Commit Graph

  • 567e099361 Keep a verify callback alive while a handshake runs it yhirose 2026-10-16 23:52:15 -04:00
  • c52881cb1f Keep client certificates required after setting a verify callback yhirose 2026-10-16 23:52:15 -04:00
  • bb13a3bc76 Rotate ticket keys of the size BoringSSL and LibreSSL take yhirose 2026-10-16 23:52:15 -04:00
  • a1d4ccedea Reset the client's TLS error per attempt and read it under the request lock Claude 2026-10-17 02:40:23 +00:00
  • 28741cb9d1 Keep the TLS error behind a failed read or write in the client's Result Claude 2026-10-17 01:54:23 +00:00
  • 9a08b01ed7 Turn off session resumption on wolfSSL servers verifying clients yhirose 2026-10-16 21:38:40 -04:00
  • a7fce92ed0 Let a client resume its session with an OpenSSL mTLS server yhirose 2026-10-16 21:38:40 -04:00
  • 489fe8e504 Give a redirect client the CAs its client trusts yhirose 2026-10-16 21:38:40 -04:00
  • 9724ea6b2e Skip the CN next to a DNS SAN on Mbed TLS and wolfSSL yhirose 2026-10-16 21:38:40 -04:00
  • bf08ec763c Sign the request-target sent in a Digest uri yhirose 2026-10-16 21:38:40 -04:00
  • f29721c7d8 Treat 0 as no limit for the remaining limits yhirose 2026-10-16 21:38:40 -04:00
  • ad6c851d19 Bound an SSE stream by event only yhirose 2026-10-16 21:38:40 -04:00
  • 35342285a0 Serve files without mapping them on POSIX yhirose 2026-10-16 21:38:40 -04:00
  • a10338a6ee Unescape quoted Content-Type parameters and escape backslashes yhirose 2026-10-16 21:38:40 -04:00
  • aa0a588ed5 Answer WebSocket control frames from one place yhirose 2026-10-16 21:38:40 -04:00
  • fb439bda2e Split authentication challenges with split_unquoted yhirose 2026-10-16 21:38:40 -04:00
  • 079f2176af Put Params before the fragment of a client path yhirose 2026-10-16 21:38:40 -04:00
  • f18f0b7576 Close the client connection after faulty response framing yhirose 2026-10-16 21:38:40 -04:00
  • b4ef313cc7 Accept a write error for a client rejected after the TLS 1.3 handshake Claude 2026-10-17 01:04:13 +00:00
  • 9a3c1febee Stop copying CA certificates on Mbed TLS yhirose 2026-10-16 19:29:38 -04:00
  • 6529de1a91 Declare tls::set_verify_callback() for the split test build Claude 2026-10-16 23:29:35 +00:00
  • 43c9c6ddf3 Frame response bodies in one place yhirose 2026-10-16 19:13:12 -04:00
  • bc837b87fc Bound the request head by the read timeout as a whole yhirose 2026-10-16 19:13:03 -04:00
  • 8f21292d16 Tidy the client certificate test helpers Claude 2026-10-16 23:02:50 +00:00
  • 589b028022 Build the client-cert-still-required tests on the existing helpers Claude 2026-10-16 22:48:39 +00:00
  • aa3aeb8ec3 Name the Mbed TLS verify-mode helper like the other backends Claude 2026-10-16 22:25:51 +00:00
  • 300c084d6f Derive the TLS verify mode from one place per backend Claude 2026-10-16 21:12:47 +00:00
  • ae169c6253 Address review of the audit fixes yhirose 2026-10-16 16:39:08 -04:00
  • ceedf6ac22 Fuzz the buffered path of the line reader yhirose 2026-10-16 16:39:00 -04:00
  • 66266b80c6 Document regex route, file handler and WebSocket Origin caveats yhirose 2026-10-16 16:39:00 -04:00
  • 44658e660b Read served files with pread yhirose 2026-10-16 16:39:00 -04:00
  • 3782a9f1cd Document what follows a cross-host redirect yhirose 2026-10-16 16:39:00 -04:00
  • f361a08f67 Add certificate and session verifiers to WebSocketClient yhirose 2026-10-16 16:39:00 -04:00
  • 7c44a7a5e1 Compare extensions, header names and media types without case yhirose 2026-10-16 16:39:00 -04:00
  • fcf7568230 Complete server certificate updates on every backend yhirose 2026-10-16 16:39:00 -04:00
  • 314e5577b8 Match certificate names as X509_check_host does yhirose 2026-10-16 16:39:00 -04:00
  • 07c3e8c9e0 Set the client verify mode under the context lock yhirose 2026-10-16 16:39:00 -04:00
  • 0fe883da97 Document when an SSL client loads its CA certificates yhirose 2026-10-16 16:39:00 -04:00
  • 7ce6c6438a Validate a WebSocket Close before echoing it yhirose 2026-10-16 16:39:00 -04:00
  • 162b87f325 Fail a refused CONNECT instead of returning the proxy's answer yhirose 2026-10-16 16:39:00 -04:00
  • ce7ecb633b Skip every interim response, with its header fields yhirose 2026-10-16 16:39:00 -04:00
  • 5d10305218 Close the connection after an early answer to Expect: 100-continue yhirose 2026-10-16 16:39:00 -04:00
  • aaccde2122 Reject userinfo and backslashes in a URL authority yhirose 2026-10-16 16:39:00 -04:00
  • eeaae4bc3c Serve no file whose path cannot be resolved yhirose 2026-10-16 16:39:00 -04:00
  • 455166314b Keep a %u escape that is not a character yhirose 2026-10-16 16:39:00 -04:00
  • 3420ba8fca Read the request line strictly yhirose 2026-10-16 16:39:00 -04:00
  • 58957ae4da Close the connection after an ambiguous Transfer-Encoding yhirose 2026-10-16 16:39:00 -04:00
  • 64bebd3b2b Honor quoted-pairs in parameter values yhirose 2026-10-16 16:39:00 -04:00
  • d5851d7e89 Resume the multipart header search where it stopped yhirose 2026-10-16 16:39:00 -04:00
  • cadcc425b8 Bound the size of an SSE event yhirose 2026-10-16 16:39:00 -04:00
  • f5e11024da Bound each WebSocket fragment by what is left of the limit yhirose 2026-10-16 16:39:00 -04:00
  • 672255619b Do not reserve a response body by its claimed length yhirose 2026-10-16 16:39:00 -04:00
  • b270564c18 Keep a Client usable when its URL cannot be used yhirose 2026-10-16 16:39:00 -04:00
  • 0116be0a2b Treat a zero WebSocket payload limit as none yhirose 2026-10-16 16:39:00 -04:00
  • 194f392417 Treat a zero payload limit as none when decompressing a stream yhirose 2026-10-16 16:39:00 -04:00
  • d41d5586cf Remove the unused ClientImpl::copy_settings yhirose 2026-10-16 16:39:00 -04:00
  • 82e28aa4f3 Hash case-insensitive keys in a loop yhirose 2026-10-16 16:39:00 -04:00
  • a445ed23bf Tidy the Mbed TLS verify callback after the per-session change Claude 2026-10-16 19:57:26 +00:00
  • f6420979b2 Drop the redundant has_verify_callback flag from the wolfSSL context Claude 2026-10-16 19:39:00 +00:00
  • 6acdc6255d Compare names as strings instead of by hash yhirose 2026-10-16 14:57:01 -04:00
  • 5d10095944 Install one verify callback on every Mbed TLS session Claude 2026-10-16 18:57:00 +00:00
  • 65dbca0afe Merge origin/master into claude/sweet-keller-2fba4t Claude 2026-10-16 18:23:37 +00:00
  • 5056242a4b Simplify per-context verify callback bookkeeping Claude 2026-10-16 18:21:18 +00:00
  • 0c583ac9b5 Drop no-op mbedtls_ssl_conf_verify reset in set_verify_callback Claude 2026-10-16 18:15:10 +00:00
  • 9f6dcf1230 Carry the server certificate verifier over to the redirect client (#2634) yhiroseandClaude Opus 5.5 2026-10-16 14:12:01 -04:00
  • e225d1876b Store the TLS verify callback per context instead of thread_local Claude 2026-10-16 17:25:43 +00:00
  • 9c51a0effa Wait for handshakes before replacing a server's certificates yhirose 2026-10-16 12:49:22 -04:00
  • 41fada8c6e Bound a TLS handshake by its timeout as a whole yhirose 2026-10-16 12:49:22 -04:00
  • d78a3cbb82 Carry the CA store and session verifier over to the redirect client (#2632) metsw24-max 2026-10-16 22:08:09 +05:30
  • 2b66aa65e1 Keep a client's limits and TLS checks across redirects yhirose 2026-10-16 12:02:26 -04:00
  • 344311c1c3 Grow a WebSocket payload only as it arrives yhirose 2026-10-16 10:30:34 -04:00
  • 2e278fd6e9 Parse status lines without std::regex yhirose 2026-10-16 09:56:31 -04:00
  • b917676861 Declare set_file_content_provider for the split build yhirose 2026-10-16 09:56:19 -04:00
  • fc0e8230ba Close the connection after a partly read request body yhirose 2026-10-16 05:32:29 -04:00
  • c11d95b26b Pass the session handle to wolfSSL verify callbacks yhirose 2026-10-16 04:52:14 -04:00
  • 6fc677444f Keep TLS verify callbacks per context yhirose 2026-10-16 04:49:14 -04:00
  • e3749669bc Keep a single content source in a Response yhirose 2026-10-16 03:58:42 -04:00
  • 16f9d4a68d Avoid getaddrinfo_a under ThreadSanitizer (#2631) Cosmin Polifronie 2026-10-16 00:53:29 +03:00
  • 4a1700cb5e Use fill_random_bytes in random_string yhirose 2026-10-14 16:13:28 -04:00
  • c03af246fc Use a strong entropy source for the WebSocket masking key (#2629) metsw24-max 2026-10-15 01:39:36 +05:30
  • 2c918f27ee Redirect a directory request with a relative Location (#2630) yhirose 2026-10-14 16:00:03 -04:00
  • 924b5cecf0 Fix redirect for mounted folders (#2628) mervindejong 2026-10-14 21:35:27 +02:00
  • c419c904da Release v0.61.0 v0.61.0 yhirose 2026-10-13 22:56:02 -04:00
  • 878ba41099 Wait for the reconnect in the SSE retry test instead of sleeping yhirose 2026-10-13 09:07:56 -04:00
  • 941745c33d Send proxy Basic authentication when one credential is empty yhirose 2026-10-12 22:32:08 -04:00
  • 11daa99c86 Stop at the last match when getting a value by index yhirose 2026-10-12 21:27:27 -04:00
  • cbaf751da1 Ignore quoted-strings when parsing an Accept header yhirose 2026-10-12 22:59:47 -04:00
  • 33d84a12b6 Compare the Range unit case-insensitively yhirose 2026-10-12 19:37:07 -04:00
  • 5107381963 Fix the RFC reference in the Host validation test yhirose 2026-10-11 23:44:07 -04:00
  • 0acbee16dc Reject an ambiguous or invalid Host in a request yhirose 2026-10-11 23:39:50 -04:00
  • 1f12bbaabb Treat a bare CR as an SSE line ending yhirose 2026-10-11 23:05:46 -04:00
  • 5189edc52e Ignore an SSE id that cannot be sent as Last-Event-ID yhirose 2026-10-11 23:05:38 -04:00
  • fee592c2c2 Ignore a leading UTF-8 BOM in an SSE stream yhirose 2026-10-08 21:07:40 -04:00
  • 885ed54b10 Unify spacing and wording in the Japanese docs pages yhirose 2026-10-08 09:27:55 -04:00
  • c95d799180 Polish the wording of the updated docs pages yhirose 2026-10-08 07:40:45 -04:00
  • bef278e0d2 Fix docs pages that no longer match the code yhirose 2026-10-08 00:46:05 -04:00
  • 05f7478523 Fix README samples and statements that no longer match the code yhirose 2026-10-08 00:40:16 -04:00
  • f6aee694e2 Log the response length for static files in the docker server yhirose 2026-10-08 00:39:01 -04:00
  • 8aa547e4a1 Wake a blocked WebSocket read when the pong timeout fires yhirose 2026-10-08 00:38:51 -04:00
  • 84ff13ec47 Treat a payload max length of 0 as unlimited on every read path yhirose 2026-10-08 00:38:32 -04:00