Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-06-03 | fix `fastcgi off' handling | Omar Polo | |
When a matching location has a `fastcgi off' directive, we should honour that and stop searching for further location which may have a `fastcgi' directive. Bug reported by Alex // nytpu, thanks! | |||
2024-05-29 | regress: add test_ipv6_server | Omar Polo | |
2024-05-29 | regress: add a knob to disable test_ipv6_addr | Omar Polo | |
at least on the CI is failing with "can't connect to ::1:10965: Address not available" which suggests IPv6 is broken there. | |||
2024-05-29 | typo | Omar Polo | |
2024-05-29 | regress: rename ipv4 test and add another with ipv6 | Omar Polo | |
2024-05-29 | iri: add support for raw IPv6 addresses | Omar Polo | |
2024-05-29 | gg: unbreak -n | Omar Polo | |
2024-05-29 | regress: run test_ip_addr with host=127.0.0.1 | Omar Polo | |
2024-05-29 | explain why we disable runtime tests on macos | Omar Polo | |
2024-05-29 | regress: use the new gg -q to reduce the blabbering | Omar Polo | |
2024-05-29 | gg: add -q to avoid printing "Server says" | Omar Polo | |
2024-05-29 | pretty-print the socket address at configuration parsing time | Omar Polo | |
saves a getnameinfo(NI_NUMERICHOST) at runtime, even if it's pretty cheap. | |||
2024-05-29 | add regress that hit gmid via a raw IPv4 address | Omar Polo | |
2024-05-29 | relax the SNI requirement | Omar Polo | |
There are legitimate cases where SNI can't be used, for example when connecting via an IPv6 address, so don't rejects those requests. Instead, fill the requested domain with the address (literal) of the socket they're connected to and attempt to match on it. This possibly still incur in a "won't proxy" error if the client then requests a different hostname. See the github issue https://github.com/omar-polo/gmid/issues/25 | |||
2024-05-27 | github: add workflow to build images for ghcr.io | Omar Polo | |
2024-05-25 | s/MIN/MINIMUM/g | Omar Polo | |
2024-04-27 | contrib/gmid.service: remove User and Group | Omar Polo | |
May cause weird errors (status=216/GROUP) on some distros, and running as root is already the default, so remove the two lines. Reported by and debugged together with leandro del Flug, thanks! | |||
2024-04-27 | contrib/gmid.service: start as root by default | Omar Polo | |
Various techniques used by gmid are effective only when the daemon is started as root. Strongly suggest to do so by switching the sample configuration. This way, provided that a local user is created as well, the chroot configuration will work out-of-the-box and the TLS certificates can be readable only by root. | |||
2024-04-27 | improve the description for -f | Omar Polo | |
2024-04-11 | typo: semicolors -> semicolons | Omar Polo | |
2024-04-04 | set next version | Omar Polo | |
2024-04-04 | prepare release 2.0.12.0.2 | Omar Polo | |
2024-04-04 | changelog for 2.0.2 | Omar Polo | |
2024-04-04 | add a test for the config dumping | Omar Polo | |
2024-04-04 | fix config dumping (-nn) handling | Omar Polo | |
with the privsep rework the config dumping was unadvertitely broken, it prints the content of the key itself. | |||
2024-04-03 | use -Werror=implicit-function-declaration for function detection | Omar Polo | |
the previous -Werror triggers too easily: on NixOS for example the FORTIFY_SOURCE #warning about a missing optimization level breaks all the checks when using -O0 (which is the default for non-release builds). | |||
2024-04-03 | fix landlock test | Omar Polo | |
include stddef.h for size_t | |||
2024-03-12 | remove dead code | Omar Polo | |
2024-03-06 | update mac CI target to sonoma | Omar Polo | |
2024-03-03 | fix `log access path' with chroot | Omar Polo | |
We should open the log file inside the chroot; missed in 4acf495f41d2c26136e99072293ca8b9bff91dc0. See https://github.com/omar-polo/gmid/issues/24 | |||
2024-03-03 | revert 9f1cce3d0e53209180eabbcd48878c1e989101e7 | Omar Polo | |
we actually should open the log file in the chroot, the bug is in the code. | |||
2024-03-03 | fix log access doc: path is not relative to the chroot | Omar Polo | |
Reported by Colin Henein, thanks! See https://github.com/omar-polo/gmid/issues/24 | |||
2024-02-02 | add a note regarding the usage of the bundled libtls | Omar Polo | |
See https://codeberg.org/op/gmid/issues/2 | |||
2024-01-30 | sync changelog | Omar Polo | |
2024-01-30 | contrib/vim: fix indent | Anna “CyberTailor” | |
2024-01-30 | rename the @common_opt macro back to @common | Omar Polo | |
now common is no longer a reserved keyword | |||
2024-01-30 | turn log styles into strings from yacc point of view | Omar Polo | |
having styles as reserved keywords means that variables / macros can't be called `common', `condensed', etc... which is not great and not obvious either. Instead, let's keep the log styles as strings and match on them. This also allows to have a slightly better error message in case of a typo. See: https://codeberg.org/op/gmid/issues/1 | |||
2024-01-30 | remove stray space | Omar Polo | |
2024-01-26 | tweak and update freebsd task | Omar Polo | |
2024-01-26 | rework the grammar so that ; is accepted after variables and options | Omar Polo | |
See Codeberg issue #1. | |||
2024-01-26 | add a test that uses @-style macros | Omar Polo | |
See Codeberg issue #1. | |||
2024-01-24 | change the default PUBKEY for the verify-release target | Omar Polo | |
doesn't play well with minor releases such as 2.0.1 since for them I reuse the 2.0 key. | |||
2024-01-24 | set next version | Omar Polo | |
2024-01-24 | prepare release 2.0.12.0.1 | Omar Polo | |
2024-01-24 | changelog for 2.0.1 | Omar Polo | |
2024-01-21 | convert remaining code to the imsg getters | Omar Polo | |
Now gmid doesn't touch anymore the internals of the imsg structs. | |||
2024-01-21 | convert the remaining bit of crypto.c to the ibuf_* APIs | Omar Polo | |
2024-01-21 | please macos | Omar Polo | |
for some reason that's not entirely clear to me, __dead doesn't seem to work on macos, so clang thinks datalen is used un-initialized. meh | |||
2024-01-21 | update imsg test: gmid now requires the new API too | Omar Polo | |
2024-01-21 | convert crypto.c to the new imsg API | Omar Polo | |