keanehatescoding
6c0dc269c7
fix: close err_log after writing success message in main()
...
err_log was fclose()'d before the "Successfully generated all targets"
fprintf(), resulting in a write-after-close that corrupted glibc's
internal stdio buffers and triggered an abort() via SIGABRT on every
systemd-invoked run regardless of whether /etc/sslh/ exists.
Fix by moving the success fprintf() above the fclose() call.
2026-05-08 22:42:13 +02:00
Yves Rutschle
dc70cc0d3b
verbose_packet now dumps UDP packets as well ( fix #527 )
2026-03-15 22:12:00 +01:00
Yves Rutschle
d39388d1ed
prepare v2.3.1
2026-03-05 19:14:57 +01:00
Yves Rutschle
70a776fb9a
-V now outputs compile-time configuration ( fix #519 )
2026-03-04 22:35:56 +01:00
Yves Rutschle
9fadd60eed
sanity check that libwrap is present when using service option
2026-03-03 22:42:52 +01:00
Yves Rutschle
83c9465c37
sanity check that proxyprotocol is compiled in when used by listening endpoints
2026-03-03 22:34:36 +01:00
Yves Rutschle
1137779b9c
sanity check that libproxyprocol is compiled in when option is used
2026-03-03 22:29:01 +01:00
Yves Rutschle
4d3aa6c6e0
sanity checks that regex options are only used with the right probe and with libpcre2 support compiled in
2026-03-03 22:05:01 +01:00
Yves Rutschle
579baae363
fix syntax error in documentation example
2026-02-28 21:42:01 +01:00
Yves Rutschle
e2d01a7440
close file descriptors upon forking a connection shoveler ( fix #521 )
2026-02-15 11:17:36 +01:00
Yves Rutschle
ecc76071c1
downgrade SNI matching logs from error to info to reduce log verboseness ( Fix #520 )
2026-02-08 09:50:45 +01:00
Yves Rutschle
e5d7cd0575
revert some useless changes to really fix #515
2026-02-06 22:08:59 +01:00
Yves Rutschle
d288125ff3
test combinations of ipv4 <-> ipv6 over proxyprotocol
2026-02-06 22:05:27 +01:00
Yves Rutschle
2cc1e1f1d9
add CAP_NET_RAW in systemd configuration to support transparent proxying
2026-02-03 21:00:40 +01:00
yrutschle
77dc76a0f2
Change IPv4 to IPv6 addresses when using proxyprotocol and protocols are different ( Fix #515 )
2026-02-01 18:02:03 +01:00
4O4-Not-F0und
86188cdd28
build sslh with libproxyprotocol
2025-12-20 17:23:10 +01:00
Yves Rutschle
c29081f71d
Merge branch 'master' of github.com:yrutschle/sslh
2025-11-14 14:54:17 +01:00
Yves Rutschle
8d58164fdd
Libwrap requires access to some more files when using landlock ( fix #450 again)
2025-11-14 14:53:56 +01:00
yrutschle
894eacfb42
Fix sslh-fork segmentation fault ( Fix #508 )
2025-10-30 08:22:48 +01:00
benok
6310e6fc9c
Add missing trailing "\n" to log output
2025-10-29 12:28:01 +01:00
Yves Rutschle
0dd580f45b
move symbol definition for Cygwin ( fix #506 )
2025-09-24 14:48:16 +02:00
Yves Rutschle
63e15bb55c
Prepare for 2.3.0
2025-09-10 15:50:52 +02:00
Yves Rutschle
6f3dcfb365
Merge branch 'proxyprotocol'
2025-09-10 15:31:43 +02:00
Yves Rutschle
f8e031ecb9
Merge branch 'master' of github.com:yrutschle/sslh
2025-09-10 15:29:59 +02:00
Yves Rutschle
fcfc348aee
added proxyprotocol documentation
2025-09-10 15:29:04 +02:00
Yves Rutschle
6905498d60
proxyprotocol on client-side can be removed on server side, and its info is then logged
2025-09-10 12:14:41 +02:00
Yves Rűtschlé
eea50a97fc
support for proxy_protocol on incoming (client-side) link
2025-09-10 09:28:54 +02:00
Yves Rutschle
387ef13f52
fix memory leak when server-side is not yet attached, and potential memory leak when forking hash is full ( fix #504 )
2025-09-04 23:50:17 +02:00
Yves Rűtschlé
dcb2cc928a
import main branch for endpoint tracking
2025-08-29 20:44:15 +02:00
Yves Rűtschlé
2106bd6527
added test for client-side proxyprotocol
2025-08-29 20:39:42 +02:00
Yves Rűtschlé
12f748fe8e
include test for server-side proxyprotocol
2025-08-29 12:22:30 +02:00
yrutschle
b6c8e116af
verify there is space in pid followup table before forking ( fix #502 )
2025-08-27 22:57:04 +02:00
yrutschle
4427a9570f
remove noisy logging from harmless interrupted system calls
2025-08-27 22:21:51 +02:00
yrutschle
3c237b3c9a
have some minimum hash size if no protocols have a max_connections setting
2025-08-26 23:22:17 +02:00
yrutschle
2914fe7b5c
fix embarassingly wrong error check
2025-08-26 22:23:30 +02:00
yrutschle
829a7299e1
remove obsolete debug statement
2025-08-26 22:18:21 +02:00
yrutschle
f2e86a3df7
do not log if accept returns EAGAIN
2025-08-26 22:17:58 +02:00
yrutschle
f64f0c5ba5
some markdown formating fixes
2025-08-26 22:15:49 +02:00
Oleg Stepura
6d1e95cc52
Update podman.md
2025-08-26 22:00:56 +02:00
Oleg Stepura
b9de23534e
Update podman.md
2025-08-26 22:00:56 +02:00
Oleg Stepura
55872427f2
Update podman.md
2025-08-26 22:00:56 +02:00
Yves Rűtschlé
9e2e02d58e
print settings include proxyprotocol setting
2025-08-21 12:39:01 +02:00
yrutschle
00e8a3b084
some markdown formating fixes
2025-08-20 09:55:43 +02:00
Yves Rűtschlé
988f7135ef
add link to libev documentation
2025-08-17 10:47:19 +02:00
Yves Rűtschlé
0baf23df95
fix probing on partial reception
2025-08-17 10:31:18 +02:00
Yves Rűtschlé
81e2d0e2f4
check udp timeouts on all new connections including TCP
2025-08-15 19:54:51 +02:00
Yves Rűtschlé
b57b333a39
update documentation for accept() disabling
2025-08-15 18:49:56 +02:00
Yves Rűtschlé
effa0f2615
sslh-select now has backup strategy when ulimit -n (file descriptor) is reached
2025-08-15 18:32:14 +02:00
Yves Rűtschlé
8769d86c04
EWOULDBLOCK should not cause accept() disable
2025-08-15 18:29:05 +02:00
Yves Rűtschlé
663e41e98c
remove debug printf
2025-08-15 10:30:27 +02:00
keanehatescoding
Yves Rutschle
4O4-Not-F0und
benok
Oleg Stepura