892 Commits

Author SHA1 Message Date
yrutschle
8aa97d7118 Include OpenSUSE's security review 2025-08-06 09:55:19 +02:00
yrutschle
8ad8bfdb5d fix link 2025-08-06 09:44:15 +02:00
yrutschle
4c2e4e01f2 document new settings in ChangeLog 2025-08-06 09:42:37 +02:00
yrutschle
2ecb681277 fix warning on void return 2025-08-06 09:38:52 +02:00
yrutschle
54dc8374ab properly define function in header 2025-08-06 09:37:07 +02:00
yrutschle
8c4253f145 refactor: rename proto inc and dec functions for clarity 2025-08-06 09:36:39 +02:00
yrutschle
4483e9c7e5 support for max_connections on listen_endpoint for sslh-ev/sslh-select 2025-08-06 09:32:19 +02:00
yrutschle
65c9c4ce95 count protocol connections even if no maximum is set 2025-08-06 08:00:35 +02:00
yrutschle
5434dc59df fix tags target for Debian's version of ctags 2025-08-05 18:21:48 +02:00
yrutschle
20290bbfa6 sslh-fork can now limit the number of concurrent connections for each incoming port 2025-08-05 18:15:58 +02:00
Yves Rutschle
1dfd70c20c Merge branch 'master' of github.com:yrutschle/sslh 2025-07-24 19:49:01 +02:00
Yves Rutschle
feaf528a60 add setting for maximum connection per protocol 2025-07-24 19:48:50 +02:00
Sergei Zhmylev
11da63cf4e Fix mistype in accept(2) error handling
Due to a mistype in errno checking, sslh-fork process died repeatedly
resulting to a complete denial of service on systems with no built-in
process supervisors, like FreeBSD.

Signed-off-by: Sergei Zhmylev <zhmylove@narod.ru>
2025-06-30 21:57:12 +02:00
Yves Rutschle
28ea73301e new gap feature: hardlimit, with test suite 2025-06-22 16:45:50 +02:00
Adrian Bunk
cd9b85fd4f Add a missing change in the second part of the CVE-2025-46806 fix 2025-06-19 22:34:30 +02:00
Yves Rutschle
bd9ed060e4 fix memory leak in regex probe (fix #500) 2025-06-19 22:31:02 +02:00
Yves Rutschle
b7556c07bd added podman transparent setup (fix #448) 2025-05-29 16:07:57 +02:00
Yves Rutschle
6b9ec3a46e remove obsolete getopt definitions (fix #489) 2025-05-29 15:46:08 +02:00
Yves Rutschle
ad66e79f46 Fix proxyprotocol target field (#496) 2025-05-29 15:23:10 +02:00
Yves Rutschle
b12220e640 v2.2.4 ChangeLog v2.2.4 2025-05-28 17:51:04 +02:00
Yves Rutschle
204305a88f fix unaligned read in OpenVPN UDP probe 2025-05-25 11:27:26 +02:00
Yves Rutschle
0f96ed8adb fix test script for new command line behaviour 2025-05-25 11:27:05 +02:00
Yves Rutschle
43e75a0a8c upgrade API to Conf::Libconfig 1.0.3 2025-05-22 22:19:00 +02:00
Yves Rutschle
ad1f5d68e9 fix potential parsing of undefined data is syslog probe and make probe more robust 2025-05-09 17:08:30 +02:00
Yves Rutschle
ff8206f7c8 fix segmentation fault upon too many UDP connection. Also, accepts multiple connection in one cycle 2025-05-08 17:58:51 +02:00
Yves Rutschle
8298daf686 change magic numbers for constants 2025-05-06 22:12:29 +02:00
Yves Rutschle
168477ea34 Merge branch 'master' of github.com:yrutschle/sslh 2025-05-04 11:49:45 +02:00
Yves Rutschle
b5d4d4662b v2.2.3 ChangeLog v2.2.3 2025-05-04 11:47:44 +02:00
Yves Rutschle
6e6d94752a Revert "include version.h in repo"
This reverts commit acdbb79d43ca867ccc86a340d9cc90858e38059f.
2025-05-04 11:45:33 +02:00
Yves Rutschle
b2bcfc26b2 version.h 2025-05-04 11:33:58 +02:00
Yves Rutschle
8fb62445c4 v2.2.2 ChangeLog v2.2.2 2025-05-04 11:28:11 +02:00
Yves Rutschle
c0cc45975c clean up inline define 2025-04-15 22:27:27 +02:00
npt-1707
0fe9bd5a95 common.c: Fix that symlink does not interferer 2025-04-15 22:20:26 +02:00
Yves Rutschle
fe25928e18 Merge branch 'master' of github.com:yrutschle/sslh 2025-04-08 21:41:23 +02:00
Sergey Fedorov
eccf7dbdc4 common.h: add a declaration of hosts_ctl for macOS
Fixes: https://github.com/yrutschle/sslh/issues/492
2025-04-08 21:40:58 +02:00
Yves Rutschle
e0bcf282ff include config.h. unclear how this worked without that 2025-04-08 21:36:12 +02:00
Yves Rutschle
1f462ba166 update tag to v2.2.1 v2.2.1 2025-04-06 11:59:51 +02:00
Yves Rutschle
0e7885bc9f fix compilation when libproxyprotocol is not present 2025-04-06 11:59:08 +02:00
Yves Rutschle
5ad1ea1e25 complete changelog for v2.3.0 v2.2.0 2025-04-06 11:46:19 +02:00
Yves Rutschle
4978641271 add reference to new proxyprotocol to README 2025-04-06 11:38:30 +02:00
Yves Rutschle
ef6f698d86 document proxyprotocol 2025-04-03 21:30:34 +02:00
Yves Rutschle
416a82fcc6 code cleanup 2025-03-29 17:34:25 +01:00
Yves Rutschle
2f111b6b8d add missing proxyprotocol.o 2025-03-09 17:56:49 +00:00
Yves Rutschle
24c3bb07a0 add support for proxyprotocol v1 on backend server side 2025-03-09 18:49:17 +01:00
Yves Rutschle
951b708f61 clarify UDP will not be supported in sslh-fork in the future 2025-03-09 09:44:15 +01:00
Yves Rutschle
5a0897c5cb refactor: connect_addr() update the *cnx object upon connecting to backend server, instead of each caller doing it 2025-03-09 09:43:41 +01:00
Yves Rutschle
7a6673a877 merged proxyprotocol linking 2025-02-21 21:03:59 +01:00
yrutschle
3ebdca5e96 document move of libraries to autoconf detection 2025-02-19 09:28:49 +01:00
yrutschle
22a8ba9ef5 move libbsd support to autoconf detection 2025-02-19 09:25:59 +01:00
yrutschle
dcfa3fa2db move libcap support to autoconf detection 2025-02-19 09:01:01 +01:00