summaryrefslogtreecommitdiffstats
path: root/runtime/nsd_gtls.c
Commit message (Collapse)AuthorAgeFilesLines
...
* added first rough ability to authenticate the server against its certificateRainer Gerhards2008-05-161-3/+70
| | | | | | | | | | This is very experimental and needs some more work. It probably even segfaults - but the base code is there and running. The rest is refinement. While working on this, I did these two bugfixes: - bugfix: small mem leak in omfwd on exit (strmdriver name was not freed) - bugfix: $ActionSendStreamDriver had no effect
* Merge branch 'master' into ietf-tlsRainer Gerhards2008-05-161-1/+7
|\
| * added fromhost-ip properties and some bugfixesRainer Gerhards2008-05-161-1/+1
| | | | | | | | | | | | | | | | | | | | - bugfix: TCP input modules did incorrectly set fromhost property (always blank) - bugfix: imklog did not set fromhost property - added "fromhost-ip" property - added "RSYSLOG_DebugFormat" canned template - bugfix: hostname and fromhost were swapped when a persisted message (in queued mode) was read in
| * added TODO itemRainer Gerhards2008-05-151-1/+1
| |
| * bugfix: TLS server went into an endless loop in some situations.Rainer Gerhards2008-05-151-0/+6
| | | | | | | | Thanks to Michael Biebl for reporting the problem.
* | client provides x.509 and server prints fingerprintRainer Gerhards2008-05-151-6/+31
|/
* server's X509 cert fingerprint is obtained by client on connectRainer Gerhards2008-05-081-187/+47
|
* added a bit of doc (at least something...)Rainer Gerhards2008-05-081-1/+233
|
* bugfix: gtls netstram driver did not specify threading modelRainer Gerhards2008-05-081-3/+7
| | | | (could possibly lead to "interesting effects" ;))
* limited number of unavoidable compiler warnings when compiling with GnuTLSRainer Gerhards2008-05-071-2/+15
|
* added missing includes (noticed under SuSe Linux)Rainer Gerhards2008-05-061-0/+1
|
* final touches for 3.19.0v3.19.0Rainer Gerhards2008-05-061-1/+0
|
* trying to remove compiler warningsRainer Gerhards2008-05-051-2/+2
|
* made default certificate file locations configurableRainer Gerhards2008-05-051-7/+21
| | | | | | - added $DefaultNetstreamDriverCAFile config directive - added $DefaultNetstreamDriverCertFile config directive - added $DefaultNetstreamDriverKeyFile config directive
* made imgssapi work with new netstrm driver modelRainer Gerhards2008-05-051-1/+4
| | | | | | | | | there were a couple of things where imgssapi was not compatible with the new encapsulation. I did a somewhat dirty fix. The real solution would be to turn gssapi functionality into a netstream driver, which is too much for now (after all, we want to release some time AND we need to have the code mature in practice before we go for the next target...).
* added $InputTCPServerStreamDriverMode config directiveRainer Gerhards2008-04-301-3/+3
|
* restructured netstrm driver layerRainer Gerhards2008-04-301-0/+3
| | | | | | | the new structure prevents repetitive loads and unloads of driver files; it also has less overhead The "select" and regular driver are now contained in a single file.
* server handshake now works with nonblocking socketsRainer Gerhards2008-04-301-1/+8
|
* made plain tcp syslog via TLS work on the serverRainer Gerhards2008-04-301-5/+122
| | | | ... but so far only in blocking mode
* added $ActionSendStreamDriverMode config directiveRainer Gerhards2008-04-281-3/+27
|
* fixed memory leaksRainer Gerhards2008-04-281-3/+4
|
* made gtls server driver work in plain tcp modeRainer Gerhards2008-04-251-6/+85
|
* added select() driver for GnuTlsRainer Gerhards2008-04-241-17/+5
|
* made this compile with the new abstracted socket server callsRainer Gerhards2008-04-241-9/+2
| | | | | undid some invalid changes during merge plus did a few wrappers. Compiles, but does not yet work.
* improved TLS session closureRainer Gerhards2008-04-181-5/+22
|
* first working TLS-enabled plain TCP senderRainer Gerhards2008-04-181-5/+112
| | | | | implemented a first working version of a TLS-enabled plain TCP sender (but, of course, the implementation is insecure as it is)
* set stage for TLS client implementationRainer Gerhards2008-04-181-0/+259