 yrutschle
|
fee8491a8e
|
remove useless capabilities and use standard environment in systemd
|
2024-04-10 18:39:07 +02:00 |
|
|
Yves Rűtschlé
|
a80d79fd40
|
Merge multiple sslh systemd unit configurations
|
2024-04-10 18:07:28 +02:00 |
|
|
Yves Rűtschlé
|
4b921be69d
|
Merge systemd unit multiple configurations
|
2024-04-10 18:06:56 +02:00 |
|
|
Yves Rutschle
|
1799a81079
|
fix off-by-one error that would sometime ignore the latest connection
|
2024-03-31 22:18:58 +02:00 |
|
|
Yves Rutschle
|
58783af410
|
For MacOS, do not have multiple identicat cases in switch
|
2024-03-23 09:53:01 +01:00 |
|
|
Yves Rutschle
|
1957be1dc3
|
v.2.1.0
|
2024-03-22 16:41:50 +01:00 |
|
|
Yves Rűtschlé
|
ecca78bde7
|
for MacOS, define unknown symbols to equivalent values
|
2024-03-21 18:54:03 +01:00 |
|
|
Yves Rűtschlé
|
b94060ad76
|
undef FD_SETSIZE to avoid compiler warning upon redefine
|
2024-03-15 15:09:39 +01:00 |
|
|
Yves Rűtschlé
|
736b108a75
|
dont log error when remote client drops connection on Windows (fix #427)
|
2024-03-13 16:58:09 +01:00 |
|
|
Yves Rutschle
|
7ca567fcd9
|
clarify the difficulty of transparent proxying
|
2024-03-12 22:07:17 +01:00 |
|
|
Yves Rutschle
|
3117c15fbd
|
when sslh-fork accept() fails with some errors, retry accept instead of dying
|
2024-01-11 21:32:39 +01:00 |
|
|
Yves Rutschle
|
e428fc505c
|
prevent children from continuing the parent's work in case of failure
|
2024-01-11 21:24:19 +01:00 |
|
|
Yves Rutschle
|
4dfb4d300a
|
add default LANDLOCK_ACCESS_FS_REFER define for Ubuntu (fix #420)
|
2024-01-06 11:56:57 +01:00 |
|
|
Yves Rutschle
|
39184b5622
|
enable landlock access to files to allow forking and name resolution
|
2024-01-05 13:21:55 +01:00 |
|
|
Yves Rutschle
|
940461de18
|
check name resolution error to avoid segfault
|
2024-01-05 11:15:53 +01:00 |
|
|
Yves Rutschle
|
6f949419d1
|
fix comment to reflect reality
|
2024-01-05 10:34:29 +01:00 |
|
|
Yves Rutschle
|
dab5df7409
|
clarify where the name resolution error comes from
|
2024-01-05 10:32:41 +01:00 |
|
|
Yves Rutschle
|
402ca5219b
|
fix warnings on sockaddr storage
|
2024-01-04 23:22:44 +01:00 |
|
|
Yves Rutschle
|
046401148d
|
add ./configure stage to docker build
|
2024-01-04 23:04:26 +01:00 |
|
|
Yves Rutschle
|
780e536aeb
|
use autoconf to crete build scripts depending on landlock presence (fix #417)
|
2024-01-04 22:45:10 +01:00 |
|
|
Yves Rutschle
|
ed0ab12a16
|
reintroduce --ssl as alias to --tls
|
2024-01-02 21:38:23 +01:00 |
|
|
Yves Rutschle
|
b65f1e8b26
|
Merged Landlock feature
|
2023-12-09 14:13:07 +01:00 |
|
|
Yves Rutschle
|
90a55b6f9d
|
document Windows build and docker repositories
|
2023-11-15 21:49:44 +01:00 |
|
|
Yves Rutschle
|
1f66e2e093
|
add sslh-ev
|
2023-11-15 21:46:42 +01:00 |
|
|
Yves Rutschle
|
490a44723b
|
fix install to build sslh-fork (fix #407)
|
2023-10-05 11:53:09 +02:00 |
|
|
Yves Rutschle
|
23fb1eba6f
|
remove obsolete intermediate sslh target
|
2023-10-03 09:34:38 +02:00 |
|
|
Yves Rutschle
|
1b26eb50a5
|
Changelog for resolve_on_forward fix
|
2023-09-24 09:25:52 +02:00 |
|
|
Yves Rutschle
|
e0f15a31b7
|
resolve name at connection time for UDP too
|
2023-09-12 21:39:51 +02:00 |
|
|
Yves Rutschle
|
c2551c011e
|
update to Conf::Libconfig 1.0.3 API
|
2023-09-12 21:35:23 +02:00 |
|
|
Yves Rutschle
|
e2c3ed61a8
|
update to Conf::Libconfig 1.0.3 API
|
2023-09-12 21:35:10 +02:00 |
|
|
Yves Rutschle
|
1b0c6d0b8d
|
add resolve_on_forward in tests
|
2023-09-06 18:01:52 +02:00 |
|
|
Yves Rutschle
|
0562eb4b07
|
fix resolve_on_forward use (fix #405)
|
2023-09-06 15:48:13 +02:00 |
|
|
Yves Rutschle
|
1fb888bbf2
|
remove magic numbers with correct sizeof
|
2023-08-31 15:18:22 +02:00 |
|
|
Yves Rutschle
|
ff9328fa6c
|
Merge branch 'utoni-fix/cppcheck-complains'
|
2023-08-31 15:13:57 +02:00 |
|
|
Yves Rutschle
|
e941e8dd2e
|
fix cppcheck complains
|
2023-08-31 15:10:53 +02:00 |
|
|
Yves Rűtschlé
|
8930ec395e
|
Initial support for the landlock LSM
|
2023-08-29 17:20:51 +02:00 |
|
|
Yves Rűtschlé
|
4cc0867753
|
remove dependency of sslh-conf.c to sslhconf.cfg (fix #283)
|
2023-08-13 10:38:39 +02:00 |
|
|
Yves Rutschle
|
3707c5b8a6
|
fix file descriptor leak if bind_peer fails
|
2023-05-13 23:18:07 +02:00 |
|
|
Yves Rutschle
|
5666a1bb9d
|
die if fd is not in cnx, which should be impossible (current behaviour results in illegal array dereferencing, which is worse)
|
2023-05-13 23:11:03 +02:00 |
|
|
Yves Rutschle
|
7b9c7f0fb2
|
check accept() return value
|
2023-05-13 23:00:26 +02:00 |
|
|
Yves Rutschle
|
eec2446723
|
fix error messages
|
2023-05-13 22:57:08 +02:00 |
|
|
Yves Rutschle
|
d29c9524bd
|
fix unbalance of va_start/va_end
|
2023-05-13 22:51:04 +02:00 |
|
|
Yves Rutschle
|
db4ae0ef9d
|
fix potential memory leak if the second malloc fails
|
2023-05-13 22:40:53 +02:00 |
|
|
Yves Rutschle
|
ee48dae8c5
|
fix potential file descriptor leak if set_nonblock () fails
|
2023-05-13 22:36:21 +02:00 |
|
|
Yves Rutschle
|
842f6b0473
|
Add mention of QUIC example (fix #376)
|
2023-02-19 17:24:51 +01:00 |
|
|
Yves Rutschle
|
1f64a71cde
|
fix out-of-bounds read in sslh-ev (fix #368)
|
2023-01-08 22:50:56 +01:00 |
|
|
Yves Rutschle
|
00fc8e5d95
|
fix off-by-one error
|
2023-01-08 22:50:10 +01:00 |
|
|
Yves Rutschle
|
b9602ab98b
|
removed obsolete max_fd tracker
|
2023-01-08 22:32:17 +01:00 |
|
|
Yves Rutschle
|
486f8a0090
|
removed obsolete comments
|
2023-01-08 21:58:50 +01:00 |
|
|
Yves Rutschle
|
3a1ac6c8d7
|
add protocol name that was missing in previous commit
|
2023-01-08 17:45:50 +01:00 |
|
|
Yves Rutschle
|
9dc3e3ce56
|
connection loss before it is logged resulted in logging uninitialised characters
|
2023-01-08 17:31:05 +01:00 |
|
|
Yves Rűtschlé
|
40c616e94c
|
downgrade TLS error to info (fix #367)
|
2022-11-20 18:26:20 +01:00 |
|
|
Yves Rűtschlé
|
555717e345
|
defensive programming in case connections get tidied while there is activity on both file descriptors (fix #355)
|
2022-11-09 17:48:14 +01:00 |
|
|
Yves Rűtschlé
|
02573eb44b
|
only process write events if file descriptor has not been tidied (may fix #355)
|
2022-11-03 17:23:49 +01:00 |
|
|
Yves Rűtschlé
|
d166b8977c
|
document test script dependency
|
2022-11-03 09:32:47 +01:00 |
|
|
Yves Rűtschlé
|
4c3b52dda5
|
Merge branch 'master' of https://github.com/yrutschle/sslh
|
2022-10-29 22:31:35 +02:00 |
|
|
Yves Rűtschlé
|
c981ae9853
|
update log format to actually catch ssh bruteforcing (fix #359)
|
2022-10-29 22:31:24 +02:00 |
|
|
Yves Rűtschlé
|
72c743e1e1
|
acknowledges akappner
|
2022-09-11 22:15:14 +02:00 |
|
|
Yves Rűtschlé
|
5cba44f5fa
|
Add built-in MSRDP support
|
2022-09-11 21:51:06 +02:00 |
|
|
Yves Rűtschlé
|
f418ae6128
|
added wireguard command-line setting
|
2022-09-04 18:48:17 +02:00 |
|
|
Yves Rűtschlé
|
e690cb5622
|
Merge branch 'master' of https://github.com/yrutschle/sslh
|
2022-09-04 15:28:55 +02:00 |
|
|
Yves Rűtschlé
|
64c3e0ed1e
|
improve basic.cfg
|
2022-09-04 15:26:39 +02:00 |
|
|
Yves Rűtschlé
|
9d10989d55
|
reword documentation to account for sslh-ev
|
2022-07-24 17:59:11 +02:00 |
|
|
Yves Rűtschlé
|
8b604a3db7
|
defensive programming against inconsistent configuration (fix #336 more)
|
2022-07-24 17:50:13 +02:00 |
|
|
Yves Rűtschlé
|
5168fe081a
|
add mention of sslh-ev
|
2022-07-21 18:24:36 +02:00 |
|
|
Yves Rűtschlé
|
7b923f793e
|
fix packages names for Debian 11
|
2022-07-21 18:20:56 +02:00 |
|
|
yrutschle
|
a4db163a69
|
config sanity check that there is at least one target protocol for each family that we listen to (fix #336)
|
2022-07-10 21:16:41 +02:00 |
|
|
yrutschle
|
b36486bb6d
|
prepare v2.0
|
2022-06-07 20:57:44 +02:00 |
|
|
yrutschle
|
d16d132f0e
|
document udp_max_connections in example.cfg
|
2022-05-31 22:49:39 +02:00 |
|
|
yrutschle
|
3fffce323d
|
fix dependencies for hash.o (fix #333)
|
2022-05-25 17:07:19 +02:00 |
|
|
yrutschle
|
83478818df
|
update comment to mention sslh-ev
|
2022-05-22 22:33:27 +02:00 |
|
|
yrutschle
|
750e828d49
|
reinstate checking of FD_SETSIZE for sslh-select
|
2022-05-22 22:32:22 +02:00 |
|
|
yrutschle
|
82aeedefcd
|
allow gap set and get to be inlined
|
2022-05-05 22:40:12 +02:00 |
|
|
yrutschle
|
f6fe735171
|
sort target protocols as TCP or UDP, so only appropriate probes are called by the listeners
|
2022-05-05 17:45:40 +02:00 |
|
|
yrutschle
|
78827d75fe
|
provide simple output to stderr (fix #330)
|
2022-05-05 09:12:45 +02:00 |
|
|
yrutschle
|
7228c0ebc3
|
refactor: move TCP code to new object tcp-listener
|
2022-05-03 17:03:30 +02:00 |
|
|
yrutschle
|
da194f15f0
|
make local functions static
|
2022-05-02 23:01:28 +02:00 |
|
|
yrutschle
|
d23a537d62
|
regerenate c2s files
|
2022-04-30 09:56:08 +02:00 |
|
|
yrutschle
|
006706a901
|
typo
|
2022-04-30 09:38:30 +02:00 |
|
|
yrutschle
|
c78a50c1d7
|
remove obsolete code
|
2022-04-27 17:33:36 +02:00 |
|
|
yrutschle
|
92e8a3e256
|
manage timeout with lists instead of linear searches
|
2022-04-27 17:29:02 +02:00 |
|
|
yrutschle
|
cd664574f1
|
manage timeout with lists instead of linear searches
|
2022-04-27 17:28:13 +02:00 |
|
|
yrutschle
|
449fabba51
|
linked list sorted by timeout times
|
2022-04-24 18:35:09 +02:00 |
|
|
yrutschle
|
cd5d75fed9
|
fix off-by-one error that wont time out highest UDP file descriptor
|
2022-04-24 18:31:27 +02:00 |
|
|
yrutschle
|
50f5af394b
|
remove obsolete declaration
|
2022-04-18 22:55:15 +02:00 |
|
|
yrutschle
|
8ac93c3e9d
|
abstract connection activation
|
2022-04-18 21:25:07 +02:00 |
|
|
yrutschle
|
35036c94c7
|
make UDP hash size configurable
|
2022-04-10 09:03:53 +02:00 |
|
|
yrutschle
|
21d00bd29d
|
remove globals for hash size
|
2022-04-10 08:45:01 +02:00 |
|
|
yrutschle
|
cd7afaa00d
|
fix comment to reflect floorless algorithm
|
2022-04-09 13:27:30 +02:00 |
|
|
yrutschle
|
53ae8bb913
|
remove floor entirely
|
2022-04-09 13:22:55 +02:00 |
|
|
yrutschle
|
97a67500ea
|
remove need for floor at insert
|
2022-04-08 21:10:20 +02:00 |
|
|
yrutschle
|
33d73dd514
|
invert distance counting
|
2022-04-08 21:09:45 +02:00 |
|
|
yrutschle
|
63b503e27f
|
simplify remove with distance computation
|
2022-04-08 19:55:22 +02:00 |
|
|
yrutschle
|
2e0d6b6e8e
|
removed obsolete variable
|
2022-04-08 18:40:39 +02:00 |
|
|
yrutschle
|
4625883b7f
|
simplify insertion using distance instead of floors and wrapped
|
2022-04-08 18:38:29 +02:00 |
|
|
yrutschle
|
07ceb99280
|
remove unused variable
|
2022-04-02 19:04:49 +02:00 |
|
|
yrutschle
|
5fa03ec9a3
|
fix hash item type definition
|
2022-04-02 18:59:32 +02:00 |
|
|
yrutschle
|
9ce9b5cd82
|
Integrate hash for UDP
|
2022-04-02 18:48:24 +02:00 |
|
|
yrutschle
|
97810cf0b2
|
Merge branch 'master' of https://github.com/yrutschle/sslh
|
2022-04-02 15:10:51 +02:00 |
|
|
Yves Rutschle
|
f8684fc9d6
|
add resolve_on_forward to c2s files (fix #326)
|
2022-04-01 19:35:16 +02:00 |
|