 Yves Rutschle
|
046401148d
|
add ./configure stage to docker build
|
2024-01-04 23:04:26 +01:00 |
|
|
Yves Rutschle
|
780e536aeb
|
use autoconf to crete build scripts depending on landlock presence (fix #417)
|
2024-01-04 22:45:10 +01:00 |
|
|
Yves Rutschle
|
ed0ab12a16
|
reintroduce --ssl as alias to --tls
|
2024-01-02 21:38:23 +01:00 |
|
|
Yves Rutschle
|
b65f1e8b26
|
Merged Landlock feature
|
2023-12-09 14:13:07 +01:00 |
|
|
Yves Rutschle
|
90a55b6f9d
|
document Windows build and docker repositories
|
2023-11-15 21:49:44 +01:00 |
|
|
Yves Rutschle
|
1f66e2e093
|
add sslh-ev
|
2023-11-15 21:46:42 +01:00 |
|
|
Yves Rutschle
|
490a44723b
|
fix install to build sslh-fork (fix #407)
|
2023-10-05 11:53:09 +02:00 |
|
|
Yves Rutschle
|
23fb1eba6f
|
remove obsolete intermediate sslh target
|
2023-10-03 09:34:38 +02:00 |
|
|
Yves Rutschle
|
1b26eb50a5
|
Changelog for resolve_on_forward fix
|
2023-09-24 09:25:52 +02:00 |
|
|
Yves Rutschle
|
e0f15a31b7
|
resolve name at connection time for UDP too
|
2023-09-12 21:39:51 +02:00 |
|
|
Yves Rutschle
|
c2551c011e
|
update to Conf::Libconfig 1.0.3 API
|
2023-09-12 21:35:23 +02:00 |
|
|
Yves Rutschle
|
e2c3ed61a8
|
update to Conf::Libconfig 1.0.3 API
|
2023-09-12 21:35:10 +02:00 |
|
|
Yves Rutschle
|
1b0c6d0b8d
|
add resolve_on_forward in tests
|
2023-09-06 18:01:52 +02:00 |
|
|
Yves Rutschle
|
0562eb4b07
|
fix resolve_on_forward use (fix #405)
|
2023-09-06 15:48:13 +02:00 |
|
|
Yves Rutschle
|
1fb888bbf2
|
remove magic numbers with correct sizeof
|
2023-08-31 15:18:22 +02:00 |
|
|
Yves Rutschle
|
ff9328fa6c
|
Merge branch 'utoni-fix/cppcheck-complains'
|
2023-08-31 15:13:57 +02:00 |
|
|
Yves Rutschle
|
e941e8dd2e
|
fix cppcheck complains
|
2023-08-31 15:10:53 +02:00 |
|
|
Yves Rűtschlé
|
8930ec395e
|
Initial support for the landlock LSM
|
2023-08-29 17:20:51 +02:00 |
|
|
Yves Rűtschlé
|
4cc0867753
|
remove dependency of sslh-conf.c to sslhconf.cfg (fix #283)
|
2023-08-13 10:38:39 +02:00 |
|
|
Yves Rutschle
|
3707c5b8a6
|
fix file descriptor leak if bind_peer fails
|
2023-05-13 23:18:07 +02:00 |
|
|
Yves Rutschle
|
5666a1bb9d
|
die if fd is not in cnx, which should be impossible (current behaviour results in illegal array dereferencing, which is worse)
|
2023-05-13 23:11:03 +02:00 |
|
|
Yves Rutschle
|
7b9c7f0fb2
|
check accept() return value
|
2023-05-13 23:00:26 +02:00 |
|
|
Yves Rutschle
|
eec2446723
|
fix error messages
|
2023-05-13 22:57:08 +02:00 |
|
|
Yves Rutschle
|
d29c9524bd
|
fix unbalance of va_start/va_end
|
2023-05-13 22:51:04 +02:00 |
|
|
Yves Rutschle
|
db4ae0ef9d
|
fix potential memory leak if the second malloc fails
|
2023-05-13 22:40:53 +02:00 |
|
|
Yves Rutschle
|
ee48dae8c5
|
fix potential file descriptor leak if set_nonblock () fails
|
2023-05-13 22:36:21 +02:00 |
|
|
Yves Rutschle
|
842f6b0473
|
Add mention of QUIC example (fix #376)
|
2023-02-19 17:24:51 +01:00 |
|
|
Yves Rutschle
|
1f64a71cde
|
fix out-of-bounds read in sslh-ev (fix #368)
|
2023-01-08 22:50:56 +01:00 |
|
|
Yves Rutschle
|
00fc8e5d95
|
fix off-by-one error
|
2023-01-08 22:50:10 +01:00 |
|
|
Yves Rutschle
|
b9602ab98b
|
removed obsolete max_fd tracker
|
2023-01-08 22:32:17 +01:00 |
|
|
Yves Rutschle
|
486f8a0090
|
removed obsolete comments
|
2023-01-08 21:58:50 +01:00 |
|
|
Yves Rutschle
|
3a1ac6c8d7
|
add protocol name that was missing in previous commit
|
2023-01-08 17:45:50 +01:00 |
|
|
Yves Rutschle
|
9dc3e3ce56
|
connection loss before it is logged resulted in logging uninitialised characters
|
2023-01-08 17:31:05 +01:00 |
|
|
Yves Rűtschlé
|
40c616e94c
|
downgrade TLS error to info (fix #367)
|
2022-11-20 18:26:20 +01:00 |
|
|
Yves Rűtschlé
|
555717e345
|
defensive programming in case connections get tidied while there is activity on both file descriptors (fix #355)
|
2022-11-09 17:48:14 +01:00 |
|
|
Yves Rűtschlé
|
02573eb44b
|
only process write events if file descriptor has not been tidied (may fix #355)
|
2022-11-03 17:23:49 +01:00 |
|
|
Yves Rűtschlé
|
d166b8977c
|
document test script dependency
|
2022-11-03 09:32:47 +01:00 |
|
|
Yves Rűtschlé
|
4c3b52dda5
|
Merge branch 'master' of https://github.com/yrutschle/sslh
|
2022-10-29 22:31:35 +02:00 |
|
|
Yves Rűtschlé
|
c981ae9853
|
update log format to actually catch ssh bruteforcing (fix #359)
|
2022-10-29 22:31:24 +02:00 |
|
|
Yves Rűtschlé
|
72c743e1e1
|
acknowledges akappner
|
2022-09-11 22:15:14 +02:00 |
|
|
Yves Rűtschlé
|
5cba44f5fa
|
Add built-in MSRDP support
|
2022-09-11 21:51:06 +02:00 |
|
|
Yves Rűtschlé
|
f418ae6128
|
added wireguard command-line setting
|
2022-09-04 18:48:17 +02:00 |
|
|
Yves Rűtschlé
|
e690cb5622
|
Merge branch 'master' of https://github.com/yrutschle/sslh
|
2022-09-04 15:28:55 +02:00 |
|
|
Yves Rűtschlé
|
64c3e0ed1e
|
improve basic.cfg
|
2022-09-04 15:26:39 +02:00 |
|
|
Yves Rűtschlé
|
9d10989d55
|
reword documentation to account for sslh-ev
|
2022-07-24 17:59:11 +02:00 |
|
|
Yves Rűtschlé
|
8b604a3db7
|
defensive programming against inconsistent configuration (fix #336 more)
|
2022-07-24 17:50:13 +02:00 |
|
|
Yves Rűtschlé
|
5168fe081a
|
add mention of sslh-ev
|
2022-07-21 18:24:36 +02:00 |
|
|
Yves Rűtschlé
|
7b923f793e
|
fix packages names for Debian 11
|
2022-07-21 18:20:56 +02:00 |
|
|
yrutschle
|
a4db163a69
|
config sanity check that there is at least one target protocol for each family that we listen to (fix #336)
|
2022-07-10 21:16:41 +02:00 |
|
|
yrutschle
|
b36486bb6d
|
prepare v2.0
|
2022-06-07 20:57:44 +02:00 |
|
|
yrutschle
|
d16d132f0e
|
document udp_max_connections in example.cfg
|
2022-05-31 22:49:39 +02:00 |
|
|
yrutschle
|
3fffce323d
|
fix dependencies for hash.o (fix #333)
|
2022-05-25 17:07:19 +02:00 |
|
|
yrutschle
|
83478818df
|
update comment to mention sslh-ev
|
2022-05-22 22:33:27 +02:00 |
|
|
yrutschle
|
750e828d49
|
reinstate checking of FD_SETSIZE for sslh-select
|
2022-05-22 22:32:22 +02:00 |
|
|
yrutschle
|
82aeedefcd
|
allow gap set and get to be inlined
|
2022-05-05 22:40:12 +02:00 |
|
|
yrutschle
|
f6fe735171
|
sort target protocols as TCP or UDP, so only appropriate probes are called by the listeners
|
2022-05-05 17:45:40 +02:00 |
|
|
yrutschle
|
78827d75fe
|
provide simple output to stderr (fix #330)
|
2022-05-05 09:12:45 +02:00 |
|
|
yrutschle
|
7228c0ebc3
|
refactor: move TCP code to new object tcp-listener
|
2022-05-03 17:03:30 +02:00 |
|
|
yrutschle
|
da194f15f0
|
make local functions static
|
2022-05-02 23:01:28 +02:00 |
|
|
yrutschle
|
d23a537d62
|
regerenate c2s files
|
2022-04-30 09:56:08 +02:00 |
|
|
yrutschle
|
006706a901
|
typo
|
2022-04-30 09:38:30 +02:00 |
|
|
yrutschle
|
c78a50c1d7
|
remove obsolete code
|
2022-04-27 17:33:36 +02:00 |
|
|
yrutschle
|
92e8a3e256
|
manage timeout with lists instead of linear searches
|
2022-04-27 17:29:02 +02:00 |
|
|
yrutschle
|
cd664574f1
|
manage timeout with lists instead of linear searches
|
2022-04-27 17:28:13 +02:00 |
|
|
yrutschle
|
449fabba51
|
linked list sorted by timeout times
|
2022-04-24 18:35:09 +02:00 |
|
|
yrutschle
|
cd5d75fed9
|
fix off-by-one error that wont time out highest UDP file descriptor
|
2022-04-24 18:31:27 +02:00 |
|
|
yrutschle
|
50f5af394b
|
remove obsolete declaration
|
2022-04-18 22:55:15 +02:00 |
|
|
yrutschle
|
8ac93c3e9d
|
abstract connection activation
|
2022-04-18 21:25:07 +02:00 |
|
|
yrutschle
|
35036c94c7
|
make UDP hash size configurable
|
2022-04-10 09:03:53 +02:00 |
|
|
yrutschle
|
21d00bd29d
|
remove globals for hash size
|
2022-04-10 08:45:01 +02:00 |
|
|
yrutschle
|
cd7afaa00d
|
fix comment to reflect floorless algorithm
|
2022-04-09 13:27:30 +02:00 |
|
|
yrutschle
|
53ae8bb913
|
remove floor entirely
|
2022-04-09 13:22:55 +02:00 |
|
|
yrutschle
|
97a67500ea
|
remove need for floor at insert
|
2022-04-08 21:10:20 +02:00 |
|
|
yrutschle
|
33d73dd514
|
invert distance counting
|
2022-04-08 21:09:45 +02:00 |
|
|
yrutschle
|
63b503e27f
|
simplify remove with distance computation
|
2022-04-08 19:55:22 +02:00 |
|
|
yrutschle
|
2e0d6b6e8e
|
removed obsolete variable
|
2022-04-08 18:40:39 +02:00 |
|
|
yrutschle
|
4625883b7f
|
simplify insertion using distance instead of floors and wrapped
|
2022-04-08 18:38:29 +02:00 |
|
|
yrutschle
|
07ceb99280
|
remove unused variable
|
2022-04-02 19:04:49 +02:00 |
|
|
yrutschle
|
5fa03ec9a3
|
fix hash item type definition
|
2022-04-02 18:59:32 +02:00 |
|
|
yrutschle
|
9ce9b5cd82
|
Integrate hash for UDP
|
2022-04-02 18:48:24 +02:00 |
|
|
yrutschle
|
97810cf0b2
|
Merge branch 'master' of https://github.com/yrutschle/sslh
|
2022-04-02 15:10:51 +02:00 |
|
|
Yves Rutschle
|
f8684fc9d6
|
add resolve_on_forward to c2s files (fix #326)
|
2022-04-01 19:35:16 +02:00 |
|
|
Yves Rutschle
|
5def70dff5
|
fix dependencies so conf2struct gets called before sslh-conf.h is used
|
2022-04-01 19:34:25 +02:00 |
|
|
yrutschle
|
478e1fc92f
|
abstract hash indexes
|
2022-03-31 22:08:56 +02:00 |
|
|
yrutschle
|
454a261c95
|
initial hash object with testing framework
|
2022-03-30 22:56:41 +02:00 |
|
|
yrutschle
|
9c3274359a
|
document resolve_on_forward
|
2022-03-23 21:33:45 +01:00 |
|
|
yrutschle
|
ff810d41b0
|
Merge branch 'master' of https://github.com/yrutschle/sslh
|
2022-03-18 18:03:29 +01:00 |
|
|
yrutschle
|
d922086f53
|
handle accept failure properly (fix #322)
|
2022-03-18 18:03:18 +01:00 |
|
|
yrutschle
|
1e0578c082
|
don't log to syslog when testing
|
2022-03-18 18:02:32 +01:00 |
|
|
yrutschle
|
91d148f66c
|
removed obsolete resolve_name function
|
2022-03-17 21:51:54 +01:00 |
|
|
yrutschle
|
66f4b18121
|
ensure conf2struct is called early in the make
|
2022-03-17 21:51:01 +01:00 |
|
|
yrutschle
|
4e6145576e
|
warn systemd that sslh will fork (fix #314)
|
2021-12-23 21:56:31 +01:00 |
|
|
yrutschle
|
58ed185316
|
missing header dependency
|
2021-12-19 19:30:21 +01:00 |
|
|
yrutschle
|
122649ce3c
|
fix log level for unknown ALPN (fix #313)
|
2021-12-12 09:30:07 +01:00 |
|
|
yrutschle
|
31b096a0f4
|
Merge branch 'master' of https://github.com/yrutschle/sslh
|
2021-12-09 21:33:37 +01:00 |
|
|
yrutschle
|
adaf407b8a
|
added sslh-ev to install docs
|
2021-12-09 21:29:48 +01:00 |
|
|
yrutschle
|
9798bdcaa0
|
Merge branch 'master' of https://github.com/yrutschle/sslh
|
2021-11-20 17:00:34 +01:00 |
|
|
yrutschle
|
93df6975ed
|
set appropriate log level for SNI matching
|
2021-11-20 17:00:24 +01:00 |
|
|
Yves Rutschle
|
44a78bc515
|
document dependency on libev
|
2021-11-14 18:58:59 +00:00 |
|
|
yrutschle
|
711c11c820
|
New sslh-ev: this is functionaly equivalent to sslh-select (mono-process, only forks for specified protocols), but based on libev, which should make it scalable to large numbers of connections.
|
2021-11-12 09:05:18 +01:00 |
|