Gitiles
Code Review Sign In
git01.mediatek.com / haproxy / a9aa628703bc9d98d1974bc175e3cff8c12cab4c / src / ssl_sock.c
  1. 7416314 CLEANUP: task: make sure tasklet handlers always indicate their statuses by Willy Tarreau · Sat Mar 13 11:30:19 2021 +0100
  2. 4c48edb BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake by Willy Tarreau · Tue Mar 09 17:58:02 2021 +0100
  3. 430bf4a MINOR: server: allocate a per-thread struct for the per-thread connections stuff by Willy Tarreau · Thu Mar 04 09:45:32 2021 +0100
  4. 4149168 MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks by Willy Tarreau · Tue Mar 02 17:29:56 2021 +0100
  5. 144f84a MEDIUM: task: extend the state field to 32 bits by Willy Tarreau · Tue Mar 02 16:09:26 2021 +0100
  6. 566cebc BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode by Willy Tarreau · Tue Mar 02 19:32:39 2021 +0100
  7. 3bda3f4 CLEANUP: ssl: use realloc() instead of free()+malloc() by Willy Tarreau · Fri Feb 26 21:05:08 2021 +0100
  8. e709e82 CLEANUP: ssl: make ssl_sock_free_srv_ctx() zero the pointers after free by Willy Tarreau · Fri Feb 26 21:06:32 2021 +0100
  9. 01acf56 CLEANUP: ssl: remove a useless "if" before freeing an error message by Willy Tarreau · Fri Feb 26 21:12:15 2021 +0100
  10. 61cfdf4 CLEANUP: tree-wide: replace free(x);x=NULL with ha_free(&x) by Willy Tarreau · Sat Feb 20 10:46:51 2021 +0100
  11. 9205ab3 MINOR: ssl: mark the SSL handshake tasklet as heavy by Willy Tarreau · Thu Feb 25 15:31:00 2021 +0100
  12. 8990b01 MINOR: connection: allocate dynamically hash node for backend conns by Amaury Denoyelle · Fri Feb 19 15:29:16 2021 +0100
  13. f232cb3 MEDIUM: connection: replace idle conn lists by eb trees by Amaury Denoyelle · Wed Jan 06 16:14:12 2021 +0100
  14. 5c7086f MEDIUM: connection: protect idle conn lists with locks by Amaury Denoyelle · Mon Jan 11 09:21:52 2021 +0100
  15. 3ce6eed MEDIUM: ssl: add a rwlock for SSL server session cache by William Lallemand · Mon Feb 08 10:43:44 2021 +0100
  16. 7ff7747 BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro by Ilya Shipitsin · Mon Feb 08 16:55:06 2021 +0500
  17. f00cdb1 BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro by Ilya Shipitsin · Sat Feb 06 18:59:22 2021 +0500
  18. 7bbf586 BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro by Ilya Shipitsin · Sat Feb 06 18:55:27 2021 +0500
  19. a84986a BUG/MINOR: ssl: do not try to use early data if not configured by Willy Tarreau · Wed Feb 03 11:21:38 2021 +0100
  20. 0630038 BUG/MEDIUM: ssl: check a connection's status before computing a handshake by Willy Tarreau · Tue Feb 02 15:42:25 2021 +0100
  21. b886849 CLEANUP: ssl: remove dead code in ckch_inst_new_load_srv_store() by William Lallemand · Wed Jan 27 14:42:40 2021 +0100
  22. db26e2b CLEANUP: ssl: make load_srv_{ckchs,cert} match their bind counterpart by William Lallemand · Tue Jan 26 12:01:46 2021 +0100
  23. 795bd9b CLEANUP: ssl: remove SSL_CTX function parameter by William Lallemand · Tue Jan 26 11:27:42 2021 +0100
  24. f3eedfe MEDIUM: ssl: Enable backend certificate hot update by Remi Tricot-Le Breton · Mon Jan 25 17:19:44 2021 +0100
  25. d817dc7 MEDIUM: ssl: Load client certificates in a ckch for backend servers by Remi Tricot-Le Breton · Mon Jan 25 17:19:43 2021 +0100
  26. ec805a3 MINOR: ssl: Certificate chain loading refactorization by Remi Tricot-Le Breton · Mon Jan 25 17:19:42 2021 +0100
  27. 442b7f2 MINOR: ssl: Server ssl context prepare function refactoring by Remi Tricot-Le Breton · Mon Jan 25 17:19:41 2021 +0100
  28. 1fc44d4 BUILD: ssl: guard Client Hello callbacks with HAVE_SSL_CLIENT_HELLO_CB macro instead of openssl version by Ilya Shipitsin · Sat Jan 23 00:09:14 2021 +0500
  29. 4bd5d63 MINOR: ssl/show_fd: report some FDs as suspicious when possible by Willy Tarreau · Thu Jan 21 08:53:50 2021 +0100
  30. 8050efe MINOR: cli: give the show_fd helpers the ability to report a suspicious entry by Willy Tarreau · Thu Jan 21 08:26:06 2021 +0100
  31. 691d503 MINOR: xprt/mux: export all *_io_cb functions so that "show fd" resolves them by Willy Tarreau · Wed Jan 20 14:55:01 2021 +0100
  32. de5675a MINOR: ssl: provide a "show fd" helper to report important SSL information by Willy Tarreau · Wed Jan 20 14:41:29 2021 +0100
  33. 761d64c BUILD: ssl: guard openssl specific with SSL_READ_EARLY_DATA_SUCCESS by Ilya Shipitsin · Thu Jan 07 11:59:58 2021 +0500
  34. ec36c91 BUILD: ssl: guard EVP_PKEY_get_default_digest_nid with ASN1_PKEY_CTRL_DEFAULT_MD_NID by Ilya Shipitsin · Thu Jan 07 11:57:42 2021 +0500
  35. 1e9a666 CLEANUP: assorted typo fixes in the code and comments by Ilya Shipitsin · Tue Jan 05 22:10:46 2021 +0500
  36. b6fc524 MINOR: ssl: make tlskeys_list_get_next() take a list element by Willy Tarreau · Tue Jan 05 10:44:30 2021 +0100
  37. cb8b281 CLEANUP: ssl: Remove useless local variable in tlskeys_list_get_next() by Tim Duesterhus · Sun Jan 03 01:29:56 2021 +0100
  38. 2c7bb33 CLEANUP: ssl: Remove useless loop in tlskeys_list_get_next() by Tim Duesterhus · Sun Jan 03 01:29:55 2021 +0100
  39. e5ff141 CLEANUP: Compare the return value of `XXXcmp()` functions with zero by Tim Duesterhus · Sat Jan 02 22:31:53 2021 +0100
  40. e9473c7 MINOR: ssl: QUIC transport parameters parsing. by Frédéric Lécaille · Mon Nov 23 15:37:11 2020 +0100
  41. ec21652 MINOR: ssl: SSL CTX initialization modifications for QUIC. by Frédéric Lécaille · Mon Nov 23 14:33:30 2020 +0100
  42. 901ee2f MINOR: ssl: Export definitions required by QUIC. by Frédéric Lécaille · Mon Nov 23 11:19:04 2020 +0100
  43. 5aa9241 MINOR: ssl_sock: Initialize BIO and SSL objects outside of ssl_sock_init() by Frédéric Lécaille · Mon Nov 09 15:59:23 2020 +0100
  44. 967e7e7 MEDIUM: xxhash: use the XXH3 functions to generate 64-bit hashes by Dragan Dosen · Tue Dec 22 13:22:34 2020 +0100
  45. af20488 BUILD: ssl: fine guard for SSL_CTX_get0_privatekey call by Ilya Shipitsin · Sat Dec 19 03:12:12 2020 +0500
  46. ec60909 BUILD: SSL: fine guard for SSL_CTX_add_server_custom_ext call by Ilya Shipitsin · Fri Nov 27 02:39:48 2020 +0500
  47. 2ded48d MINOR: connection: make conn_sock_drain() use the control layer's ->drain() by Willy Tarreau · Fri Dec 11 16:20:34 2020 +0100
  48. b7fdfdf MEDIUM: ssl: fatal error with bundle + openssl < 1.1.1 by William Lallemand · Fri Dec 04 15:45:02 2020 +0100
  49. f34ed0b BUILD: SSL: guard TLS13 ciphersuites with HAVE_SSL_CTX_SET_CIPHERSUITES by Ilya Shipitsin · Sat Nov 21 14:37:34 2020 +0500
  50. 06ce84a BUG/MEDIUM: ssl: error when no certificate are found by William Lallemand · Fri Nov 20 15:36:13 2020 +0100
  51. bdec3ba BUILD: ssl: use SSL_MODE_ASYNC macro instead of OPENSSL_VERSION by Ilya Shipitsin · Sat Nov 14 01:56:34 2020 +0500
  52. f69cd68 BUG/MINOR: ssl: segv on startup when AKID but no keyid by William Lallemand · Thu Nov 19 16:24:13 2020 +0100
  53. f637044 MEDIUM: cli/ssl: configure ssl on server at runtime by William Dauchy · Sat Nov 14 19:25:33 2020 +0100
  54. 034c162 MEDIUM: stats: add counters for failed handshake by Amaury Denoyelle · Fri Nov 13 16:05:00 2020 +0100
  55. f70b7db MINOR: ssl: remove client hello counters by Amaury Denoyelle · Fri Nov 13 16:04:59 2020 +0100
  56. fc633b6 CLEANUP: config: Return ERR_NONE from config callbacks instead of 0 by Christopher Faulet · Fri Nov 06 15:24:23 2020 +0100
  57. 4299528 BUILD: ssl: silence build warning on uninitialised counters by Willy Tarreau · Fri Nov 06 13:19:18 2020 +0100
  58. d0447a7 MINOR: ssl: add counters for ssl sessions by Amaury Denoyelle · Tue Nov 03 17:10:02 2020 +0100
  59. fbc3377 MINOR: ssl: count client hello for stats by Amaury Denoyelle · Tue Nov 03 17:10:01 2020 +0100
  60. 9963fa7 MINOR: ssl: instantiate stats module by Amaury Denoyelle · Tue Nov 03 17:10:00 2020 +0100
  61. 6d27a92 BUG/MINOR: ssl: don't report 1024 bits DH param load error when it's higher by Willy Tarreau · Thu Nov 05 19:38:05 2020 +0100
  62. 0aa8c29 BUILD: ssl: use feature macros for detecting ec curves manipulation support by Ilya Shipitsin · Wed Nov 04 00:39:07 2020 +0500
  63. 04a5a44 BUILD: ssl: use HAVE_OPENSSL_KEYLOG instead of OpenSSL versions by Ilya Shipitsin · Tue Nov 03 14:15:38 2020 +0500
  64. b9b84a4 BUILD: ssl: more elegant OpenSSL early data support check by Ilya Shipitsin · Sat Oct 24 23:42:30 2020 +0500
  65. a73a222 BUG/MEDIUM: ssl: OCSP must work with BoringSSL by Emmanuel Hocdet · Mon Oct 26 13:55:30 2020 +0100
  66. 8e8581e MINOR: ssl: 'ssl-load-extra-del-ext' removes the certificate extension by William Lallemand · Tue Oct 20 17:36:46 2020 +0200
  67. b3201a3 BUG/MINOR: disable dynamic OCSP load with BoringSSL by Ilya Shipitsin · Sun Oct 18 09:11:50 2020 +0500
  68. 58feb49 CLEANUP: ssl: Release cached SSL sessions on deinit by Christopher Faulet · Wed Oct 07 13:20:23 2020 +0200
  69. 70bf06e BUILD: fix build with openssl < 1.0.2 since bundle removal by William Lallemand · Wed Sep 16 18:08:14 2020 +0200
  70. e7eb1fe CLEANUP: ssl: remove utility functions for bundle by William Lallemand · Wed Sep 16 16:17:51 2020 +0200
  71. bd8e6ed CLEANUP: ssl: remove test on "multi" variable in ckch functions by William Lallemand · Wed Sep 16 16:08:08 2020 +0200
  72. dfa93be MEDIUM: ssl: emulate multi-cert bundles loading in standard loading by William Lallemand · Wed Sep 16 14:48:52 2020 +0200
  73. a459826 BUG/MEDIUM: ssl: Don't call ssl_sock_io_cb() directly. by Olivier Houchard · Tue Sep 15 22:16:02 2020 +0200
  74. 2d6fd0a BUG/MINOR: ssl: verifyhost is case sensitive by William Lallemand · Mon Sep 14 15:20:10 2020 +0200
  75. e52b6e5 CLEANUP: Do not use a fixed type for 'sizeof' in 'calloc' by Tim Duesterhus · Sat Sep 12 20:26:43 2020 +0200
  76. 6767245 MEDIUM: fd: replace usages of fd_remove() with fd_stop_both() by Willy Tarreau · Wed Aug 26 11:44:17 2020 +0200
  77. a78f3f0 BUG/MEDIUM: ssl: fix ssl_bind_conf double free w/ wildcards by William Lallemand · Wed Aug 26 17:34:44 2020 +0200
  78. adabbfe MINOR: ssl: Support SAN extension for certificate generation by Shimi Gersner · Sun Aug 23 13:58:13 2020 +0300
  79. 5846c49 MEDIUM: ssl: Support certificate chaining for certificate generation by Shimi Gersner · Sun Aug 23 13:58:12 2020 +0300
  80. 30f9e09 BUG/MEDIUM: ssl: crt-list negative filters don't work by William Lallemand · Mon Aug 17 14:31:19 2020 +0200
  81. 5b1d1f6 CLEANUP: ssl: remove poorly readable nested ternary by William Lallemand · Fri Aug 14 15:30:13 2020 +0200
  82. 94bd319 BUG/MEDIUM: ssl: does not look for all SNIs before chosing a certificate by William Lallemand · Fri Aug 14 14:43:35 2020 +0200
  83. 935d829 BUG/MEDIUM: ssl: never generates the chain from the verify store by William Lallemand · Wed Aug 12 20:02:10 2020 +0200
  84. 9a1d839 BUG/MINOR: ssl: ssl-skip-self-issued-ca requires >= 1.0.2 by William Lallemand · Mon Aug 10 17:28:23 2020 +0200
  85. bf298af BUG/MEDIUM: ssl: fix the ssl-skip-self-issued-ca option by William Lallemand · Mon Aug 10 16:18:45 2020 +0200
  86. 76b4a12 BUG/MEDIUM: ssl: memory leak of ocsp data at SSL_CTX_free() by William Lallemand · Tue Aug 04 17:41:39 2020 +0200
  87. 86e4d63 BUG/MINOR: ssl: fix memory leak at OCSP loading by William Lallemand · Fri Aug 07 00:44:32 2020 +0200
  88. a560c06 BUG/MEDIUM: ssl: check OCSP calloc in ssl_sock_load_ocsp() by William Lallemand · Fri Jul 31 11:43:20 2020 +0200
  89. a9d7b76 MINOR: connection: use MT_LIST_ADDQ() to add connections to idle lists by Willy Tarreau · Fri Jul 10 08:28:20 2020 +0200
  90. de4db17 MINOR: lists: rename some MT_LIST operations to clarify them by Willy Tarreau · Fri Jul 10 08:10:29 2020 +0200
  91. 7d42ef5 WIP/MINOR: ssl: add sample fetches for keylog in frontend by William Lallemand · Mon Jul 06 11:41:30 2020 +0200
  92. f278eec BUILD: tree-wide: cast arguments to tolower/toupper to unsigned char by Willy Tarreau · Sun Jul 05 21:46:32 2020 +0200
  93. a74bb7e BUG/MEDIUM: connections: Let the xprt layer know a takeover happened. by Olivier Houchard · Fri Jul 03 14:01:21 2020 +0200
  94. b240869 MINOR: ssl: move the ckch/crtlist deinit to ssl_sock.c by William Lallemand · Wed Jun 24 09:54:29 2020 +0200
  95. 7df5c2d BUG/MEDIUM: ssl: fix ssl_bind_conf double free by William Lallemand · Tue Jun 23 11:02:17 2020 +0200
  96. d0712f3 BUG/MINOR: ssl: fix ssl-{min,max}-ver with openssl < 1.1.0 by William Lallemand · Thu Jun 11 17:34:00 2020 +0200
  97. b255105 CLEANUP: include: tree-wide alphabetical sort of include files by Willy Tarreau · Tue Jun 09 09:07:15 2020 +0200
  98. dfd3de8 REORG: include: move stream.h to haproxy/stream{,-t}.h by Willy Tarreau · Thu Jun 04 23:46:14 2020 +0200
  99. 1e56f92 REORG: include: move server.h to haproxy/server{,-t}.h by Willy Tarreau · Thu Jun 04 23:20:13 2020 +0200
  100. a264d96 REORG: include: move proxy.h to haproxy/proxy{,-t}.h by Willy Tarreau · Thu Jun 04 22:29:18 2020 +0200