Commit Graph

1395 Commits

Author SHA1 Message Date
Omar Polo
fcf3f1fa9a ...complete the sentence 2024-06-06 18:10:06 +00:00
Omar Polo
3b2ee15a6b fix previous; was causing a shift/reduce conflict 2024-06-06 18:00:23 +00:00
Omar Polo
235f5e70ee regress: add a test for comments and blanks at the start of the file 2024-06-06 17:38:30 +00:00
Omar Polo
471cae7e8f fix parser: empty lines are allowed 2024-06-06 17:31:36 +00:00
Omar Polo
15acd9c6ec site: log for 2.0.4 2024-06-06 14:49:12 +00:00
Omar Polo
a4ffa32f0e -current again 2024-06-06 14:14:27 +00:00
Omar Polo
4864061c16 prepare release 2.0.4 2024-06-06 14:10:58 +00:00
Omar Polo
9089c18ac9 changelog for 2.0.4 2024-06-06 14:10:57 +00:00
Omar Polo
a1562e847f sync file list 2024-06-06 14:10:57 +00:00
Omar Polo
69cfd0a304 add a todo 2024-06-06 13:53:09 +00:00
Omar Polo
848189f10a attempt to deal with the portability fiasco of strnvis(3) 2024-06-06 13:43:12 +00:00
Omar Polo
1bc73c3bcb libtls: add missing include 2024-06-06 13:43:12 +00:00
Omar Polo
6174e65dbe add a nice error message in case the `cgi' option is present
was removed with gmid 2.0 but to ease the migration a friendly error
message is more useful than a "syntax error".
2024-06-05 15:18:10 +00:00
Omar Polo
c38417e32d site: fix syntax for 2.0.2 changelog 2024-06-04 17:33:16 +00:00
Omar Polo
e030968718 site: add changelog for 2.0.3 2024-06-04 17:32:53 +00:00
Omar Polo
5e71e44d26 -current again 2024-06-04 11:38:48 +00:00
Omar Polo
4d207d1050 prepare release 2.0.3 2024-06-04 11:33:54 +00:00
Omar Polo
b6eb184a95 changelog for 2.0.3 2024-06-04 11:32:21 +00:00
Omar Polo
d08e2664fc bump date 2024-06-03 16:24:52 +00:00
Omar Polo
0a4a979ccb regress: add a check for `fastcgi off' handling across locations
Based on the bug report from Alex, thanks!
2024-06-03 16:14:40 +00:00
Omar Polo
da834b5803 fix `fastcgi off' handling
When a matching location has a `fastcgi off' directive, we should
honour that and stop searching for further location which may have
a `fastcgi' directive.

Bug reported by Alex // nytpu, thanks!
2024-06-03 16:14:09 +00:00
Omar Polo
c9ea70a36f regress: add test_ipv6_server 2024-05-29 09:06:45 +00:00
Omar Polo
7c723cf05f regress: add a knob to disable test_ipv6_addr
at least on the CI is failing with "can't connect to ::1:10965:
Address not available" which suggests IPv6 is broken there.
2024-05-29 09:05:06 +00:00
Omar Polo
b5dd7091ad typo 2024-05-29 08:58:12 +00:00
Omar Polo
5b549c2805 regress: rename ipv4 test and add another with ipv6 2024-05-29 08:56:10 +00:00
Omar Polo
b00f71ba97 iri: add support for raw IPv6 addresses 2024-05-29 08:52:25 +00:00
Omar Polo
6ff8de1f8a gg: unbreak -n 2024-05-29 08:37:39 +00:00
Omar Polo
9f675805d0 regress: run test_ip_addr with host=127.0.0.1 2024-05-29 08:33:36 +00:00
Omar Polo
a91b0892bf explain why we disable runtime tests on macos 2024-05-29 08:12:51 +00:00
Omar Polo
610a4666cd regress: use the new gg -q to reduce the blabbering 2024-05-29 08:09:25 +00:00
Omar Polo
2f4926259f gg: add -q to avoid printing "Server says" 2024-05-29 08:08:36 +00:00
Omar Polo
cd12ad1132 pretty-print the socket address at configuration parsing time
saves a getnameinfo(NI_NUMERICHOST) at runtime, even if it's pretty
cheap.
2024-05-29 08:03:59 +00:00
Omar Polo
b2782022c9 add regress that hit gmid via a raw IPv4 address 2024-05-29 07:54:03 +00:00
Omar Polo
1ef0cd0cdb relax the SNI requirement
There are legitimate cases where SNI can't be used, for example
when connecting via an IPv6 address, so don't rejects those requests.
Instead, fill the requested domain with the address (literal) of
the socket they're connected to and attempt to match on it.

This possibly still incur in a "won't proxy" error if the client
then requests a different hostname.

See the github issue https://github.com/omar-polo/gmid/issues/25
2024-05-29 07:52:13 +00:00
Omar Polo
42e2af25ae github: add workflow to build images for ghcr.io 2024-05-27 15:16:38 +00:00
Omar Polo
89dca7ab54 s/MIN/MINIMUM/g 2024-05-25 17:44:35 +00:00
Omar Polo
359c56ce35 contrib/gmid.service: remove User and Group
May cause weird errors (status=216/GROUP) on some distros, and
running as root is already the default, so remove the two lines.
Reported by and debugged together with leandro del Flug, thanks!
2024-04-27 17:12:09 +00:00
Omar Polo
c2dcb5fa6e contrib/gmid.service: start as root by default
Various techniques used by gmid are effective only when the daemon
is started as root.  Strongly suggest to do so by switching the
sample configuration.  This way, provided that a local user is
created as well, the chroot configuration will work out-of-the-box
and the TLS certificates can be readable only by root.
2024-04-27 16:17:37 +00:00
Omar Polo
5d12e6a104 improve the description for -f 2024-04-27 16:10:46 +00:00
Omar Polo
0d8eb9b60c typo: semicolors -> semicolons 2024-04-11 09:42:15 +00:00
Omar Polo
5864f3ce3c set next version 2024-04-04 19:28:14 +00:00
Omar Polo
9536c8ca63 prepare release 2.0.1 2024-04-04 19:16:33 +00:00
Omar Polo
40b71b6861 changelog for 2.0.2 2024-04-04 19:07:04 +00:00
Omar Polo
42235e3fc2 add a test for the config dumping 2024-04-04 13:07:09 +00:00
Omar Polo
f53f5e5fe1 fix config dumping (-nn) handling
with the privsep rework the config dumping was unadvertitely broken,
it prints the content of the key itself.
2024-04-04 11:22:06 +00:00
Omar Polo
40ea7b163e use -Werror=implicit-function-declaration for function detection
the previous -Werror triggers too easily: on NixOS for example the
FORTIFY_SOURCE #warning about a missing optimization level breaks all
the checks when using -O0 (which is the default for non-release builds).
2024-04-03 14:03:42 +00:00
Omar Polo
be265175c6 fix landlock test
include stddef.h for size_t
2024-04-03 14:01:34 +00:00
Omar Polo
8aba5d8b21 remove dead code 2024-03-12 14:10:36 +00:00
Omar Polo
7c83689428 update mac CI target to sonoma 2024-03-06 10:11:17 +00:00
Omar Polo
248fb833f9 fix `log access path' with chroot
We should open the log file inside the chroot; missed in
4acf495f41.

See https://github.com/omar-polo/gmid/issues/24
2024-03-03 15:43:58 +00:00