · 2 years, 7 months ago
  72. cb1b4ed CLEANUP: ssl/cli: stop using appctx->st2 for "commit ssl cert" by Willy Tarreau · 2 years, 7 months ago
  73. a645b6a CLEANUP: ssl/cli: use a local context for "commit ssl cert" by Willy Tarreau · 2 years, 7 months ago
  74. 96c9a6c CLEANUP: ssl/cli: use a local context for "show ssl cert" by Willy Tarreau · 2 years, 7 months ago
  75. f3e8b3e CLEANUP: ssl/cli: use a local context for "show crlfile" by Willy Tarreau · 2 years, 7 months ago
  76. 50c2f1e CLEANUP: ssl/cli: use a local context for "show cafile" by Willy Tarreau · 2 years, 7 months ago
  77. 4fd9b4d BUG/MINOR: ssl/cli: fix "show ssl cert" not to mix cli+ssl contexts by Willy Tarreau · 2 years, 7 months ago
  78. 4cf3ef8 BUG/MINOR: ssl/cli: fix "show ssl crl-file" not to mix cli+ssl contexts by Willy Tarreau · 2 years, 7 months ago
  79. 0630579 BUG/MINOR: ssl/cli: fix "show ssl ca-file <name>" not to mix cli+ssl contexts by Willy Tarreau · 2 years, 7 months ago
  80. 821c3b0 BUG/MINOR: ssl/cli: fix "show ssl ca-file/crl-file" not to mix cli+ssl contexts by Willy Tarreau · 2 years, 7 months ago
  81. 03a32e5 BUG/MEDIUM: ssl/cli: fix yielding in show_cafile_detail by William Lallemand · 2 years, 7 months ago
  82. 4cfbf3c BUG/MINOR: ssl: memory leak when trying to load a directory with ca-file by William Lallemand · 2 years, 7 months ago
  83. b0c4827 BUG/MINOR: ssl: free the cafile entries on deinit by William Lallemand · 2 years, 7 months ago
  84. 6b0a0fb CLEANUP: tree-wide: Remove any ref to stream-interfaces by Christopher Faulet · 2 years, 8 months ago
  85. a0bdec3 MEDIUM: stream-int/conn-stream: Move blocking flags from SI to CS by Christopher Faulet · 2 years, 8 months ago
  86. 908628c MEDIUM: tree-wide: Use CS util functions instead of SI ones by Christopher Faulet · 2 years, 8 months ago
  87. e8041fe BUG/MINOR: ssl/cli: Remove empty lines from CLI output by Remi Tricot-Le Breton · 2 years, 8 months ago
  88. 80296b4 BUG/MINOR: ssl: handle X509_get_default_cert_dir() returning NULL by William Lallemand · 2 years, 8 months ago
  89. c6b1763 MINOR: ssl: ca-file @system-ca loads the system trusted CA by William Lallemand · 2 years, 8 months ago
  90. 4f6ca32 BUG/MINOR: ssl: continue upon error when opening a directory w/ ca-file by William Lallemand · 2 years, 8 months ago
  91. 87fd994 MEDIUM: ssl: allow loading of a directory with the ca-file directive by William Lallemand · 2 years, 8 months ago
  92. 30fcca1 MINOR: ssl/lua: CertCache.set() allows to update an SSL certificate file by William Lallemand · 2 years, 8 months ago
  93. 26654e7 MINOR: ssl: add "crt" in the cert_exts array by William Lallemand · 2 years, 8 months ago
  94. e60c7d6 MINOR: ssl: export ckch_inst_rebuild() by William Lallemand · 2 years, 8 months ago
  95. ff8bf98 MINOR: ssl: simplify the certificate extensions array by William Lallemand · 2 years, 8 months ago
  96. aaacc7e MINOR: ssl: move the cert_exts and the CERT_TYPE enum by William Lallemand · 2 years, 8 months ago
  97. 3b5a3a6 MINOR: ssl: split the cert commit io handler by William Lallemand · 2 years, 8 months ago
  98. 86e1c33 MEDIUM: applet: Set the conn-stream as appctx owner instead of the stream-int by Christopher Faulet · 3 years ago
  99. a9a591a BUG/MINOR: ssl: Add missing return value check in ssl_ocsp_response_print by Remi Tricot-Le Breton · 2 years, 10 months ago
  100. c76c3c4 MEDIUM: ssl: Replace all DH objects by EVP_PKEY on OpenSSLv3 (via HASSL_DH type) by Remi Tricot-Le Breton · 2 years, 10 months ago