Gitiles
Code Review
Sign In
git01.mediatek.com
/
haproxy
/
eaf05be0ee2fc9b971132c268bafe5c5fda23fd5
/
src
/
ssl_sock.c
a26d1e1
BUILD: ssl: improve SSL_CTX_set_ecdh_auto compatibility
by Lukas Tribus
· 4 years, 11 months ago
54907bb
BUG/MEDIUM: ssl: Revamp the way early data are handled.
by Olivier Houchard
· 4 years, 11 months ago
ba22e90
BUG/MINOR: ssl/cli: fix build for openssl < 1.0.2
by William Lallemand
· 4 years, 11 months ago
d4f946c
MINOR: ssl/cli: 'show ssl cert' give information on the certificates
by William Lallemand
· 5 years ago
545989f
BUG/MEDIUM: ssl: Don't set the max early data we can receive too early.
by Olivier Houchard
· 4 years, 11 months ago
3777e3a
BUG/MINOR: ssl: certificate choice can be unexpected with openssl >= 1.1.1
by Emmanuel Hocdet
· 5 years ago
920b035
BUG/MINOR: ssl/cli: don't overwrite the filters variable
by William Lallemand
· 5 years ago
230662a
BUG/MINOR: ssl/cli: 'ssl cert' cmd only usable w/ admin rights
by William Lallemand
· 5 years ago
140b64f
BUG/MINOR: ssl: fix SSL_CTX_set1_chain compatibility for openssl < 1.0.2
by Emmanuel Hocdet
· 5 years ago
b270e81
MINOR: ssl: deduplicate crl-file
by Emmanuel Hocdet
· 5 years ago
129d328
MINOR: ssl: compute ca-list from deduplicate ca-file
by Emmanuel Hocdet
· 5 years ago
d4f9a60
MINOR: ssl: deduplicate ca-file
by Emmanuel Hocdet
· 5 years ago
9312853
CLEANUP: ssl: Clean up error handling
by Tim Duesterhus
· 5 years ago
c8bb153
CLEANUP: ssl: check if a transaction exists once before setting it
by William Dauchy
· 5 years ago
c0e820c
BUG/MINOR: ssl: Stop passing dynamic strings as format arguments
by Tim Duesterhus
· 5 years ago
d14b49c
BUG/MINOR: ssl: fix curve setup with LibreSSL
by Lukas Tribus
· 5 years ago
5f1fa7d
MINOR: ssl: fix possible null dereference in error handling
by William Dauchy
· 5 years ago
ed44243
MINOR: ssl/cli: display warning during 'commit ssl cert'
by William Lallemand
· 5 years ago
8ef0c2a
MEDIUM: ssl/cli: apply SSL configuration on SSL_CTX during commit
by William Lallemand
· 5 years ago
8b45391
MINOR: ssl: ssl_sock_prepare_ctx() return an error code
by William Lallemand
· 5 years ago
3c8bde8
BUILD/MINOR: ssl: fix compiler warning about useless statement
by Eric Salama
· 5 years ago
0bc9c8a
MINOR: ssl/cli: 'abort ssl cert' deletes an on-going transaction
by William Lallemand
· 5 years ago
c5fdf0f
BUG/MINOR: ssl: fix crt-list neg filter for openssl < 1.1.1
by Emmanuel Hocdet
· 5 years ago
c3775d2
BUG/MINOR: ssl: ssl_pkey_info_index ex_data can store a dereferenced pointer
by Emmanuel Hocdet
· 5 years ago
21724f0
MINOR: ssl/cli: replace the default_ctx during 'commit ssl cert'
by William Lallemand
· 5 years ago
3246d94
BUG/MINOR: ssl/cli: fix an error when a file is not found
by William Lallemand
· 5 years ago
37031b8
BUG/MINOR: ssl/cli: unable to update a certificate without bundle extension
by William Lallemand
· 5 years ago
8a7fdf0
BUG/MEDIUM: ssl/cli: don't alloc path when cert not found
by William Lallemand
· 5 years ago
40f2f1e
BUG/MEDIUM: ssl/cli: fix dot research in cli_parse_set_cert
by Emmanuel Hocdet
· 5 years ago
eaad5cc
MINOR: ssl: BoringSSL ocsp_response does not need issuer
by Emmanuel Hocdet
· 5 years ago
83cbd3c
BUG/MINOR: ssl: double free on error for ckch->{key,cert}
by Emmanuel Hocdet
· 5 years ago
ed17f47
BUG/MINOR: ssl: ckch->chain must be initialized
by Emmanuel Hocdet
· 5 years ago
f6ac4fa
BUG/MINOR: ssl: segfault in cli_parse_set_cert with old openssl/boringssl
by Emmanuel Hocdet
· 5 years ago
33cc76f
BUG/MINOR: ssl/cli: check trash allocation in cli_io_handler_commit_cert()
by William Lallemand
· 5 years ago
beea2a4
CLEANUP: ssl/cli: remove leftovers of bundle/certs (it < 2)
by William Lallemand
· 5 years ago
bc6ca7c
MINOR: ssl/cli: rework 'set ssl cert' as 'set/commit'
by William Lallemand
· 5 years ago
0580052
BUILD/MINOR: ssl: shut up a build warning about format truncation
by Willy Tarreau
· 5 years ago
430413e
MINOR: ssl/cli: rework the 'set ssl cert' IO handler
by William Lallemand
· 5 years ago
1212db4
BUG/MINOR: ssl/cli: cleanup on cli_parse_set_cert error
by William Lallemand
· 5 years ago
f29cdef
BUG/MINOR: ssl/cli: out of bounds when built without ocsp/sctl
by William Lallemand
· 5 years ago
541a534
BUG/MINOR: ssl/cli: fix build of SCTL and OCSP
by William Lallemand
· 5 years ago
8f840d7
MEDIUM: cli/ssl: handle the creation of SSL_CTX in an IO handler
by William Lallemand
· 5 years ago
0c3b7d9
MINOR: ssl/cli: assignate a new ckch_store
by William Lallemand
· 5 years ago
8c1cdde
MINOR: ssl: new functions duplicate and free a ckch_store
by William Lallemand
· 5 years ago
8d0f893
MINOR: ssl: copy a ckch from src to dst
by William Lallemand
· 5 years ago
455af50
MINOR: ssl: update ssl_sock_free_cert_key_and_chain_contents
by William Lallemand
· 5 years ago
44b3532
MINOR: ssl/cli: update ocsp/issuer/sctl file from the CLI
by William Lallemand
· 5 years ago
849eed6
BUG/MINOR: ssl/cli: fix looking up for a bundle
by William Lallemand
· 5 years ago
96a9c97
MINOR: ssl: split ssl_sock_load_crt_file_into_ckch()
by William Lallemand
· 5 years ago
f9568fc
MINOR: ssl: load issuer from file or from buffer
by William Lallemand
· 5 years ago
0dfae6c
MINOR: ssl: load sctl from buf OR from a file
by William Lallemand
· 5 years ago
3b5f360
MINOR: ssl: OCSP functions can load from file or buffer
by William Lallemand
· 5 years ago
0201047
CLEANUP: ssl: fix SNI/CKCH lock labels
by William Lallemand
· 5 years ago
34779c3
CLEANUP: ssl: remove old TODO commentary
by William Lallemand
· 5 years ago
eb46965
BUG/MINOR: ssl: fix memcpy overlap without consequences.
by Emeric Brun
· 5 years ago
e566f3d
BUG/MINOR: ssl: Fix fd leak on error path when a TLS ticket keys file is parsed
by Christopher Faulet
· 5 years ago
a9363eb
BUG/MEDIUM: ssl: 'tune.ssl.default-dh-param' value ignored with openssl > 1.1.1
by Emeric Brun
· 5 years ago
7a88336
CLEANUP: ssl: make ssl_sock_load_dh_params handle errcode/warn
by Emeric Brun
· 5 years ago
a96b582
CLEANUP: ssl: make ssl_sock_put_ckch_into_ctx handle errcode/warn
by Emeric Brun
· 5 years ago
054563d
CLEANUP: ssl: make ckch_inst_new_load_(multi_)store handle errcode/warn
by Emeric Brun
· 5 years ago
f69ed1d
CLEANUP: ssl: make cli_parse_set_cert handle errcode and warnings.
by Emeric Brun
· 5 years ago
8c5414a
CLEANUP: ssl: make ssl_sock_load_ckchs() return a set of ERR_*
by Willy Tarreau
· 5 years ago
bbc9196
CLEANUP: ssl: make ssl_sock_load_cert*() return real error codes
by Willy Tarreau
· 5 years ago
e0f48ae
BUG/MINOR: ssl: can't load ocsp files
by William Lallemand
· 5 years ago
786188f
BUG/MINOR: ssl: fix error messages for OCSP loading
by William Lallemand
· 5 years ago
4a66013
BUG/MINOR: ssl: fix OCSP build with BoringSSL
by William Lallemand
· 5 years ago
104a7a6
BUILD: ssl: wrong #ifdef for SSL engines code
by William Lallemand
· 5 years ago
963b2e7
BUG/MINOR: ssl: fix build without multi-cert bundles
by William Lallemand
· 5 years ago
e15029b
BUG/MEDIUM: ssl: NULL dereference in ssl_sock_load_cert_sni()
by William Lallemand
· 5 years ago
246c024
MINOR: ssl: load the ocsp in/from the ckch
by William Lallemand
· 5 years ago
a17f411
MINOR: ssl: load the sctl in/from the ckch
by William Lallemand
· 5 years ago
150bfa8
MEDIUM: ssl/cli: 'set ssl cert' updates a certificate from the CLI
by William Lallemand
· 5 years ago
f11365b
MINOR: ssl: ssl_sock_load_crt_file_into_ckch() is filling from a BIO
by William Lallemand
· 5 years ago
614ca0d
MEDIUM: ssl: ssl_sock_load_ckchs() alloc a ckch_inst
by William Lallemand
· 5 years ago
0c6d12f
MINOR: ssl: ssl_sock_load_multi_ckchs() can properly fail
by William Lallemand
· 5 years ago
d919937
MINOR: ssl: ssl_sock_load_ckchn() can properly fail
by William Lallemand
· 5 years ago
1d29c74
MEDIUM: ssl: split ssl_sock_add_cert_sni()
by William Lallemand
· 5 years ago
9117de9
MEDIUM: ssl: introduce the ckch instance structure
by William Lallemand
· 5 years ago
28a8fce
BUG/MINOR: ssl: abort on sni_keytypes allocation failure
by William Lallemand
· 5 years ago
8ed5b96
BUG/MINOR: ssl: free the sni_keytype nodes
by William Lallemand
· 5 years ago
fe49bb3
BUG/MINOR: ssl: abort on sni allocation failure
by William Lallemand
· 5 years ago
4b989f2
MINOR: ssl: initialize the sni_keytypes_map as EB_ROOT
by William Lallemand
· 5 years ago
f6adbe9
REORG: ssl: move structures to ssl_sock.h
by William Lallemand
· 5 years ago
e3af8fb
REORG: ssl: rename ckch_node to ckch_store
by William Lallemand
· 5 years ago
eed4bf2
MINOR: ssl: crt-list do ckchn_lookup
by William Lallemand
· 5 years ago
1633e39
BUILD: ssl: fix a warning when built with openssl < 1.0.2
by William Lallemand
· 5 years ago
8200414
BUG/MINOR: ssl: always check for ssl connection before getting its XPRT context
by Christopher Faulet
· 5 years ago
5762a0d
BUG/MAJOR: ssl: ssl_sock was not fully initialized.
by Emeric Brun
· 5 years ago
9d00869
CLEANUP: cli: replace all occurrences of manual handling of return messages
by Willy Tarreau
· 5 years ago
c985801
MINOR: ssl: ssl_fc_has_early should work for BoringSSL
by Emmanuel Hocdet
· 5 years ago
f967c31
BUG/MINOR: ssl: fix 0-RTT for BoringSSL
by Emmanuel Hocdet
· 5 years ago
6e5f2ce
BUG/MEDIUM: ssl: open the right path for multi-cert bundle
by William Lallemand
· 5 years ago
1503e05
BUG/MINOR: ssl: fix ressource leaks on error
by Emmanuel Hocdet
· 5 years ago
6dee29d
BUG/MEDIUM: ssl: don't free the ckch in multi-cert bundle
by William Lallemand
· 5 years ago
a8c7374
BUG/MEDIUM: ssl: does not try to free a DH in a ckch
by William Lallemand
· 5 years ago
c4ecddf
BUG/BUILD: ssl: fix build with openssl < 1.0.2
by William Lallemand
· 5 years ago
a7a0f99
MINOR: ssl: clean ret variable in ssl_sock_load_ckchn
by Emmanuel Hocdet
· 5 years ago
efa4b95
CLEANUP: ssl: ssl_sock_load_crt_file_into_ckch
by Emmanuel Hocdet
· 6 years ago
54227d8
MINOR: ssl: do not look at DHparam with OPENSSL_NO_DH
by Emmanuel Hocdet
· 5 years ago
03e09f3
MINOR: ssl: check private key consistency in loading
by Emmanuel Hocdet
· 5 years ago
Next »