rdelaage/gmid
1
0
Fork 0
mirror of https://github.com/omar-polo/gmid.git synced 2024-07-14 17:49:19 +02:00
Code Issues Packages Projects Releases Wiki Activity
1,367 Commits 2 Branches 31 Tags 6.6 MiB
a91b0892bf
Commit Graph

1367 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Omar Polo
a91b0892bf explain why we disable runtime tests on macos 2024-05-29 08:12:51 +00:00
Omar Polo
610a4666cd regress: use the new gg -q to reduce the blabbering 2024-05-29 08:09:25 +00:00
Omar Polo
2f4926259f gg: add -q to avoid printing "Server says" 2024-05-29 08:08:36 +00:00
Omar Polo
cd12ad1132 pretty-print the socket address at configuration parsing time 
saves a getnameinfo(NI_NUMERICHOST) at runtime, even if it's pretty
cheap.
 2024-05-29 08:03:59 +00:00
Omar Polo
b2782022c9 add regress that hit gmid via a raw IPv4 address 2024-05-29 07:54:03 +00:00
Omar Polo
1ef0cd0cdb relax the SNI requirement 
There are legitimate cases where SNI can't be used, for example
when connecting via an IPv6 address, so don't rejects those requests.
Instead, fill the requested domain with the address (literal) of
the socket they're connected to and attempt to match on it.

This possibly still incur in a "won't proxy" error if the client
then requests a different hostname.

See the github issue https://github.com/omar-polo/gmid/issues/25
 2024-05-29 07:52:13 +00:00
Omar Polo
42e2af25ae github: add workflow to build images for ghcr.io 2024-05-27 15:16:38 +00:00
Omar Polo
89dca7ab54 s/MIN/MINIMUM/g 2024-05-25 17:44:35 +00:00
Omar Polo
359c56ce35 contrib/gmid.service: remove User and Group 
May cause weird errors (status=216/GROUP) on some distros, and
running as root is already the default, so remove the two lines.
Reported by and debugged together with leandro del Flug, thanks!
 2024-04-27 17:12:09 +00:00
Omar Polo
c2dcb5fa6e contrib/gmid.service: start as root by default 
Various techniques used by gmid are effective only when the daemon
is started as root.  Strongly suggest to do so by switching the
sample configuration.  This way, provided that a local user is
created as well, the chroot configuration will work out-of-the-box
and the TLS certificates can be readable only by root.
 2024-04-27 16:17:37 +00:00
Omar Polo
5d12e6a104 improve the description for -f 2024-04-27 16:10:46 +00:00
Omar Polo
0d8eb9b60c typo: semicolors -> semicolons 2024-04-11 09:42:15 +00:00
Omar Polo
5864f3ce3c set next version 2024-04-04 19:28:14 +00:00
Omar Polo
9536c8ca63 prepare release 2.0.1 2024-04-04 19:16:33 +00:00
Omar Polo
40b71b6861 changelog for 2.0.2 2024-04-04 19:07:04 +00:00
Omar Polo
42235e3fc2 add a test for the config dumping 2024-04-04 13:07:09 +00:00
Omar Polo
f53f5e5fe1 fix config dumping (-nn) handling 
with the privsep rework the config dumping was unadvertitely broken,
it prints the content of the key itself.
 2024-04-04 11:22:06 +00:00
Omar Polo
40ea7b163e use -Werror=implicit-function-declaration for function detection 
the previous -Werror triggers too easily: on NixOS for example the
FORTIFY_SOURCE #warning about a missing optimization level breaks all
the checks when using -O0 (which is the default for non-release builds).
 2024-04-03 14:03:42 +00:00
Omar Polo
be265175c6 fix landlock test 
include stddef.h for size_t
 2024-04-03 14:01:34 +00:00
Omar Polo
8aba5d8b21 remove dead code 2024-03-12 14:10:36 +00:00
Omar Polo
7c83689428 update mac CI target to sonoma 2024-03-06 10:11:17 +00:00
Omar Polo
248fb833f9 fix `log access path' with chroot 
We should open the log file inside the chroot; missed in
4acf495f41.

See https://github.com/omar-polo/gmid/issues/24
 2024-03-03 15:43:58 +00:00
Omar Polo
0ed763b03d revert 9f1cce3d0e 
we actually should open the log file in the chroot, the bug is in
the code.
 2024-03-03 15:42:06 +00:00
Omar Polo
9f1cce3d0e fix log access doc: path is not relative to the chroot 
Reported by Colin Henein, thanks!

See https://github.com/omar-polo/gmid/issues/24
 2024-03-03 15:27:03 +00:00
Omar Polo
8f543d941e add a note regarding the usage of the bundled libtls 
See https://codeberg.org/op/gmid/issues/2
 2024-02-02 08:24:28 +00:00
Omar Polo
acf244c516 sync changelog 2024-01-30 09:39:07 +00:00
Anna “CyberTailor”
53ad458e22 contrib/vim: fix indent 2024-01-30 09:35:37 +00:00
Omar Polo
bb5a25d287 rename the @common_opt macro back to @common 
now common is no longer a reserved keyword
 2024-01-30 09:31:09 +00:00
Omar Polo
f862d389ff turn log styles into strings from yacc point of view 
having styles as reserved keywords means that variables / macros can't
be called `common', `condensed', etc...  which is not great and not
obvious either.

Instead, let's keep the log styles as strings and match on them.  This
also allows to have a slightly better error message in case of a typo.

See: https://codeberg.org/op/gmid/issues/1
 2024-01-30 09:30:50 +00:00
Omar Polo
574f71f7a3 remove stray space 2024-01-30 09:28:54 +00:00
Omar Polo
ebe2e54900 tweak and update freebsd task 2024-01-26 17:02:08 +00:00
Omar Polo
ddb089c157 rework the grammar so that ; is accepted after variables and options 
See Codeberg issue #1.
 2024-01-26 16:54:58 +00:00
Omar Polo
3524375abe add a test that uses @-style macros 
See Codeberg issue #1.
 2024-01-26 15:34:46 +00:00
Omar Polo
fe37d79200 change the default PUBKEY for the verify-release target 
doesn't play well with minor releases such as 2.0.1 since for them
I reuse the 2.0 key.
 2024-01-24 15:21:19 +00:00
Omar Polo
33a5425235 set next version 2024-01-24 15:13:35 +00:00
Omar Polo
cd5e264f9d prepare release 2.0.1 2024-01-24 15:06:08 +00:00
Omar Polo
0baf7066ac changelog for 2.0.1 2024-01-24 15:06:08 +00:00
Omar Polo
83a2644bfb convert remaining code to the imsg getters 
Now gmid doesn't touch anymore the internals of the imsg structs.
 2024-01-21 19:40:06 +00:00
Omar Polo
4f3b85e6d7 convert the remaining bit of crypto.c to the ibuf_* APIs 2024-01-21 19:30:43 +00:00
Omar Polo
2a822b03ba please macos 
for some reason that's not entirely clear to me, __dead doesn't
seem to work on macos, so clang thinks datalen is used un-initialized.

meh
 2024-01-21 12:53:01 +00:00
Omar Polo
3f16db6263 update imsg test: gmid now requires the new API too 2024-01-21 12:35:46 +00:00
Omar Polo
561b9f0067 convert crypto.c to the new imsg API 2024-01-21 12:33:33 +00:00
Omar Polo
aa2cb5c274 rename ibuf to imsgbuf in crypto 
soon we'll be using a struct ibuf and it'll be confusing.
 2024-01-21 12:27:42 +00:00
Omar Polo
63e6b0bd0c remove proc_forward_imsg since it's unused 2024-01-21 12:23:28 +00:00
Omar Polo
6dec2ad700 convert most of gmid to the new imsg APIs 
Makes parsing and handling of imsgs simpler / clearer.  only crypto.c
is left as-is.
 2024-01-21 12:23:28 +00:00
Omar Polo
b03e976aa2 convert to use imsg_get_fd() 
since proc_forward_imsg() never forwards a file descriptor (it's
never called actually) just use -1 there.
 2024-01-21 12:23:16 +00:00
Anna “CyberTailor”
6bce8180d9 configure: fix --mandir handling 2024-01-14 10:30:06 +00:00
Omar Polo
20fa7cded6 ops; pretty big omission among the breaking changes 2024-01-11 16:32:18 +00:00
Omar Polo
2865452c40 typo 2024-01-11 16:26:50 +00:00
Omar Polo
1ee636a45c start the 2.1 release cycle 2024-01-11 16:24:35 +00:00