Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-01-08 | fix ge^W gemexp version string | Omar Polo | |
2023-10-18 | gemexp: add -R to generate an RSA (4096) key instead of an EC one (default) | Omar Polo | |
2023-10-18 | rework gencert(); make gemexp generate EC certs | Omar Polo | |
Taking inspiration from acme-client. | |||
2023-08-29 | gemexp doesn't have -v; remove from getopt and usage() | Omar Polo | |
2023-08-29 | tweak gemexp logs | Omar Polo | |
gemexp is meant for local testing so I'm not too worried about changing its log format if it makes sense to do so. | |||
2023-08-29 | gemexp: save certs to $XDG_DATA_HOME/gemexp, not /gmid | Omar Polo | |
2023-08-29 | gemexp: change the naming scheme for the certificates | Omar Polo | |
Using what the manpage advertised. The regress adaptations will follow. The directory will also change (and the key type too.) | |||
2023-08-07 | use the subject' common name as the user field in log | Omar Polo | |
2023-07-25 | use the condensed logging style in ge too | Omar Polo | |
2023-07-01 | rename do_accept() -> server_accept() | Omar Polo | |
2023-07-01 | change log_request to take the code and meta unpacked | Omar Polo | |
don't know what i was smoking when I wrote log_request() like that... | |||
2023-06-26 | call getnameinfo() only once per request | Omar Polo | |
2023-06-24 | copyright years++ | Omar Polo | |
2023-06-24 | load the certs per listening address | Omar Polo | |
2023-06-23 | implement `listen on' | Omar Polo | |
Listening by default on all the addresses is so bad I don't know why I haven't changed this before. Anyway. Add a `listen on $hostname port $port' syntax to the config file and deprecate the old "port" and "ipv6" global setting. Still try to honour them when no "listen on" directive is used for backward compatibily, but this will go away in the next next version hopefully. At the moment the `listen on' in server context don't filter the host, i.e. one can still reach a host from a address not specified in the corresponding `liste on', this will be added later. | |||
2023-06-23 | rename client->addr to raddr (remote address) and keep original length | Omar Polo | |
2023-06-23 | typo; use the `l' variable not `len' | Omar Polo | |
2023-06-11 | disable the privsep crypto engine on !OpenBSD | Omar Polo | |
it fails bandly at runtime on various linux distros and on freebsd. Until a fix is found, disable it so I can move forward. | |||
2023-06-09 | don't have the config being a global | Omar Polo | |
2023-06-09 | move hosts into the config struct | Omar Polo | |
2023-06-09 | move fastcgi from global var to the config struct | Omar Polo | |
while here also make them a list rather than a fixed-size array. | |||
2023-06-08 | fix ge build | Omar Polo | |
2023-06-08 | less logger.h | Omar Polo | |
2023-06-08 | make ge work again | Omar Polo | |
2023-06-08 | remove now unused ibuf variable | Omar Polo | |
2023-06-08 | rework the daemon to do fork+exec | Omar Polo | |
It uses the 'common' proc.c from various OpenBSD-daemons. gmid grew organically bit by bit and it was also the first place where I tried to implement privsep. It wasn't done very well, in fact the parent process (that retains root privileges) just fork()s a generation of servers, all sharing *exactly* the same address space. No good! Now, we fork() and re-exec() ourselves, so that each process has a fresh address space. Some features (require client ca for example) are temporarly disabled, will be fixed in subsequent commits. The "ge" program is also temporarly disabled as it needs tweaks to do privsep too. | |||
2023-06-06 | use fatal() in code used in the daemon | Omar Polo | |
2023-06-06 | switch to the more usual log.c | Omar Polo | |
2023-06-06 | rename log.[ch] to logger.[ch] | Omar Polo | |
2023-06-06 | nitpick: fix snprintf check | Omar Polo | |
2023-06-06 | move config-related code to config.c | Omar Polo | |
reuse it in ge too. | |||
2023-06-06 | call setlocale() | Omar Polo | |
2023-06-05 | move and dedup the tls initalization in server.c | Omar Polo | |
2023-06-05 | provide a more usual fatal | Omar Polo | |
fatal usually appends the error string. Add 'fatalx' that doesn't. Fix callers and move the prototypes to log.h | |||
2023-06-05 | move some server-related code to server.c | Omar Polo | |
2022-10-05 | make the various strings in the config fixed-length | Omar Polo | |
will help in future restructuring to have fixed-size objects. | |||
2022-09-10 | specify custom version strings for the various cmds | Omar Polo | |
2022-09-07 | add ge: gemini export! | Omar Polo | |