Commit Graph

  • 0bb3286a7d corrected broken style of connection arrows in the diagram showing the scenarios ftasnetamot 2024-06-06 23:39:27 +02:00
  • 2fd9ea600a Added another file, discussing three possible setup scenarios, which should cover up all setups. ftasnetamot 2024-06-06 22:19:11 +02:00
  • 2406ee8cf5 updated picture, as png export failed in workflow before :-( ftasnetamot 2024-06-07 11:28:19 +02:00
  • d22d70f888 removed the warning regards kernel forwarding, as this is also not necessary. Updated text and picture ftasnetamot 2024-06-07 11:23:14 +02:00
  • 92a6e206a3 corrected broken style of connection arrows in the diagram showing the scenarios ftasnetamot 2024-06-06 23:39:27 +02:00
  • 6526285b14 Added another file, discussing three possible setup scenarios, which should cover up all setups. ftasnetamot 2024-06-06 22:19:11 +02:00
  • f4eea875e2 drastically reduced the configuration by putting all the magic into the interface-configuration ftasnetamot 2024-06-03 21:28:14 +02:00
  • e8934f7a81 some more scenarios, how the simple configuration can be used. ftasnetamot 2024-06-02 22:48:06 +02:00
  • 599a953936 drastically reduced the configuration by putting all the magic into the interface-configuration ftasnetamot 2024-06-03 21:28:14 +02:00
  • 15c857c8d7 some more scenarios, how the simple configuration can be used. ftasnetamot 2024-06-02 22:48:06 +02:00
  • 8271db2d9d Add the description of a simple transparent proxy without the need of iptables/nftables and loopback routing. Explain how all that works. ftasnetamot 2024-06-01 16:33:18 +02:00
  • 66b0c34c5c Add the description of a simple transparent proxy without the need of iptables/nftables and loopback routing. Explain how all that works. ftasnetamot 2024-06-01 16:33:18 +02:00
  • 995916c923 update history Yves Rutschle 2024-05-16 21:34:45 +02:00
  • 799d75413f echosrv.c: fix format '%ld' expects argument of type 'long int', but argument 3 has type 'ssize_t' {aka 'int'} Sergey Ponomarev 2024-05-19 13:57:21 +03:00
  • e8a686cea9 echosrv.c: fix format '%ld' expects argument of type 'long int', but argument 3 has type 'ssize_t' {aka 'int'} Sergey Ponomarev 2024-05-19 13:57:21 +03:00
  • e831b732db update history v2.1.2 Yves Rutschle 2024-05-16 21:34:45 +02:00
  • 8166be1a09 Fix inetd mode (fix #399) Yves Rutschle 2024-05-16 21:30:11 +02:00
  • 684374f353 avoid useless strcpy (fix #440) Yves Rutschle 2024-05-11 17:01:48 +02:00
  • 2234a9ab48 Fix allocation size for interface name to include null-byte kpcyrd 2024-05-06 23:20:54 +02:00
  • de7351fd84 Make basic.cfg more useful (fix #438) Yves Rutschle 2024-04-21 18:20:54 +02:00
  • d2ca706f86 document use of glob for SNI matching (fix #373) yrutschle 2024-04-13 23:38:32 +02:00
  • c859e341aa .gitignore generated files by ./configure Sergey Ponomarev 2024-04-11 00:35:50 +03:00
  • 717fe8fae5 INSTALL.md: reformat Sergey Ponomarev 2024-04-11 00:32:12 +03:00
  • 1ddf45bf52 tcp_protocol_list_init(): allocate once instead of realloc each time Sergey Ponomarev 2024-04-10 00:32:45 +03:00
  • ae7530e33f Fix Narrowing conversion from 'ssize_t' to signed type 'int' is implementation-defined Sergey Ponomarev 2024-04-10 00:17:15 +03:00
  • d0a016221c probe.c: Fix Function 'memcmp' is called without explicitly comparing result Sergey Ponomarev 2024-04-09 23:42:57 +03:00
  • 9286b55702 echosrv.c: Fix Narrowing conversion from 'ssize_t' (aka 'long') to signed type 'int' is implementation-defined Sergey Ponomarev 2024-04-09 23:37:45 +03:00
  • 31c9e19abb echosrv.c: fix Narrowing conversion from ssize_t to int Sergey Ponomarev 2024-04-09 23:17:57 +03:00
  • ef8f3d1419 INSTALL.md fix typo Sergey Ponomarev 2024-04-09 23:17:28 +03:00
  • 2759c223be README.Windows.md fix link Sergey Ponomarev 2024-04-09 23:17:17 +03:00
  • c4b0c5170d .gitignore generated files by ./configure Sergey Ponomarev 2024-04-11 00:35:50 +03:00
  • a5ad17eb19 INSTALL.md: reformat Sergey Ponomarev 2024-04-11 00:32:12 +03:00
  • db10d4108a tcp_protocol_list_init(): allocate once instead of realloc each time Sergey Ponomarev 2024-04-10 00:32:45 +03:00
  • d1c80815b9 Fix Narrowing conversion from 'ssize_t' to signed type 'int' is implementation-defined Sergey Ponomarev 2024-04-10 00:17:15 +03:00
  • c21ae26743 probe.c: Fix Function 'memcmp' is called without explicitly comparing result Sergey Ponomarev 2024-04-09 23:42:57 +03:00
  • 8ce8021571 echosrv.c: Fix Narrowing conversion from 'ssize_t' (aka 'long') to signed type 'int' is implementation-defined Sergey Ponomarev 2024-04-09 23:37:45 +03:00
  • 03767da644 echosrv.c: fix Narrowing conversion from ssize_t to int Sergey Ponomarev 2024-04-09 23:17:57 +03:00
  • b3c770898a
    Ignore opts (#436) Sergey Ponomarev 2024-04-13 12:03:54 +03:00
  • ce8b0aab00 Don't fail if pid file is accessible Sergey Ponomarev 2024-04-11 01:30:37 +03:00
  • a727e7883c Be less strict about args at startup Sergey Ponomarev 2024-04-11 01:22:19 +03:00
  • fee8491a8e remove useless capabilities and use standard environment in systemd yrutschle 2024-04-10 18:39:07 +02:00
  • a80d79fd40 Merge multiple sslh systemd unit configurations Yves Rűtschlé 2024-04-10 18:07:28 +02:00
  • 4b921be69d Merge systemd unit multiple configurations Yves Rűtschlé 2024-04-10 18:06:56 +02:00
  • b5aea4876f INSTALL.md fix typo Sergey Ponomarev 2024-04-09 23:17:28 +03:00
  • 6befdc6857 README.Windows.md fix link Sergey Ponomarev 2024-04-09 23:17:17 +03:00
  • 1799a81079 fix off-by-one error that would sometime ignore the latest connection Yves Rutschle 2024-03-31 22:18:58 +02:00
  • 5f1c1b1b61
    Update README.md (#431) v2.1.1 Sergio C 2024-03-24 08:33:34 +01:00
  • 0a2e5706ac
    Update README.md Sergio C 2024-03-24 01:39:52 +01:00
  • 58783af410 For MacOS, do not have multiple identicat cases in switch Yves Rutschle 2024-03-23 09:53:01 +01:00
  • 1957be1dc3 v.2.1.0 Yves Rutschle 2024-03-13 21:14:52 +01:00
  • ecca78bde7 for MacOS, define unknown symbols to equivalent values Yves Rűtschlé 2024-03-21 18:54:03 +01:00
  • b94060ad76 undef FD_SETSIZE to avoid compiler warning upon redefine Yves Rűtschlé 2024-03-15 15:09:39 +01:00
  • c43f6daf03 v.2.1.0 v2.1.0 Yves Rutschle 2024-03-13 21:14:52 +01:00
  • 736b108a75 dont log error when remote client drops connection on Windows (fix #427) Yves Rűtschlé 2024-03-13 16:58:09 +01:00
  • 7ca567fcd9 clarify the difficulty of transparent proxying Yves Rutschle 2024-03-12 22:07:17 +01:00
  • 3117c15fbd when sslh-fork accept() fails with some errors, retry accept instead of dying Yves Rutschle 2024-01-11 21:32:39 +01:00
  • e428fc505c prevent children from continuing the parent's work in case of failure Yves Rutschle 2024-01-11 21:24:19 +01:00
  • f7f712341f check accept actually succeeded v1.23.1 v1.23 Yves Rutschle 2024-01-11 20:50:09 +01:00
  • ab37ef8ecf Validate accept() return to prevent crash in start_shoveler Daniel Winkler 2024-01-10 13:54:47 -08:00
  • 4dfb4d300a add default LANDLOCK_ACCESS_FS_REFER define for Ubuntu (fix #420) Yves Rutschle 2024-01-06 11:56:57 +01:00
  • 39184b5622 enable landlock access to files to allow forking and name resolution Yves Rutschle 2024-01-05 13:21:55 +01:00
  • 940461de18 check name resolution error to avoid segfault Yves Rutschle 2024-01-05 11:15:53 +01:00
  • 6f949419d1 fix comment to reflect reality Yves Rutschle 2024-01-05 10:34:29 +01:00
  • dab5df7409 clarify where the name resolution error comes from Yves Rutschle 2024-01-05 10:32:41 +01:00
  • 402ca5219b fix warnings on sockaddr storage Yves Rutschle 2024-01-04 23:22:44 +01:00
  • 046401148d add ./configure stage to docker build Yves Rutschle 2024-01-04 23:04:26 +01:00
  • 780e536aeb use autoconf to crete build scripts depending on landlock presence (fix #417) Yves Rutschle 2024-01-04 22:45:10 +01:00
  • 591cfc9a8a Reintroduce --ssl as alias to --tls in maintenance branch for 1.x (fix #416) v1.23.0 Yves Rutschle 2024-01-02 21:47:00 +01:00
  • ed0ab12a16 reintroduce --ssl as alias to --tls Yves Rutschle 2024-01-02 21:38:23 +01:00
  • b65f1e8b26 Merged Landlock feature Yves Rutschle 2023-12-09 14:13:07 +01:00
  • 91b649daa0
    Set image tag to use github in docker-compose example (#414) Konstantin 2023-11-19 20:43:13 +01:00
  • e8a0e974fd
    Set image tag to use github in docker-compose example Konstantin 2023-11-19 16:51:45 +01:00
  • 7499c26e9e
    Cleanup error checking logic in bind_peer() (#412) Latchezar Tzvetkoff 2023-11-15 23:02:21 +02:00
  • 90a55b6f9d document Windows build and docker repositories Yves Rutschle 2023-11-15 21:49:44 +01:00
  • 1f66e2e093 add sslh-ev Yves Rutschle 2023-11-15 21:46:42 +01:00
  • f5b518102d Cleanup error checking logic in bind_peer() Latchezar Tzvetkoff 2023-11-06 21:37:13 +02:00
  • 92d2326016
    Merge pull request #408 from pcrow/master Yves Rutschle 2023-10-07 21:15:58 +02:00
  • 81eed9d56a Transparent mode in a multi-stage chain will fail after the first step because the (ip,port) is already bound. With this change, the bind is retried with a different port to at least keep the same IP address, which for most uses is all that is needed. I've tested this on my own system where sslh is used downstream from stunnel, with both in transparent mode. Preston Crow 2023-10-06 17:50:25 -04:00
  • 490a44723b fix install to build sslh-fork (fix #407) Yves Rutschle 2023-10-05 11:53:09 +02:00
  • 23fb1eba6f remove obsolete intermediate sslh target Yves Rutschle 2023-10-03 09:34:38 +02:00
  • be66848e2d
    Merge pull request #406 from ffontaine/master Yves Rutschle 2023-10-03 09:32:42 +02:00
  • 3e93c1d43d Makefile: add USE_LIBEV Fabrice Fontaine 2023-10-01 18:45:53 +02:00
  • 1b26eb50a5 Changelog for resolve_on_forward fix v2.0.1 Yves Rutschle 2023-09-24 09:25:52 +02:00
  • e0f15a31b7 resolve name at connection time for UDP too Yves Rutschle 2023-09-12 21:39:51 +02:00
  • c2551c011e update to Conf::Libconfig 1.0.3 API Yves Rutschle 2023-09-12 21:35:23 +02:00
  • e2c3ed61a8 update to Conf::Libconfig 1.0.3 API Yves Rutschle 2023-09-12 21:35:10 +02:00
  • 1b0c6d0b8d add resolve_on_forward in tests Yves Rutschle 2023-09-06 18:01:52 +02:00
  • 0562eb4b07 fix resolve_on_forward use (fix #405) Yves Rutschle 2023-09-06 15:48:13 +02:00
  • 93600d1fb1
    Merge pull request #299 from amake/patch-1 v2.0.0 v2.0 Yves Rutschle 2023-08-31 15:26:42 +02:00
  • 04f258e705
    Merge branch 'master' into patch-1 Yves Rutschle 2023-08-31 15:26:22 +02:00
  • 1fb888bbf2 remove magic numbers with correct sizeof Yves Rutschle 2023-08-31 15:18:22 +02:00
  • 1f0cab2aee
    Merge pull request #342 from utoni/fix/ovpn-probe-read-overflow Yves Rutschle 2023-08-31 15:15:50 +02:00
  • ff9328fa6c Merge branch 'utoni-fix/cppcheck-complains' Yves Rutschle 2023-08-31 15:13:57 +02:00
  • e941e8dd2e fix cppcheck complains Yves Rutschle 2023-08-31 15:10:53 +02:00
  • 8930ec395e Initial support for the landlock LSM Yves Rűtschlé 2023-08-29 17:05:41 +02:00
  • 54fe4b2f47
    Merge pull request #401 from rnhmjoj/master Yves Rutschle 2023-08-26 21:32:22 +02:00
  • 33129481cf
    fix handling of IPv6 UDP connections rnhmjoj 2023-08-22 11:23:55 +02:00
  • 4cc0867753 remove dependency of sslh-conf.c to sslhconf.cfg (fix #283) Yves Rűtschlé 2023-08-13 10:38:39 +02:00
  • 4728730abc
    Merge pull request #392 from klementng/docker/transparent-patch Yves Rutschle 2023-08-10 08:21:39 +02:00
  • 9e7b4b751f sync and resolve merge conflict clement 2023-08-09 23:36:01 +08:00