Gitiles
Code Review
Sign In
git01.mediatek.com
/
haproxy
/
75c98ad211c9e1b7304033b9d3eb4fe552d725d2
« Previous
ffc3fcd
MEDIUM: log: report SSL ciphers and version in logs using logformat %sslc/%sslv
by Willy Tarreau
· 12 years ago
4f65356
MINOR: log: make lf_text use a const char *
by Willy Tarreau
· 12 years ago
93dbc2b
MEDIUM: log: add a new LW_XPRT flag to pin the transport layer
by Willy Tarreau
· 12 years ago
1e95491
MEDIUM: connection: add a flag to hold the transport layer
by Willy Tarreau
· 12 years ago
91083f5
BUG/MEDIUM: session: enable the conn_session_update() callback
by Willy Tarreau
· 12 years ago
e9909f4
BUG/MINOR: session: fix some leftover from debug code
by Willy Tarreau
· 12 years ago
6c03a64
MEDIUM: connection: always unset the transport layer upon close
by Willy Tarreau
· 12 years ago
773d65f
MEDIUM: log: suffix the frontend's name with '~' when using SSL
by Willy Tarreau
· 12 years ago
fd33a26
DOC: Fix rename of options cafile and crlfile to ca-file and crl-file.
by Emeric Brun
· 12 years ago
ef42d92
MINOR: ssl: add statements 'verify', 'ca-file' and 'crl-file' on servers.
by Emeric Brun
· 12 years ago
f9c5c47
MINOR: ssl: add statement 'no-tls-tickets' on server side.
by Emeric Brun
· 12 years ago
ecc91fe
MEDIUM: ssl: reject ssl server keywords in default-server statement
by Emeric Brun
· 12 years ago
94324a4
MINOR: ssl: move ssl context init for servers from cfgparse.c to ssl_sock.c
by Emeric Brun
· 12 years ago
992adc9
BUG/MINOR: ssl: Fix issue on server statements 'no-tls*' and 'no-sslv3'
by Emeric Brun
· 12 years ago
92faadf
MEDIUM: ssl: move "server" keyword SSL options parsing to ssl_sock.c
by Willy Tarreau
· 12 years ago
7151633
BUG/MEDIUM: config: check-send-proxy was ignored if SSL was not builtin
by Willy Tarreau
· 12 years ago
dff5543
MEDIUM: server: move parsing of keyword "id" to server.c
by Willy Tarreau
· 12 years ago
d0d6059
MEDIUM: server: check for registered keywords when parsing unknown keywords
by Willy Tarreau
· 12 years ago
70eec38
MINOR: standard: make indent_msg() support empty messages
by Willy Tarreau
· 12 years ago
21faa91
MINOR: server: add minimal infrastructure to parse keywords
by Willy Tarreau
· 12 years ago
7fca87f
BUILD: accept4: move the socketcall declaration outside of accept4()
by Willy Tarreau
· 12 years ago
667c905
MINOR: halog: add a parameter to limit output line count
by Willy Tarreau
· 12 years ago
4201df7
BUG/MINOR: halog: fix help message for -ut/-uto
by Willy Tarreau
· 12 years ago
0a70688
BUG/MINOR: halog: -ad/-ac report the correct number of output lines
by Willy Tarreau
· 12 years ago
8a09b66
MINOR: halog: sort output by cookie code
by Willy Tarreau
· 12 years ago
9c1eb1e
DOC: ssl: surround keywords with quotes
by Cyril Bonté
· 12 years ago
0d44fc6
DOC: ssl: remove prefer-server-ciphers documentation
by Cyril Bonté
· 12 years ago
1bc4aab
MEDIUM: listener: add support for linux's accept4() syscall
by Willy Tarreau
· 12 years ago
1b6c00c
BUG/MAJOR: ensure that hdr_idx is always reserved when L7 fetches are used
by Willy Tarreau
· 12 years ago
71e451c
CLEANUP: cttproxy: remove a warning on undeclared close()
by Willy Tarreau
· 12 years ago
76d8895
MINOR: ssl: add defines LISTEN_DEFAULT_CIPHERS and CONNECT_DEFAULT_CIPHERS.
by Emeric Brun
· 12 years ago
8694b9a
MINOR: ssl: add 'force-sslv3' and 'force-tlsvXX' statements on server
by Emeric Brun
· 12 years ago
2cb7ae5
MINOR: ssl: add 'force-sslv3' and 'force-tlsvXX' statements on bind.
by Emeric Brun
· 12 years ago
8967549
MINOR: ssl: use bit fields to store ssl options instead of one int each
by Emeric Brun
· 12 years ago
fb510ea
MEDIUM: conf: rename 'cafile' and 'crlfile' statements 'ca-file' and 'crl-file'
by Emeric Brun
· 12 years ago
9b3009b
MEDIUM: conf: rename 'nosslv3' and 'notlsvXX' statements 'no-sslv3' and 'no-tlsvXX'.
by Emeric Brun
· 12 years ago
c8e8d12
MINOR: ssl: add 'crt-base' and 'ca-base' global statements.
by Emeric Brun
· 12 years ago
9fa8973
BUG/MEDIUM: ssl: subsequent handshakes fail after server configuration changes
by Emeric Brun
· 12 years ago
3b5bc66
BUG: connection: fix regression from commit 9e272bf9
by Willy Tarreau
· 12 years ago
3c4bc6e
MINOR: ssl: remove prefer-server-ciphers statement and set it as the default on ssl listeners.
by Emeric Brun
· 12 years ago
ce08baa
BUG/MINOR: build: Fix failure with USE_OPENSSL=1 and USE_FUTEX=1 on archs i486 and i686.
by Emeric Brun
· 12 years ago
0914df8
BUG/MINOR: conf: Fix 'maxsslconn' statement error if built without OPENSSL.
by Emeric Brun
· 12 years ago
1c862c5
MEDIUM: tcp: enable TCP Fast Open on systems which support it
by Willy Tarreau
· 12 years ago
4c75cca
MINOR: samples: update the url_param fetch to match parameters in the path
by bedis
· 12 years ago
392e939
CLEANUP: checks: remove minor warnings for assigned but not used variables
by Willy Tarreau
· 12 years ago
e6baecf
BUILD: fix build issue without USE_OPENSSL
by Baptiste Assmann
· 12 years ago
6c16adc
MEDIUM: checks: enable the PROXY protocol with health checks
by Willy Tarreau
· 12 years ago
763a95b
MEDIUM: checks: add the "check-ssl" server option
by Willy Tarreau
· 12 years ago
f150317
MAJOR: checks: completely use the connection transport layer
by Willy Tarreau
· 12 years ago
f4288ee
MEDIUM: check: add the ctrl and transport layers in the server check structure
by Willy Tarreau
· 12 years ago
1ae1b7b
MEDIUM: checks: use real buffers to store requests and responses
by Willy Tarreau
· 12 years ago
5b3a202
REORG: server: move the check-specific parts into a check subsection
by Willy Tarreau
· 12 years ago
fb56aab
MAJOR: checks: make use of the connection layer to send checks
by Willy Tarreau
· 12 years ago
5f1504f
MEDIUM: connection: add a new local send-proxy transport callback
by Willy Tarreau
· 12 years ago
e1e4a61
REORG: connection: move the PROXY protocol management to connection.c
by Willy Tarreau
· 12 years ago
0ffde2c
MEDIUM: connection: automatically disable polling on error
by Willy Tarreau
· 12 years ago
665e6ee
MEDIUM: connection: it's not the data layer's role to validate the connection
by Willy Tarreau
· 12 years ago
78eaebe
MEDIUM: connection: don't call the data->init callback upon error
by Willy Tarreau
· 12 years ago
9683e9a
MEDIUM: session: register a data->wake callback to process errors
by Willy Tarreau
· 12 years ago
2396c1c
MEDIUM: connection: make it possible for data->wake to return an error
by Willy Tarreau
· 12 years ago
9e272bf
MEDIUM: connection: only call the data->wake callback on activity
by Willy Tarreau
· 12 years ago
f3a6d7e
MEDIUM: connection: reorganize connection flags
by Willy Tarreau
· 12 years ago
071e137
MEDIUM: connection: use a generic data-layer init() callback
by Willy Tarreau
· 12 years ago
5e75e27
MEDIUM: session: use a specific data_cb for embryonic sessions
by Willy Tarreau
· 12 years ago
f4e114f
MINOR: connection: add an init callback to the data_cb struct
by Willy Tarreau
· 12 years ago
bd99aab
MINOR: connection: split conn_prepare() in two functions
by Willy Tarreau
· 12 years ago
4aa3683
MINOR: connection: provide a generic data layer wakeup callback
by Willy Tarreau
· 12 years ago
74beec3
REORG: connection: rename app_cb "data"
by Willy Tarreau
· 12 years ago
f7bc57c
REORG: connection: rename the data layer the "transport layer"
by Willy Tarreau
· 12 years ago
6f5d141
MEDIUM: raw_sock: improve connection error reporting
by Willy Tarreau
· 12 years ago
c0e9886
MINOR: raw_sock: always report asynchronous connection errors
by Willy Tarreau
· 12 years ago
8c89c20
MINOR: buffers: add a few functions to write chars, strings and blocks
by Willy Tarreau
· 12 years ago
c39b0d1
MINOR: signal: really ignore signals configured with no handler
by Willy Tarreau
· 12 years ago
f8cfa44
BUG/MINOR: epoll: correctly disable FD polling in fd_rem()
by Willy Tarreau
· 12 years ago
050536d
MEDIUM: proxy: add the global frontend to the list of normal proxies
by Willy Tarreau
· 12 years ago
b3fb60b
BUG/MEDIUM: listener: don't pause protocols that do not support it
by Willy Tarreau
· 12 years ago
8113a5d
BUG/MINOR: config: use a copy of the file name in proxy configurations
by Willy Tarreau
· 12 years ago
d1a33e3
BUG/MEDIUM: proxy: must not try to stop disabled proxies upon reload
by Willy Tarreau
· 12 years ago
8923019
BUG/MINOR: ssl: report the L4 connection as established when possible
by Willy Tarreau
· 12 years ago
051cdab
BUG/MINOR: build: Fix compilation issue on openssl 0.9.6 due to missing CRL feature.
by Emeric Brun
· 12 years ago
561e574
BUG/MINOR: ssl: Fix CRL check was not enabled when crlfile was specified.
by Emeric Brun
· 12 years ago
90ad872
DOC: ssl: add 'no-tls-tickets' statement documentation.
by Emeric Brun
· 12 years ago
2d0c482
MINOR: ssl: add statement 'no-tls-tickets' on bind to disable stateless session resumption
by Emeric Brun
· 12 years ago
c6678e2
MEDIUM: config: authorize frontend and listen without bind.
by Emeric Brun
· 12 years ago
f5da493
DOC: ssl : add statements 'notlsv11' and 'notlsv12' and rename 'notlsv1' to 'notlsv10'.
by Emeric Brun
· 12 years ago
c0ff492
MINOR: ssl : add statements 'notlsv11' and 'notlsv12' and rename 'notlsv1' to 'notlsv10'.
by Emeric Brun
· 12 years ago
9faf071
MINOR: ssl: add build param USE_PRIVATE_CACHE to build cache without shared memory
by Emeric Brun
· 12 years ago
4b3091e
MINOR: ssl: disable shared memory and locks on session cache if nbproc == 1
by Emeric Brun
· 12 years ago
3603fbe
DOC: ssl: add fetches and ACLs 'ssl_verify_crterr', 'ssl_verify_caerr', and 'ssl_verify_crterr_depth'
by Emeric Brun
· 12 years ago
f282a81
MINOR: ssl: add fetches and ACLs to return verify errors
by Emeric Brun
· 12 years ago
c68af8d
DOC: ssl: add fetch and ACL 'ssl_verify_result'
by Emeric Brun
· 12 years ago
baf8ffb
MINOR: ssl: add fetch and ACL 'ssl_verify_result'
by Emeric Brun
· 12 years ago
b6dc934
DOC: ssl: add 'ca-ignore-err' and 'crt-ignore-err' statements on 'bind'
by Emeric Brun
· 12 years ago
81c00f0
MINOR: ssl: add ignore verify errors options
by Emeric Brun
· 12 years ago
b435408
DOC: ssl: add fetch and ACL 'client_cert'
by Emeric Brun
· 12 years ago
e64aef1
MINOR: ssl: add fetch and ACL 'client_crt' to test a client cert is present
by Emeric Brun
· 12 years ago
1a073b4
DOC: ssl: add 'verify', 'cafile' and 'crlfile' statements on 'bind'
by Emeric Brun
· 12 years ago
d94b3fe
MEDIUM: ssl: add client certificate authentication support
by Emeric Brun
· 12 years ago
7fb3442
DOC: ssl: add 'ecdhe' statement on 'bind'
by Emeric Brun
· 12 years ago
2b58d04
MINOR: ssl: add elliptic curve Diffie-Hellman support for ssl key generation
by Emeric Brun
· 12 years ago
Next »