Yves Rutschle
f7f712341f
check accept actually succeeded
2024-01-11 20:54:27 +01:00
Yves Rutschle
591cfc9a8a
Reintroduce --ssl as alias to --tls in maintenance branch for 1.x ( fix #416 )
2024-01-02 21:47:00 +01:00
Yves Rutschle
6aa19d080a
updated version numbers for release
2021-08-17 21:55:18 +02:00
yrutschle
63f9c4a582
added syslog probe ( fixes #34 )
2021-08-04 15:29:05 +02:00
yrutschle
0e45107797
advertise new UDP protocols
2021-08-01 22:02:42 +02:00
yrutschle
37d2756703
move to PCRE for conf file
2021-07-23 22:36:20 +02:00
yrutschle
4a4c571116
document UDP support
2021-07-16 22:38:53 +02:00
yrutschle
862e33cfec
moved UDP support from sslh-fork to sslh-select
2021-07-01 22:44:35 +02:00
yrutschle
c41ec489e0
changed CAP_NET_ADMIN to CAP_NET_RAW as it's enough
2021-05-11 06:44:27 +02:00
yrutschle
8e130882fc
sslh-fork drops all capabilities after connecting to server side
2021-05-09 15:46:25 +02:00
yrutschle
308b54aa8a
remove caveat about UDP refactor
2021-05-08 07:06:14 +02:00
yrutschle
a0f9fc164e
changelog the sslh-select refactoring
2021-04-21 08:42:27 +02:00
yrutschle
adb27aa4a3
add a per-protocol transparent proxy option
2021-02-21 21:03:01 +01:00
yrutschle
05a835ff1f
begin of release not for UDP
2020-12-06 15:50:08 +01:00
yrutschle
41e3b0cd1d
warn about refactor
2020-11-29 10:19:50 +01:00
yrutschle
9f99f296b1
warn about unknown settings in the configuration file
2020-08-29 18:22:42 +02:00
yrutschle
8b6e06e6c7
support for libconfig 1.4.9. Fix #275
2020-08-11 17:37:23 +02:00
yrutschle
99d4a6d4a2
explicit obsoletion of ssl param
2020-07-29 22:23:36 +02:00
yrutschle
8638199f13
test for command line parameters
2020-07-19 18:32:57 +02:00
yrutschle
ac8563525e
fix Changelog for -v
2020-07-18 17:25:39 +02:00
yrutschle
2f983625d0
documentation update
2020-07-18 16:54:23 +02:00
Yves Rutschle
0cc516bf51
v1.21
2020-07-11 21:30:26 +02:00
yrutschle
c5b0932bad
syslog_facility 'none' disables syslog
2020-06-19 23:39:25 +02:00
Yves Rutschle
c595aadb4d
log to syslog even if in foreground
2020-05-28 10:13:54 +00:00
Jonathan McCrohan
f029b4098b
Update Let's Encrypt entry in example.cfg
...
Update Let's Encrypt entry in example.cfg for tls-alpn-01 challenge.
Previous entry was based on tls-sni-01 challenge which is deprecated and
was disabled in March 2019.
Signed-off-by: Jonathan McCrohan <jmccrohan@gmail.com>
2019-06-16 23:26:33 +01:00
yrutschle
2705face30
TCP_FASTOPEN changelog
2019-03-10 10:11:28 +01:00
yrutschle
a7b4462c6e
Added 'minlength' option
2019-02-03 14:45:14 +01:00
Yves Rutschle
4ae2e62d25
v1.20
2018-11-20 22:58:41 +01:00
yrutschle
0003680137
remove old tls and ssl targets, only use alpn/sni probe also for TLS with no extensions
2018-09-23 12:07:06 +02:00
yrutschle
ffe9971624
test suite for SNI/ALPN with multiple targets and all combinations covered
2018-08-30 19:50:53 +02:00
Yves Rutschle
677e385fec
new probing algorithm
2018-08-13 22:29:09 +02:00
Yves Rutschlé
83be63d282
v1.19
2018-01-20 18:40:15 +00:00
Yves Rutschle
aa06261d70
added syslog_facility option
2017-07-21 22:46:24 +02:00
Yves Rutschle
38447c8158
v1.18
2016-03-29 21:19:05 +02:00
Yves Rutschle
414ed7de11
Support keepalive for connections on the connecting side
2016-02-04 09:19:54 +01:00
moparisthebest
8af039d3eb
Add ALPN protocol based probe
2016-01-05 00:32:10 -05:00
Yves Rutschle
8758a298ba
Changed connection log to include the name of the probe that triggered.
2015-12-15 16:06:14 +01:00
Yves Rutschle
2cb424c646
Added log_level option to configuration file, which switches off log at each connection
2015-12-15 15:51:18 +01:00
Yves Rutschle
8fdaf6eb08
changed configuration file to accomodate SNI in a cleaner way
2015-07-17 15:04:04 +02:00
Yves Rutschle
9475d9689b
Comment for SNI inclusion
2015-07-15 15:02:37 +02:00
Yves Rutschle
3aefaf3004
Added Makefile option to build without libpcre
2015-07-09 15:31:42 +02:00
Yves Rutschle
3550cbe77c
Finalised v1.17
2015-03-09 21:51:39 +01:00
Yves Rutschle
2705426f63
Attribute previous commit
2014-12-27 19:51:20 +01:00
Yves Rutschle
bb4aeb446a
Use default configuration filename
2014-12-27 11:57:27 +01:00
Yves Rutschle
74de4f4fd2
Transparent proxy support for FreeBSD (attribution)
2014-12-25 20:15:52 +01:00
Yves Rutschle
b9ddfb4c7a
Support RFC5952-style IPv6 addresses
2014-12-22 18:19:02 +01:00
Yves Rutschle
6fb234f85e
added fail2ban configuration examples
2014-03-30 18:51:21 +02:00
Yves Rutschle
426797f9c0
call setgroups before setgid
2014-03-30 17:28:00 +02:00
Yves Rutschle
9d2deff6ad
Changelog prepared for v1.16
2014-02-11 22:06:01 +01:00
Yves Rutschle
6bcb5c83f2
libcap support: print out process capabilities at startup if verbose
2014-02-09 21:39:27 +01:00