1. 474f614 MINOR: ssl: Treat ocsp-update inconsistencies as fatal errors by Remi Tricot-Le Breton · Thu Jan 12 09:49:09 2023 +0100
  2. 8c99081 BUG/MINOR: ssl: Missing ssl_conf pointer check when checking ocsp update inconsistencies by Remi Tricot-Le Breton · Tue Jan 10 11:44:15 2023 +0100
  3. da89e9b MINOR: channel/applets: Stop to test CF_WRITE_ERROR flag if CF_SHUTW is enough by Christopher Faulet · Wed Jan 04 14:11:10 2023 +0100
  4. fc92b8b MINOR: ssl: Detect more OCSP update inconsistencies by Remi Tricot-Le Breton · Mon Jan 09 12:02:46 2023 +0100
  5. fb2b998 MINOR: ssl: Store 'ocsp-update' mode in the ckch_data and check for inconsistencies by Remi Tricot-Le Breton · Tue Dec 20 11:11:11 2022 +0100
  6. 52ddd99 MEDIUM: ssl: rename the struct "cert_key_and_chain" to "ckch_data" by William Lallemand · Tue Nov 22 11:51:53 2022 +0100
  7. aef8448 BUILD: ssl/crt-list: use __fallthrough in cli_io_handler_add_crtlist() by Willy Tarreau · Mon Nov 14 07:03:16 2022 +0100
  8. cb6c5f4 BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list by William Lallemand · Mon Jun 20 16:51:53 2022 +0200
  9. c642d7c BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases by Christopher Faulet · Wed Jun 01 16:31:09 2022 +0200
  10. c12b321 CLEANUP: applet: rename appctx_cs() to appctx_sc() by Willy Tarreau · Fri May 27 11:08:15 2022 +0200
  11. 475e463 CLEANUP: cli: rename all occurrences of stconn "cs" to "sc" by Willy Tarreau · Fri May 27 10:26:46 2022 +0200
  12. cb086c6 REORG: stconn: rename conn_stream.{c,h} to stconn.{c,h} by Willy Tarreau · Fri May 27 09:47:12 2022 +0200
  13. 5edca2f REORG: rename cs_utils.h to sc_strm.h by Willy Tarreau · Fri May 27 09:25:10 2022 +0200
  14. 4164eb9 MINOR: stconn: start to rename cs_rx_endp_{more,done}() to se_have_{no_,}more_data() by Willy Tarreau · Wed May 25 15:42:03 2022 +0200
  15. 40a9c32 CLEANUP: stconn: rename cs_{i,o}{b,c} to sc_{i,o}{b,c} by Willy Tarreau · Wed May 18 15:55:18 2022 +0200
  16. d0a06d5 CLEANUP: applet: use applet_put*() everywhere possible by Willy Tarreau · Wed May 18 15:07:19 2022 +0200
  17. 4596fe2 CLEANUP: conn_stream: tree-wide rename to stconn (stream connector) by Willy Tarreau · Tue May 17 19:07:51 2022 +0200
  18. 0698c80 CLEANUP: applet: remove the unneeded appctx->owner by Willy Tarreau · Wed May 11 14:09:57 2022 +0200
  19. 63fc900 BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-( by Willy Tarreau · Mon May 09 21:14:04 2022 +0200
  20. 393e42a BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation by Willy Tarreau · Mon May 09 10:31:28 2022 +0200
  21. 589570d MEDIUM: ssl: ignore dotfiles when loading a dir w/ crt by William Lallemand · Mon May 09 10:30:51 2022 +0200
  22. fa11df5 CLEANUP: ssl/cli: make "add ssl crtlist" not use st2 anymore by Willy Tarreau · Thu May 05 13:48:40 2022 +0200
  23. 6b6c363 CLEANUP: ssl/cli: make "add ssl crtlist" use its own context by Willy Tarreau · Thu May 05 13:43:49 2022 +0200
  24. a2fcca0 CLEANUP: ssl/cli: make "{show|dump} ssl crtlist" use its own context by Willy Tarreau · Thu May 05 11:53:23 2022 +0200
  25. 1b948ef CLEANUP: ssl/cli: do not loop on unknown states in "add ssl crt-list" handler by Willy Tarreau · Thu May 05 13:50:46 2022 +0200
  26. 6b0a0fb CLEANUP: tree-wide: Remove any ref to stream-interfaces by Christopher Faulet · Mon Apr 04 11:29:28 2022 +0200
  27. a0bdec3 MEDIUM: stream-int/conn-stream: Move blocking flags from SI to CS by Christopher Faulet · Mon Apr 04 07:51:21 2022 +0200
  28. 908628c MEDIUM: tree-wide: Use CS util functions instead of SI ones by Christopher Faulet · Fri Mar 25 16:43:49 2022 +0100
  29. 86e1c33 MEDIUM: applet: Set the conn-stream as appctx owner instead of the stream-int by Christopher Faulet · Mon Dec 20 17:09:39 2021 +0100
  30. 4458b97 MEDIUM: ssl: Chain ckch instances in ca-file entries by Remi Tricot-Le Breton · Fri Feb 19 17:41:55 2021 +0100
  31. b205bfd CLEANUP: cli/tree-wide: properly re-align the CLI commands' help messages by Willy Tarreau · Fri May 07 11:38:37 2021 +0200
  32. 2b71810 CLEANUP: lists/tree-wide: rename some list operations to avoid some confusion by Willy Tarreau · Wed Apr 21 07:32:39 2021 +0200
  33. bc2c386 BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one by Remi Tricot-Le Breton · Fri Mar 26 10:47:50 2021 +0100
  34. fb00f31 BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list" by Remi Tricot-Le Breton · Tue Mar 23 16:41:53 2021 +0100
  35. 61cfdf4 CLEANUP: tree-wide: replace free(x);x=NULL with ha_free(&x) by Willy Tarreau · Sat Feb 20 10:46:51 2021 +0100
  36. e5ff141 CLEANUP: Compare the return value of `XXXcmp()` functions with zero by Tim Duesterhus · Sat Jan 02 22:31:53 2021 +0100
  37. b7fdfdf MEDIUM: ssl: fatal error with bundle + openssl < 1.1.1 by William Lallemand · Fri Dec 04 15:45:02 2020 +0100
  38. f34ed0b BUILD: SSL: guard TLS13 ciphersuites with HAVE_SSL_CTX_SET_CIPHERSUITES by Ilya Shipitsin · Sat Nov 21 14:37:34 2020 +0500
  39. 77e1c6f BUG/MEDIUM: ssl/crt-list: fix error when no file found by William Lallemand · Fri Nov 20 18:26:09 2020 +0100
  40. 7340457 BUG/MINOR: ssl/crt-list: load bundle in crt-list only if activated by William Lallemand · Fri Nov 20 18:23:40 2020 +0100
  41. 86c2dd6 BUG/MEDIUM: ssl/crt-list: bundle support broken in crt-list by William Lallemand · Fri Nov 20 14:23:38 2020 +0100
  42. 50c03aa BUG/MEDIUM: ssl/crt-list: correctly insert crt-list line if crt already loaded by William Lallemand · Fri Nov 06 16:24:07 2020 +0100
  43. 51f784b CLEANUP: ssl: "bundle" is not an OpenSSL wording by William Lallemand · Fri Oct 02 18:08:18 2020 +0200
  44. 1d0206e MINOR: ssl: remove uneeded check in crtlist_parse_file by William Dauchy · Fri Oct 02 15:27:20 2020 +0200
  45. b9f6acc MINOR: ssl: Add error if a crt-list might be truncated by Tim Duesterhus · Tue Sep 29 18:00:28 2020 +0200
  46. 6d07fae CLEANUP: ssl: Use structured format for error line report during crt-list parsing by Tim Duesterhus · Tue Sep 29 18:00:27 2020 +0200
  47. 20b0fed BUG/MINOR: ssl/crt-list: exit on warning out of crtlist_parse_line() by William Lallemand · Mon Sep 28 15:45:16 2020 +0200
  48. bd8e6ed CLEANUP: ssl: remove test on "multi" variable in ckch functions by William Lallemand · Wed Sep 16 16:08:08 2020 +0200
  49. 47da821 MEDIUM: ssl: emulates the multi-cert bundles in the crtlist by William Lallemand · Thu Sep 10 19:13:27 2020 +0200
  50. 5622c45 MINOR: ssl: crtlist_entry_dup() duplicates a crtlist_entry by William Lallemand · Thu Sep 10 19:08:49 2020 +0200
  51. 82f2d2f MINOR: ssl: crtlist_dup_ssl_conf() duplicates a ssl_bind_conf by William Lallemand · Thu Sep 10 19:06:43 2020 +0200
  52. 89d3b35 MEDIUM: ssl: remove bundle support in crt-list and directories by William Lallemand · Wed Sep 09 11:42:04 2020 +0200
  53. 0354b65 BUG/MINOR: ssl/crt-list: crt-list could end without a \n by William Lallemand · Wed Sep 16 11:55:09 2020 +0200
  54. 99cc218 MINOR: cli/ssl: handle trailing slashes in crt-list commands by William Lallemand · Thu Jun 25 15:19:51 2020 +0200
  55. 9ab8f8d BUG/MINOR: ssl/cli: certs added from the CLI can't be deleted by William Lallemand · Wed Jun 24 01:00:52 2020 +0200
  56. ee8530c MINOR: ssl: free the crtlist and the ckch during the deinit() by William Lallemand · Tue Jun 23 18:19:42 2020 +0200
  57. 6a3168a MINOR: ssl: free bind_conf_node in crtlist_free() by William Lallemand · Tue Jun 23 11:43:35 2020 +0200
  58. b255105 CLEANUP: include: tree-wide alphabetical sort of include files by Willy Tarreau · Tue Jun 09 09:07:15 2020 +0200
  59. aeed4a8 REORG: include: move log.h to haproxy/log{,-t}.h by Willy Tarreau · Thu Jun 04 22:01:04 2020 +0200
  60. f1d32c4 REORG: include: move channel.h to haproxy/channel{,-t}.h by Willy Tarreau · Thu Jun 04 21:07:02 2020 +0200
  61. 5e539c9 REORG: include: move stream_interface.h to haproxy/stream_interface{,-t}.h by Willy Tarreau · Thu Jun 04 20:45:39 2020 +0200
  62. 209108d REORG: include: move ssl_sock.h to haproxy/ssl_sock{,-t}.h by Willy Tarreau · Thu Jun 04 20:30:20 2020 +0200
  63. 83487a8 REORG: include: move cli.h to haproxy/cli{,-t}.h by Willy Tarreau · Thu Jun 04 20:19:54 2020 +0200
  64. 52d8872 REORG: move ssl_crtlist.h to haproxy/ssl_crtlist{,-t}.h by Willy Tarreau · Thu Jun 04 14:29:23 2020 +0200
  65. 47d7f90 REORG: include: move ssl_ckch.h to haproxy/ssl_ckch{,-t}.h by Willy Tarreau · Thu Jun 04 14:25:47 2020 +0200
  66. 48fbcae REORG: tools: split common/standard.h into haproxy/tools{,-t}.h by Willy Tarreau · Wed Jun 03 18:09:46 2020 +0200
  67. 8d36697 REORG: include: move base64.h, errors.h and hash.h from common to to haproxy/ by Willy Tarreau · Wed May 27 16:10:29 2020 +0200
  68. 8d2b777 REORG: ebtree: move the include files from ebtree to include/import/ by Willy Tarreau · Wed May 27 10:58:19 2020 +0200
  69. 55af9e9 CLEANUP: ssl: remove comment from dump_crtlist_sslconf() by William Lallemand · Tue Jun 02 11:54:46 2020 +0200
  70. 8177ad9 MINOR: ssl: split config and runtime variable for ssl-{min,max}-ver by William Lallemand · Wed May 20 16:49:02 2020 +0200
  71. 212e993 BUILD: ssl: include errno.h in ssl_crtlist.c by William Lallemand · Mon May 18 08:33:09 2020 +0200
  72. c756bbd REORG: ssl: move the crt-list CLI functions in src/ssl_crtlist.c by William Lallemand · Wed May 13 17:23:59 2020 +0200
  73. 6e9556b REORG: ssl: move crtlist functions to src/ssl_crtlist.c by William Lallemand · Tue May 12 17:52:44 2020 +0200