Sergey Ponomarev
2759c223be
README.Windows.md fix link
2024-04-13 20:25:18 +02:00
Sergey Ponomarev
b3c770898a
Ignore opts ( #436 )
...
* Be less strict about args at startup
Ignore unknown options.
* Don't fail if pid file is accessible
2024-04-13 11:03:54 +02:00
yrutschle
fee8491a8e
remove useless capabilities and use standard environment in systemd
2024-04-10 18:39:07 +02:00
Yves Rűtschlé
a80d79fd40
Merge multiple sslh systemd unit configurations
2024-04-10 18:07:28 +02:00
Yves Rűtschlé
4b921be69d
Merge systemd unit multiple configurations
2024-04-10 18:06:56 +02:00
Yves Rutschle
1799a81079
fix off-by-one error that would sometime ignore the latest connection
2024-03-31 22:18:58 +02:00
Sergio C
5f1c1b1b61
Update README.md ( #431 )
...
Updated tproxy.md location
2024-03-24 08:33:34 +01:00
Yves Rutschle
58783af410
For MacOS, do not have multiple identicat cases in switch
2024-03-23 09:53:01 +01:00
Yves Rutschle
1957be1dc3
v.2.1.0
2024-03-22 16:41:50 +01:00
Yves Rűtschlé
ecca78bde7
for MacOS, define unknown symbols to equivalent values
2024-03-21 18:54:03 +01:00
Yves Rűtschlé
b94060ad76
undef FD_SETSIZE to avoid compiler warning upon redefine
2024-03-15 15:09:39 +01:00
Yves Rűtschlé
736b108a75
dont log error when remote client drops connection on Windows ( fix #427 )
2024-03-13 16:58:09 +01:00
Yves Rutschle
7ca567fcd9
clarify the difficulty of transparent proxying
2024-03-12 22:07:17 +01:00
Yves Rutschle
3117c15fbd
when sslh-fork accept() fails with some errors, retry accept instead of dying
2024-01-11 21:32:39 +01:00
Yves Rutschle
e428fc505c
prevent children from continuing the parent's work in case of failure
2024-01-11 21:24:19 +01:00
Yves Rutschle
4dfb4d300a
add default LANDLOCK_ACCESS_FS_REFER define for Ubuntu ( fix #420 )
2024-01-06 11:56:57 +01:00
Yves Rutschle
39184b5622
enable landlock access to files to allow forking and name resolution
2024-01-05 13:21:55 +01:00
Yves Rutschle
940461de18
check name resolution error to avoid segfault
2024-01-05 11:15:53 +01:00
Yves Rutschle
6f949419d1
fix comment to reflect reality
2024-01-05 10:34:29 +01:00
Yves Rutschle
dab5df7409
clarify where the name resolution error comes from
2024-01-05 10:32:41 +01:00
Yves Rutschle
402ca5219b
fix warnings on sockaddr storage
2024-01-04 23:22:44 +01:00
Yves Rutschle
046401148d
add ./configure stage to docker build
2024-01-04 23:04:26 +01:00
Yves Rutschle
780e536aeb
use autoconf to crete build scripts depending on landlock presence ( fix #417 )
2024-01-04 22:45:10 +01:00
Yves Rutschle
ed0ab12a16
reintroduce --ssl as alias to --tls
2024-01-02 21:38:23 +01:00
Yves Rutschle
b65f1e8b26
Merged Landlock feature
2023-12-09 14:13:07 +01:00
Konstantin
91b649daa0
Set image tag to use github in docker-compose example ( #414 )
...
Change image tag of the docker-compose example from ```sslh:latest``` to ```ghcr.io/yrutschle/sslh:latest```
2023-11-19 20:43:13 +01:00
Latchezar Tzvetkoff
7499c26e9e
Cleanup error checking logic in bind_peer() ( #412 )
...
Thanks for the cleanup!
2023-11-15 22:02:21 +01:00
Yves Rutschle
90a55b6f9d
document Windows build and docker repositories
2023-11-15 21:49:44 +01:00
Yves Rutschle
1f66e2e093
add sslh-ev
2023-11-15 21:46:42 +01:00
Yves Rutschle
92d2326016
Merge pull request #408 from pcrow/master
...
Fix transparent mode in a multi-stage chain
2023-10-07 21:15:58 +02:00
Preston Crow
81eed9d56a
Transparent mode in a multi-stage chain will fail after the first step
...
because the (ip,port) is already bound. With this change, the bind is
retried with a different port to at least keep the same IP address, which
for most uses is all that is needed. I've tested this on my own system
where sslh is used downstream from stunnel, with both in transparent mode.
2023-10-06 17:50:25 -04:00
Yves Rutschle
490a44723b
fix install to build sslh-fork ( fix #407 )
2023-10-05 11:53:09 +02:00
Yves Rutschle
23fb1eba6f
remove obsolete intermediate sslh target
2023-10-03 09:34:38 +02:00
Yves Rutschle
be66848e2d
Merge pull request #406 from ffontaine/master
...
Makefile: add USE_LIBEV
2023-10-03 09:32:42 +02:00
Fabrice Fontaine
3e93c1d43d
Makefile: add USE_LIBEV
...
Add USE_LIBEV to avoid the following build failure without libev raised
since version 2.0 and
https://github.com/yrutschle/sslh/commit/711c11c820f8be4f1399024bcaa1d7072de33217 :
sslh-ev.c:24:10: fatal error: ev.h: Aucun fichier ou dossier de ce type
24 | #include <ev.h>
| ^~~~~~
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
2023-10-01 18:53:43 +02:00
Yves Rutschle
1b26eb50a5
Changelog for resolve_on_forward fix
2023-09-24 09:25:52 +02:00
Yves Rutschle
e0f15a31b7
resolve name at connection time for UDP too
2023-09-12 21:39:51 +02:00
Yves Rutschle
c2551c011e
update to Conf::Libconfig 1.0.3 API
2023-09-12 21:35:23 +02:00
Yves Rutschle
e2c3ed61a8
update to Conf::Libconfig 1.0.3 API
2023-09-12 21:35:10 +02:00
Yves Rutschle
1b0c6d0b8d
add resolve_on_forward in tests
2023-09-06 18:01:52 +02:00
Yves Rutschle
0562eb4b07
fix resolve_on_forward use ( fix #405 )
2023-09-06 15:48:13 +02:00
Yves Rutschle
93600d1fb1
Merge pull request #299 from amake/patch-1
...
Allow supplying additional CFLAGS
2023-08-31 15:26:42 +02:00
Yves Rutschle
04f258e705
Merge branch 'master' into patch-1
2023-08-31 15:26:22 +02:00
Yves Rutschle
1fb888bbf2
remove magic numbers with correct sizeof
2023-08-31 15:18:22 +02:00
Yves Rutschle
1f0cab2aee
Merge pull request #342 from utoni/fix/ovpn-probe-read-overflow
...
fix possible buffer overflow
2023-08-31 15:15:50 +02:00
Yves Rutschle
ff9328fa6c
Merge branch 'utoni-fix/cppcheck-complains'
2023-08-31 15:13:57 +02:00
Yves Rutschle
e941e8dd2e
fix cppcheck complains
2023-08-31 15:10:53 +02:00
Yves Rűtschlé
8930ec395e
Initial support for the landlock LSM
2023-08-29 17:20:51 +02:00
Yves Rutschle
54fe4b2f47
Merge pull request #401 from rnhmjoj/master
...
fix handling of IPv6 UDP connections
2023-08-26 21:32:22 +02:00
rnhmjoj
33129481cf
fix handling of IPv6 UDP connections
...
Problem:
IPv6 addresses are 4 bytes long and don't fit inside a `sockaddr`, so
`recvfrom` will truncate the address to the first half.
When generating a reply, the remaining half of the address is filled
with garbage and the packet is subsequently delivered to the wrong host,
if not immediately dropped.
Solution:
replace `sockaddr` with `sockaddr_storage`, the latter is guaranteed to
be large enough to hold an IPv6 address and pointers can be cast to
`sockaddr *` when needed.
2023-08-22 11:44:09 +02:00
Sergey Ponomarev
yrutschle
Sergio C
Konstantin
Latchezar Tzvetkoff
Yves Rutschle
Preston Crow
Fabrice Fontaine
rnhmjoj