Gitiles
Code Review Sign In
git01.mediatek.com / haproxy / f673923629ce7b65c14a19c68c7265f82dd4f21b / src / ssl_sock.c
  1. 002e206 CLEANUP: ssl: fix wrong #else commentary by William Lallemand · Thu Nov 18 15:25:16 2021 +0100
  2. 71e588c MEDIUM: quic: inspect ALPN to install app_ops by Amaury Denoyelle · Fri Nov 12 11:23:29 2021 +0100
  3. 82531f6 REORG: ssl-sock: move the sslconns/totalsslconns counters to global by Willy Tarreau · Wed Oct 06 12:15:18 2021 +0200
  4. a8a72c6 CLEANUP: ssl/server: move ssl_sock_set_srv() to srv_set_ssl() in server.c by Willy Tarreau · Wed Oct 06 11:48:34 2021 +0200
  5. 1057bee REORG: ssl: move ssl_sock_is_ssl() to connection.h and rename it by Willy Tarreau · Wed Oct 06 11:38:44 2021 +0200
  6. 9543d5a MINOR: ssl: Store the last SSL error code in case of read or write failure by Remi Tricot-Le Breton · Wed Sep 29 18:56:53 2021 +0200
  7. 1fe0fad MINOR: ssl: Rename ssl_bc_hsk_err to ssl_bc_err by Remi Tricot-Le Breton · Wed Sep 29 18:56:52 2021 +0200
  8. 61944f7 MINOR: ssl: Set connection error code in case of SSL read or write fatal failure by Remi Tricot-Le Breton · Wed Sep 29 18:56:51 2021 +0200
  9. 0faf807 MINOR: quic: Update the streams transport parameters. by Frédéric Lécaille · Thu Mar 18 15:05:18 2021 +0100
  10. d5fc8fc CLEANUP: Add haproxy/xxhash.h to avoid modifying import/xxhash.h by Tim Duesterhus · Sat Sep 11 17:51:13 2021 +0200
  11. 310a260 MEDIUM: config: Deprecate tune.ssl.capture-cipherlist-size by Marcin Deranek · Tue Jul 13 19:04:24 2021 +0200
  12. 769fd2e MEDIUM: ssl: Capture more info from Client Hello by Marcin Deranek · Mon Jul 12 14:16:55 2021 +0200
  13. f95c295 BUILD/MINOR: ssl: Fix compilation with OpenSSL 1.0.2 by Remi Tricot-Le Breton · Fri Aug 20 09:51:23 2021 +0200
  14. 74f6ab6 MEDIUM: ssl: Keep a reference to the client's certificate for use in logs by Remi Tricot-Le Breton · Thu Aug 19 18:06:30 2021 +0200
  15. 7c6898e MINOR: ssl: Add new ssl_fc_hsk_err sample fetch by Remi Tricot-Le Breton · Thu Jul 29 09:45:51 2021 +0200
  16. 2bf5d41 MINOR: ssl: use __objt_* variant when retrieving counters by Amaury Denoyelle · Mon Jul 26 09:59:06 2021 +0200
  17. 36aa451 MINOR: ssl: render file-access optional on server crt loading by Amaury Denoyelle · Fri May 21 16:22:11 2021 +0200
  18. c593bcd MINOR: ssl: always initialize random generator by Amaury Denoyelle · Wed May 19 15:35:29 2021 +0200
  19. 9135859 CLEANUP: global: remove the nbproc field from the global structure by Willy Tarreau · Tue Jun 15 08:08:04 2021 +0200
  20. 4c19e99 BUG/MINOR: ssl: use atomic ops to update global shctx stats by Willy Tarreau · Tue Jun 15 16:39:22 2021 +0200
  21. 6916493 MINOR: ssl: Use OpenSSL's ASN1_TIME convertor when available by Remi Tricot-Le Breton · Fri Jun 11 10:28:09 2021 +0200
  22. 3faf0cb BUILD: ssl: Fix compilation with BoringSSL by Remi Tricot-Le Breton · Thu Jun 10 18:10:32 2021 +0200
  23. d92fd11 MINOR: ssl: Add new "show ssl ocsp-response" CLI command by Remi Tricot-Le Breton · Thu Jun 10 13:51:13 2021 +0200
  24. 5aa1dce MINOR: ssl: Keep the actual key length in the certificate_ocsp structure by Remi Tricot-Le Breton · Thu Jun 10 13:51:12 2021 +0200
  25. a3a0cce BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future by Remi Tricot-Le Breton · Wed Jun 09 17:16:18 2021 +0200
  26. 722180a BUILD: make tune.ssl.keylog available again by William Lallemand · Wed Jun 09 16:46:12 2021 +0200
  27. e74cbc3 REORG: config: use parsing ctx for server config check by Amaury Denoyelle · Fri May 28 10:34:01 2021 +0200
  28. 1112430 MINOR: errors: specify prefix "config" for parsing output by Amaury Denoyelle · Fri Jun 04 18:22:08 2021 +0200
  29. f22b032 BUILD: fix compilation for OpenSSL-3.0.0-alpha17 by William Lallemand · Wed Jun 02 16:09:11 2021 +0200
  30. 612b2c3 BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine by Remi Tricot-Le Breton · Wed May 12 17:45:21 2021 +0200
  31. d75b99e BUILD/MINOR: ssl: Fix compilation with SSL enabled by Remi Tricot-Le Breton · Mon May 17 11:45:55 2021 +0200
  32. 40ddea8 MINOR: ssl: Add reference to default ckch instance in bind_conf by Remi Tricot-Le Breton · Tue Apr 13 16:07:29 2021 +0200
  33. 4458b97 MEDIUM: ssl: Chain ckch instances in ca-file entries by Remi Tricot-Le Breton · Fri Feb 19 17:41:55 2021 +0100
  34. af8820a CLEANUP: ssl: Move ssl_store related code to ssl_ckch.c by Remi Tricot-Le Breton · Tue Apr 13 10:10:37 2021 +0200
  35. 832e242 DEBUG: ssl: export ssl_sock_close() to see its symbol resolved in profiling by Willy Tarreau · Thu May 13 10:11:03 2021 +0200
  36. b205bfd CLEANUP: cli/tree-wide: properly re-align the CLI commands' help messages by Willy Tarreau · Fri May 07 11:38:37 2021 +0200
  37. 2b71810 CLEANUP: lists/tree-wide: rename some list operations to avoid some confusion by Willy Tarreau · Wed Apr 21 07:32:39 2021 +0200
  38. ff88270 MINOR: pool: move pool declarations to read_mostly by Willy Tarreau · Sat Apr 10 17:23:00 2021 +0200
  39. 4781b15 CLEANUP: atomic/tree-wide: replace single increments/decrements with inc/dec by Willy Tarreau · Tue Apr 06 13:53:36 2021 +0200
  40. 1db4273 CLEANUP: atomic: add an explicit _FETCH variant for add/sub/and/or by Willy Tarreau · Tue Apr 06 11:44:07 2021 +0200
  41. 8218aed BUG/MINOR: ssl: Fix update of default certificate by Remi Tricot-Le Breton · Wed Mar 17 14:56:54 2021 +0100
  42. fb00f31 BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list" by Remi Tricot-Le Breton · Tue Mar 23 16:41:53 2021 +0100
  43. f208ac0 CLEANUP: ssl: use pool_zalloc() in ssl_init_keylog() by Willy Tarreau · Mon Mar 22 21:10:12 2021 +0100
  44. b454e90 MINOR: ssl: use pool_alloc(), not pool_alloc_dirty() by Willy Tarreau · Mon Mar 22 15:09:41 2021 +0100
  45. bc5ce92 MEDIUM: connections: Implement a start() method in ssl_sock. by Olivier Houchard · Fri Mar 05 23:47:00 2021 +0100
  46. 1b3c931 MEDIUM: connections: Introduce a new XPRT method, start(). by Olivier Houchard · Fri Mar 05 23:37:48 2021 +0100
  47. 7416314 CLEANUP: task: make sure tasklet handlers always indicate their statuses by Willy Tarreau · Sat Mar 13 11:30:19 2021 +0100
  48. 4c48edb BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake by Willy Tarreau · Tue Mar 09 17:58:02 2021 +0100
  49. 430bf4a MINOR: server: allocate a per-thread struct for the per-thread connections stuff by Willy Tarreau · Thu Mar 04 09:45:32 2021 +0100
  50. 4149168 MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks by Willy Tarreau · Tue Mar 02 17:29:56 2021 +0100
  51. 144f84a MEDIUM: task: extend the state field to 32 bits by Willy Tarreau · Tue Mar 02 16:09:26 2021 +0100
  52. 566cebc BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode by Willy Tarreau · Tue Mar 02 19:32:39 2021 +0100
  53. 3bda3f4 CLEANUP: ssl: use realloc() instead of free()+malloc() by Willy Tarreau · Fri Feb 26 21:05:08 2021 +0100
  54. e709e82 CLEANUP: ssl: make ssl_sock_free_srv_ctx() zero the pointers after free by Willy Tarreau · Fri Feb 26 21:06:32 2021 +0100
  55. 01acf56 CLEANUP: ssl: remove a useless "if" before freeing an error message by Willy Tarreau · Fri Feb 26 21:12:15 2021 +0100
  56. 61cfdf4 CLEANUP: tree-wide: replace free(x);x=NULL with ha_free(&x) by Willy Tarreau · Sat Feb 20 10:46:51 2021 +0100
  57. 9205ab3 MINOR: ssl: mark the SSL handshake tasklet as heavy by Willy Tarreau · Thu Feb 25 15:31:00 2021 +0100
  58. 8990b01 MINOR: connection: allocate dynamically hash node for backend conns by Amaury Denoyelle · Fri Feb 19 15:29:16 2021 +0100
  59. f232cb3 MEDIUM: connection: replace idle conn lists by eb trees by Amaury Denoyelle · Wed Jan 06 16:14:12 2021 +0100
  60. 5c7086f MEDIUM: connection: protect idle conn lists with locks by Amaury Denoyelle · Mon Jan 11 09:21:52 2021 +0100
  61. 3ce6eed MEDIUM: ssl: add a rwlock for SSL server session cache by William Lallemand · Mon Feb 08 10:43:44 2021 +0100
  62. 7ff7747 BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro by Ilya Shipitsin · Mon Feb 08 16:55:06 2021 +0500
  63. f00cdb1 BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro by Ilya Shipitsin · Sat Feb 06 18:59:22 2021 +0500
  64. 7bbf586 BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro by Ilya Shipitsin · Sat Feb 06 18:55:27 2021 +0500
  65. a84986a BUG/MINOR: ssl: do not try to use early data if not configured by Willy Tarreau · Wed Feb 03 11:21:38 2021 +0100
  66. 0630038 BUG/MEDIUM: ssl: check a connection's status before computing a handshake by Willy Tarreau · Tue Feb 02 15:42:25 2021 +0100
  67. b886849 CLEANUP: ssl: remove dead code in ckch_inst_new_load_srv_store() by William Lallemand · Wed Jan 27 14:42:40 2021 +0100
  68. db26e2b CLEANUP: ssl: make load_srv_{ckchs,cert} match their bind counterpart by William Lallemand · Tue Jan 26 12:01:46 2021 +0100
  69. 795bd9b CLEANUP: ssl: remove SSL_CTX function parameter by William Lallemand · Tue Jan 26 11:27:42 2021 +0100
  70. f3eedfe MEDIUM: ssl: Enable backend certificate hot update by Remi Tricot-Le Breton · Mon Jan 25 17:19:44 2021 +0100
  71. d817dc7 MEDIUM: ssl: Load client certificates in a ckch for backend servers by Remi Tricot-Le Breton · Mon Jan 25 17:19:43 2021 +0100
  72. ec805a3 MINOR: ssl: Certificate chain loading refactorization by Remi Tricot-Le Breton · Mon Jan 25 17:19:42 2021 +0100
  73. 442b7f2 MINOR: ssl: Server ssl context prepare function refactoring by Remi Tricot-Le Breton · Mon Jan 25 17:19:41 2021 +0100
  74. 1fc44d4 BUILD: ssl: guard Client Hello callbacks with HAVE_SSL_CLIENT_HELLO_CB macro instead of openssl version by Ilya Shipitsin · Sat Jan 23 00:09:14 2021 +0500
  75. 4bd5d63 MINOR: ssl/show_fd: report some FDs as suspicious when possible by Willy Tarreau · Thu Jan 21 08:53:50 2021 +0100
  76. 8050efe MINOR: cli: give the show_fd helpers the ability to report a suspicious entry by Willy Tarreau · Thu Jan 21 08:26:06 2021 +0100
  77. 691d503 MINOR: xprt/mux: export all *_io_cb functions so that "show fd" resolves them by Willy Tarreau · Wed Jan 20 14:55:01 2021 +0100
  78. de5675a MINOR: ssl: provide a "show fd" helper to report important SSL information by Willy Tarreau · Wed Jan 20 14:41:29 2021 +0100
  79. 761d64c BUILD: ssl: guard openssl specific with SSL_READ_EARLY_DATA_SUCCESS by Ilya Shipitsin · Thu Jan 07 11:59:58 2021 +0500
  80. ec36c91 BUILD: ssl: guard EVP_PKEY_get_default_digest_nid with ASN1_PKEY_CTRL_DEFAULT_MD_NID by Ilya Shipitsin · Thu Jan 07 11:57:42 2021 +0500
  81. 1e9a666 CLEANUP: assorted typo fixes in the code and comments by Ilya Shipitsin · Tue Jan 05 22:10:46 2021 +0500
  82. b6fc524 MINOR: ssl: make tlskeys_list_get_next() take a list element by Willy Tarreau · Tue Jan 05 10:44:30 2021 +0100
  83. cb8b281 CLEANUP: ssl: Remove useless local variable in tlskeys_list_get_next() by Tim Duesterhus · Sun Jan 03 01:29:56 2021 +0100
  84. 2c7bb33 CLEANUP: ssl: Remove useless loop in tlskeys_list_get_next() by Tim Duesterhus · Sun Jan 03 01:29:55 2021 +0100
  85. e5ff141 CLEANUP: Compare the return value of `XXXcmp()` functions with zero by Tim Duesterhus · Sat Jan 02 22:31:53 2021 +0100
  86. e9473c7 MINOR: ssl: QUIC transport parameters parsing. by Frédéric Lécaille · Mon Nov 23 15:37:11 2020 +0100
  87. ec21652 MINOR: ssl: SSL CTX initialization modifications for QUIC. by Frédéric Lécaille · Mon Nov 23 14:33:30 2020 +0100
  88. 901ee2f MINOR: ssl: Export definitions required by QUIC. by Frédéric Lécaille · Mon Nov 23 11:19:04 2020 +0100
  89. 5aa9241 MINOR: ssl_sock: Initialize BIO and SSL objects outside of ssl_sock_init() by Frédéric Lécaille · Mon Nov 09 15:59:23 2020 +0100
  90. 967e7e7 MEDIUM: xxhash: use the XXH3 functions to generate 64-bit hashes by Dragan Dosen · Tue Dec 22 13:22:34 2020 +0100
  91. af20488 BUILD: ssl: fine guard for SSL_CTX_get0_privatekey call by Ilya Shipitsin · Sat Dec 19 03:12:12 2020 +0500
  92. ec60909 BUILD: SSL: fine guard for SSL_CTX_add_server_custom_ext call by Ilya Shipitsin · Fri Nov 27 02:39:48 2020 +0500
  93. 2ded48d MINOR: connection: make conn_sock_drain() use the control layer's ->drain() by Willy Tarreau · Fri Dec 11 16:20:34 2020 +0100
  94. b7fdfdf MEDIUM: ssl: fatal error with bundle + openssl < 1.1.1 by William Lallemand · Fri Dec 04 15:45:02 2020 +0100
  95. f34ed0b BUILD: SSL: guard TLS13 ciphersuites with HAVE_SSL_CTX_SET_CIPHERSUITES by Ilya Shipitsin · Sat Nov 21 14:37:34 2020 +0500
  96. 06ce84a BUG/MEDIUM: ssl: error when no certificate are found by William Lallemand · Fri Nov 20 15:36:13 2020 +0100
  97. bdec3ba BUILD: ssl: use SSL_MODE_ASYNC macro instead of OPENSSL_VERSION by Ilya Shipitsin · Sat Nov 14 01:56:34 2020 +0500
  98. f69cd68 BUG/MINOR: ssl: segv on startup when AKID but no keyid by William Lallemand · Thu Nov 19 16:24:13 2020 +0100
  99. f637044 MEDIUM: cli/ssl: configure ssl on server at runtime by William Dauchy · Sat Nov 14 19:25:33 2020 +0100
  100. 034c162 MEDIUM: stats: add counters for failed handshake by Amaury Denoyelle · Fri Nov 13 16:05:00 2020 +0100