Aron Xu
|
d4b6d97697
|
Replace LIBSYSTEMD_DAEMON with LIBSYSTEMD
Signed-off-by: Aron Xu <aron@debian.org>
|
2015-01-24 10:15:05 +01:00 |
|
Aron Xu
|
dfc5f33f85
|
Listen to Port 443 as in sample.config
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
|
2015-01-24 09:07:09 +01:00 |
|
Aron Xu
|
aeb034222a
|
Update call parameters of str_init() for --with-dbus
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
|
2015-01-24 08:50:50 +01:00 |
|
Nikos Mavrogiannopoulos
|
e4047e7a5b
|
doc update
|
2015-01-22 19:57:05 +01:00 |
|
Nikos Mavrogiannopoulos
|
cbcb9a6a7d
|
doc update
|
2015-01-21 15:13:11 +01:00 |
|
Nikos Mavrogiannopoulos
|
c907496136
|
worker: calculate MTU prior to sending IPv6 addresses
That way we can disable IPv6 if the calculated MTU size is
less than the allowed by IPv6.
|
2015-01-21 10:28:45 +01:00 |
|
Nikos Mavrogiannopoulos
|
ac80bbdbf0
|
include http-heads.h into ocserv's sources
ocserv_0_9_0_1
|
2015-01-21 07:51:03 +01:00 |
|
Nikos Mavrogiannopoulos
|
66ff730dfc
|
released 0.9.0
ocserv_0_9_0
|
2015-01-20 20:56:09 +01:00 |
|
Nikos Mavrogiannopoulos
|
bcef2eb16b
|
doc update
|
2015-01-20 14:26:42 +01:00 |
|
Nikos Mavrogiannopoulos
|
10f95ade9a
|
doc update
|
2015-01-20 11:32:10 +01:00 |
|
Nikos Mavrogiannopoulos
|
c0cd87b0e3
|
properly disable safe_fork
|
2015-01-20 10:40:16 +01:00 |
|
Nikos Mavrogiannopoulos
|
2a25795170
|
corrected isolate-workers typo
|
2015-01-20 10:40:09 +01:00 |
|
Nikos Mavrogiannopoulos
|
ec1ee46250
|
ocpasswd: attempt to use sha2crypt only in glibc
uclibc's crypt(3) is so dumb it will not error if
$5$ is specified as salt, but not supported.
|
2015-01-19 14:46:37 +01:00 |
|
Nikos Mavrogiannopoulos
|
0ce83be801
|
ocpasswd: corrected fallback to MD5 crypt
|
2015-01-19 14:46:35 +01:00 |
|
Nikos Mavrogiannopoulos
|
a3d0caf9c5
|
doc update
|
2015-01-19 14:46:33 +01:00 |
|
Nikos Mavrogiannopoulos
|
314b99477a
|
tests: enable compression in the unix test
|
2015-01-19 13:05:13 +01:00 |
|
Nikos Mavrogiannopoulos
|
1ead0b3346
|
disable linux namespaces by default
|
2015-01-19 10:50:44 +01:00 |
|
Nikos Mavrogiannopoulos
|
cb5499a6b7
|
only define safe_fork() in systems with linux namespaces
|
2015-01-19 10:49:01 +01:00 |
|
Nikos Mavrogiannopoulos
|
c954e45e53
|
silence debugging messages from sec-mod when not in debug
|
2015-01-18 17:34:59 +01:00 |
|
Nikos Mavrogiannopoulos
|
5179a064ab
|
doc update
|
2015-01-18 16:51:34 +01:00 |
|
Nikos Mavrogiannopoulos
|
310855cb7c
|
move more http-related functions to worker-http
|
2015-01-16 11:55:17 +01:00 |
|
Nikos Mavrogiannopoulos
|
6d1f848e1d
|
updated copyright information in LZS code
|
2015-01-16 11:17:52 +01:00 |
|
Nikos Mavrogiannopoulos
|
0638d85631
|
combined parsing of CSTP and DTLS encoding
|
2015-01-16 11:12:16 +01:00 |
|
Nikos Mavrogiannopoulos
|
4a372f4e05
|
Replace header_check() mess with a gperf table
|
2015-01-16 11:07:10 +01:00 |
|
Nikos Mavrogiannopoulos
|
dcf47899e0
|
Moved HTTP parts of worker to worker-http.c
|
2015-01-16 10:56:35 +01:00 |
|
Nikos Mavrogiannopoulos
|
04a9381068
|
Compression is disabled by default
|
2015-01-16 10:45:53 +01:00 |
|
Nikos Mavrogiannopoulos
|
8dd56e69c8
|
doc update
|
2015-01-16 10:33:33 +01:00 |
|
Nikos Mavrogiannopoulos
|
d3159c6973
|
lzs.h: added license
|
2015-01-16 10:23:00 +01:00 |
|
Nikos Mavrogiannopoulos
|
1bbef9662d
|
doc update
|
2015-01-15 23:02:00 +01:00 |
|
Nikos Mavrogiannopoulos
|
85d3162f45
|
Added support for LZS
|
2015-01-15 22:58:17 +01:00 |
|
Nikos Mavrogiannopoulos
|
8d2a562af1
|
increased MIN_NO_COMPRESS_LIMIT
|
2015-01-15 21:00:32 +01:00 |
|
Nikos Mavrogiannopoulos
|
724cfef3d4
|
tests: install lz4 on docker images
|
2015-01-15 20:28:58 +01:00 |
|
Nikos Mavrogiannopoulos
|
eddb0b9297
|
fixed compression to use the correct start of buffer
|
2015-01-15 20:21:10 +01:00 |
|
Nikos Mavrogiannopoulos
|
24f348226f
|
only enforce undumpable if we are not debugging
|
2015-01-15 19:18:59 +01:00 |
|
Nikos Mavrogiannopoulos
|
6f714d6f2e
|
report the compression algorithms to occtl
|
2015-01-15 19:04:43 +01:00 |
|
Nikos Mavrogiannopoulos
|
048b25ba45
|
Made the no-compress-limit configurable
|
2015-01-15 18:31:33 +01:00 |
|
Nikos Mavrogiannopoulos
|
67f621976b
|
Allow compression to fail, and in that case send uncompressed packets
That allows to cancel compression early, if it seems to expand the
packet. Suggested by David Woodhouse.
|
2015-01-15 17:43:48 +01:00 |
|
Nikos Mavrogiannopoulos
|
7f997cc3fc
|
only transmit a compressed packet, if it reduces the size
|
2015-01-15 17:13:26 +01:00 |
|
Nikos Mavrogiannopoulos
|
2719c00281
|
doc update
|
2015-01-15 16:43:11 +01:00 |
|
Nikos Mavrogiannopoulos
|
27168673f0
|
added option to disable compression
|
2015-01-15 16:42:29 +01:00 |
|
Nikos Mavrogiannopoulos
|
850181ed4e
|
Moved negotiation/parsing of parameters using HTTP headers to worker-extras.c
|
2015-01-15 16:42:17 +01:00 |
|
Nikos Mavrogiannopoulos
|
3c023ffe5e
|
Added support for LZ4 compression
|
2015-01-15 16:39:36 +01:00 |
|
Nikos Mavrogiannopoulos
|
831abcb76d
|
corrected typo
|
2015-01-15 16:34:58 +01:00 |
|
Nikos Mavrogiannopoulos
|
6ece4ef2e6
|
doc update
|
2015-01-15 10:26:55 +01:00 |
|
Nikos Mavrogiannopoulos
|
fe848ad153
|
replaced use-seccomp by isolate-workers
That, if enabled, includes the Linux namespaces restrictions into workers.
|
2015-01-15 10:25:23 +01:00 |
|
Nikos Mavrogiannopoulos
|
7a51462abd
|
reorganized to avoid compiler warnings
|
2015-01-15 09:59:38 +01:00 |
|
Nikos Mavrogiannopoulos
|
65a4646d2f
|
include linux/sched.h to compile on systems with older libc
|
2015-01-15 09:55:51 +01:00 |
|
Nikos Mavrogiannopoulos
|
8b65df1ce3
|
remove the CLONE_NEWNET isolation option as it's performance cost is too high
|
2015-01-14 21:05:19 +01:00 |
|
Nikos Mavrogiannopoulos
|
8989be49ef
|
typo fix
|
2015-01-14 17:47:44 +01:00 |
|
Nikos Mavrogiannopoulos
|
35d609cfc8
|
tests: remove all error file references from haproxy.cfg
These files don't exist in Fedora.
|
2015-01-14 17:08:01 +01:00 |
|