Commit Graph - sslh - Gitea: Git with a cup of tea

third-party-mirrors/sslh

0 Fork 0

mirror of https://github.com/yrutschle/sslh.git synced 2026-10-22 18:12:10 +03:00

Commit Graph

Select branches

Hide Pull Requests

ech

master

proxyprotocol

v1.23

#1

#1/merge

#105

#106

#114

#114/merge

#115

#12

#120

#125

#125/merge

#126

#130

#130/merge

#136

#136/merge

#137

#137/merge

#138

#138/merge

#139

#14

#142

#143

#145

#146

#147

#149

#150

#151

#153

#158

#159

#161

#162

#167

#168

#168/merge

#172

#180

#181

#183

#185

#186

#187

#19

#19/merge

#192

#199

#2

#2/merge

#201

#205

#206

#211

#213

#221

#225

#229

#231

#232

#233

#234

#235

#236

#240

#242

#248

#25

#255

#26

#269

#271

#280

#294

#296

#297

#299

#3

#3/merge

#310

#311

#315

#317

#32

#323

#324

#325

#328

#329

#332

#338

#339

#34

#340

#341

#342

#344

#345

#349

#351

#353

#354

#356

#360

#361

#362

#365

#366

#366/merge

#382

#383

#384

#386

#388

#389

#392

#393

#4

#4/merge

#401

#406

#408

#41

#412

#414

#421

#431

#434

#436

#44

#440

#442

#444

#446

#447

#449

#45

#460

#461

#462

#463

#464

#465

#468

#47

#476

#476/merge

#485

#49

#493

#494

#497

#499

#5

#5/merge

#501

#503

#509

#51

#52

#528

#532

#533

#534

#536

#54

#54/merge

#541

#544

#546

#547

#548

#548/merge

#549

#549/merge

#55

#550

#551

#552

#553

#553/merge

#554

#555

#555/merge

#556

#557

#557/merge

#558

#558/merge

#56

#62

#67

#69

#7

#7/merge

#70

#74

#77

#77/merge

#8

#85

#86

#91

#92

#93

#93/merge

#96

#97

#98

#99

v1.0

v1.1

v1.10

v1.11

v1.12

v1.13

v1.14

v1.15

v1.16

v1.17

v1.18

v1.19

v1.19b

v1.19c

v1.2

v1.20

v1.21

v1.21b

v1.21c

v1.22

v1.22b

v1.22c

v1.23.0

v1.23.1

v1.3

v1.5

v1.6

v1.7

v1.8

v1.9

v2.0

v2.0-rc1

v2.0-rc2

v2.0.0

v2.0.1

v2.1.0

v2.1.1

v2.1.2

v2.1.3

v2.1.4

v2.2.0

v2.2.1

v2.2.2

v2.2.3

v2.2.4

v2.3.0

v2.3.1

39d164f5a8 hashtest: fix build so the suite actually runs master Stefan Meinecke 2026-10-18 02:15:07 +02:00
bb89714216 misc hardening: connection drop, NULL deref, OOB writes, dead option Stefan Meinecke 2026-10-18 02:14:06 +02:00
b9d9f9112f sslh-fork: decrement num_connections when fork() fails Stefan Meinecke 2026-10-18 02:53:50 +02:00
91736dbd17 sslh-fork: apply the active listener's configuration, not listener 0's Stefan Meinecke 2026-10-18 02:14:06 +02:00
bbc4f91f68 systemd: give socket-activated endpoints a default endpoint_cfg Stefan Meinecke 2026-10-18 02:37:22 +02:00
e20f2381c3 move unix path length checks to config_sanity_check() Stefan Meinecke 2026-10-18 20:34:12 +02:00
7afa284efc unix sockets: terminate sun_path, reject over-long paths early Stefan Meinecke 2026-10-18 02:14:06 +02:00
d51da940da remove leftover debug messages Yves Rutschle 2026-10-18 17:34:21 +02:00
e3020e8441 Merge branch 'master' of github.com:yrutschle/sslh Yves Rutschle 2026-10-18 17:30:41 +02:00
cb894df702 sslh-ev: add timeout management for incoming connections (should help with #539) Yves Rutschle 2026-10-18 17:30:37 +02:00
7cc9dc90be probes: fix msrdp length truncation, teamspeak match, unaligned reads Stefan Meinecke 2026-10-18 02:14:06 +02:00
f1b4fa1744 robustness: check return values before changing num_probing Yves Rutschle 2026-10-17 22:33:52 +02:00
ca5e7fe6f3 check socket() return value Yves Rutschle 2026-10-07 15:20:21 +02:00
bebc109b94 print_message() restores errno (fix #538) Yves Rutschle 2026-10-04 11:07:55 +02:00
1c98792a55 fix transparent proxy link and timeout default in man page Iain 2026-09-29 23:53:09 +01:00
1e1cde863b Merge branch 'TigerP-improve-configure-ac' Yves Rutschle 2026-09-19 18:25:18 +02:00
224efd36c3 Merge branch 'improve-configure-ac' of github.com:TigerP/sslh into TigerP-improve-configure-ac Yves Rutschle 2026-09-19 18:24:16 +02:00
1df05999b7 Remove compose version Aniket 2026-08-31 15:13:34 +01:00
0d696eb007 fix typo Kai Bolay 2026-09-19 11:28:40 -04:00
17a0425f4f incoming TLS connections get routed to GetEchClientHelloInner ech Yves Rutschle 2026-08-20 07:56:34 +00:00
03067e9ab7 respect hosts_ctl() prototype Yves Rutschle 2026-08-02 09:03:51 +02:00
34645a62b2 ECH configs are build with sslh public name, not the target SNI... Yves Rutschle 2026-07-18 18:01:11 +00:00
6d50082993 ECH configuration generation for each SNI, with DNS configuration printed in logs Yves Rutschle 2026-07-18 16:13:06 +00:00
eb976475be declare pp_log_connection() as inline (avoids warning with proxyprotocol not present) Yves Rutschle 2026-07-12 18:10:34 +02:00
6219527ce4 remove warning if MAX is defined somewhere else Yves Rutschle 2026-06-20 16:31:59 +00:00
7eabafc6e2 added updated QUIC example Yves Rutschle 2026-05-31 09:58:57 +02:00
5f9ff68f1c mention Wireguard probe in documentation (fix #535) Yves Rutschle 2026-05-31 09:51:06 +02:00
4752c8647d Merge branch 'master' of github.com:yrutschle/sslh Yves Rutschle 2026-05-08 22:52:40 +02:00
a8352c137c udp_c2s_forward: silently ignor EAGAIN/EWOULDBLOCK on recvfrom (fix #534) Yves Rutschle 2026-05-08 22:52:26 +02:00
6c0dc269c7 fix: close err_log after writing success message in main() keanehatescoding 2026-04-28 02:57:30 +03:00
0bc0fb62b7 Improve configure.ac to work with newer autoconf versions Tiger!P 2026-04-18 22:25:53 +02:00
dc70cc0d3b verbose_packet now dumps UDP packets as well (fix #527) Yves Rutschle 2026-03-15 22:12:00 +01:00
d39388d1ed prepare v2.3.1 v2.3.1 Yves Rutschle 2026-03-05 19:14:57 +01:00
70a776fb9a -V now outputs compile-time configuration (fix #519) Yves Rutschle 2026-03-04 22:35:56 +01:00
9fadd60eed sanity check that libwrap is present when using service option Yves Rutschle 2026-03-03 22:42:52 +01:00
83c9465c37 sanity check that proxyprotocol is compiled in when used by listening endpoints Yves Rutschle 2026-03-03 22:34:36 +01:00
1137779b9c sanity check that libproxyprocol is compiled in when option is used Yves Rutschle 2026-03-03 22:10:25 +01:00
4d3aa6c6e0 sanity checks that regex options are only used with the right probe and with libpcre2 support compiled in Yves Rutschle 2026-03-03 22:05:01 +01:00
579baae363 fix syntax error in documentation example Yves Rutschle 2026-02-28 21:42:01 +01:00
e2d01a7440 close file descriptors upon forking a connection shoveler (fix #521) Yves Rutschle 2026-02-15 11:17:36 +01:00
ecc76071c1 downgrade SNI matching logs from error to info to reduce log verboseness (Fix #520) Yves Rutschle 2026-02-08 09:50:31 +01:00
e5d7cd0575 revert some useless changes to really fix #515 Yves Rutschle 2026-02-06 22:08:59 +01:00
d288125ff3 test combinations of ipv4 <-> ipv6 over proxyprotocol Yves Rutschle 2026-02-06 22:03:00 +01:00
2cc1e1f1d9 add CAP_NET_RAW in systemd configuration to support transparent proxying Yves Rutschle 2026-02-03 21:00:40 +01:00
77dc76a0f2 Change IPv4 to IPv6 addresses when using proxyprotocol and protocols are different (Fix #515) yrutschle 2026-02-01 18:02:03 +01:00
86188cdd28 build sslh with libproxyprotocol 4O4-Not-F0und 2025-05-23 14:45:07 +08:00
c29081f71d Merge branch 'master' of github.com:yrutschle/sslh Yves Rutschle 2025-11-14 14:54:17 +01:00
8d58164fdd Libwrap requires access to some more files when using landlock (fix #450 again) Yves Rutschle 2025-11-14 14:53:56 +01:00
894eacfb42 Fix sslh-fork segmentation fault (Fix #508) yrutschle 2025-10-29 19:39:04 +01:00
6310e6fc9c Add missing trailing "\n" to log output benok 2025-10-29 18:47:40 +09:00
0dd580f45b move symbol definition for Cygwin (fix #506) Yves Rutschle 2025-09-24 14:48:16 +02:00
63e15bb55c Prepare for 2.3.0 v2.3.0 Yves Rutschle 2025-09-10 15:50:52 +02:00
6f3dcfb365 Merge branch 'proxyprotocol' Yves Rutschle 2025-09-10 15:31:43 +02:00
f8e031ecb9 Merge branch 'master' of github.com:yrutschle/sslh Yves Rutschle 2025-09-10 15:29:59 +02:00
fcfc348aee added proxyprotocol documentation proxyprotocol Yves Rutschle 2025-09-10 15:29:04 +02:00
6905498d60 proxyprotocol on client-side can be removed on server side, and its info is then logged Yves Rutschle 2025-09-10 12:14:41 +02:00
eea50a97fc support for proxy_protocol on incoming (client-side) link Yves Rűtschlé 2025-09-10 09:28:54 +02:00
387ef13f52 fix memory leak when server-side is not yet attached, and potential memory leak when forking hash is full (fix #504) Yves Rutschle 2025-09-04 23:50:17 +02:00
dcb2cc928a import main branch for endpoint tracking Yves Rűtschlé 2025-08-29 20:44:15 +02:00
2106bd6527 added test for client-side proxyprotocol Yves Rűtschlé 2025-08-29 20:39:42 +02:00
12f748fe8e include test for server-side proxyprotocol Yves Rűtschlé 2025-08-29 12:22:30 +02:00
b6c8e116af verify there is space in pid followup table before forking (fix #502) yrutschle 2025-08-27 22:57:04 +02:00
4427a9570f remove noisy logging from harmless interrupted system calls yrutschle 2025-08-27 22:21:51 +02:00
3c237b3c9a have some minimum hash size if no protocols have a max_connections setting yrutschle 2025-08-26 23:22:17 +02:00
2914fe7b5c fix embarassingly wrong error check yrutschle 2025-08-26 22:23:30 +02:00
829a7299e1 remove obsolete debug statement yrutschle 2025-08-26 22:18:21 +02:00
f2e86a3df7 do not log if accept returns EAGAIN yrutschle 2025-08-26 22:17:58 +02:00
f64f0c5ba5 some markdown formating fixes yrutschle 2025-08-20 09:55:43 +02:00
6d1e95cc52 Update podman.md Oleg Stepura 2025-08-24 13:38:24 +02:00
b9de23534e Update podman.md Oleg Stepura 2025-08-24 13:12:34 +02:00
55872427f2 Update podman.md Oleg Stepura 2025-08-24 13:03:19 +02:00
9e2e02d58e print settings include proxyprotocol setting Yves Rűtschlé 2025-08-21 12:39:01 +02:00
00e8a3b084 some markdown formating fixes yrutschle 2025-08-20 09:55:43 +02:00
988f7135ef add link to libev documentation Yves Rűtschlé 2025-08-17 10:47:19 +02:00
0baf23df95 fix probing on partial reception Yves Rűtschlé 2025-08-17 10:31:18 +02:00
81e2d0e2f4 check udp timeouts on all new connections including TCP Yves Rűtschlé 2025-08-15 19:54:51 +02:00
b57b333a39 update documentation for accept() disabling Yves Rűtschlé 2025-08-15 18:49:56 +02:00
effa0f2615 sslh-select now has backup strategy when ulimit -n (file descriptor) is reached Yves Rűtschlé 2025-08-15 18:32:14 +02:00
8769d86c04 EWOULDBLOCK should not cause accept() disable Yves Rűtschlé 2025-08-15 18:29:05 +02:00
663e41e98c remove debug printf Yves Rűtschlé 2025-08-15 10:30:27 +02:00
d97cda1fa5 sslh-ev now has backup strategy when ulimit -f (file descriptor) is reached Yves Rűtschlé 2025-08-15 10:11:20 +02:00
c512fd5279 update doc for connections Yves Rűtschlé 2025-08-13 12:44:45 +02:00
d4de0a8859 update doc for connections Yves Rűtschlé 2025-08-13 12:33:45 +02:00
4f7ba84e9a fix headers Yves Rűtschlé 2025-08-13 12:32:55 +02:00
e1619707f6 check allocation success Yves Rűtschlé 2025-08-13 12:24:15 +02:00
ad34bc5c5a check allocation success Yves Rűtschlé 2025-08-12 23:14:42 +02:00
2975ae88f2 cleanup debug code Yves Rűtschlé 2025-08-12 23:06:47 +02:00
2624877232 sslh-ev: keep track of forked processes Yves Rűtschlé 2025-08-12 23:05:24 +02:00
eb6a3c6724 zero out listen_endpoint data when allocating to ensure counters are 0 at start Yves Rűtschlé 2025-08-12 22:56:38 +02:00
0a0392e7ee refactor: separate pid processing from child signal processing Yves Rűtschlé 2025-08-12 10:17:03 +02:00
3817f2d728 count listen endpoint connections for forked protocols Yves Rűtschlé 2025-08-11 12:13:09 +02:00
860631f910 refactor: move out forking code Yves Rűtschlé 2025-08-11 09:37:57 +02:00
51ba24c1b2 count protocol connections when forking, in sslh-select Yves Rűtschlé 2025-08-11 09:28:43 +02:00
22987e7d94 add max_connections to protocol print settings Yves Rűtschlé 2025-08-11 09:04:29 +02:00
02ea8e7ea4 add host and port to print settings when resolving on forward Yves Rűtschlé 2025-08-11 09:02:13 +02:00
691aa936cc add listen max_connections to print settings Yves Rűtschlé 2025-08-11 08:57:10 +02:00
78a1ed6899 refactor: make hash dump usuable for debugging Yves Rűtschlé 2025-08-10 23:12:24 +02:00
eac34ec36f refactor: consolidate loop init between sslh-select and sslh-ev Yves Rűtschlé 2025-08-10 08:49:02 +02:00
8aa97d7118 Include OpenSUSE's security review yrutschle 2025-08-06 09:55:19 +02:00
8ad8bfdb5d fix link yrutschle 2025-08-06 09:44:15 +02:00

1 2 3 4 5 ...