Remi Tricot-Le Breton 093a3ad7f2 MINOR: ssl: Prevent delete on certificate used by jwt_verify ...

A ckch_store used in JWT verification might not have any ckch instances
or crt-list entries linked but we don't want to be able to remove it via
the CLI anyway since it would make all future jwt_verify calls using
this certificate fail.

2025-06-30 17:59:55 +02:00

..

acl.c

…

acme.c

BUG/MINOR: acme: fix formatting issue in error and logs

2025-05-21 11:41:28 +02:00

action.c

…

activity.c

…

applet.c

MINOR: ring: support arbitrary delimiters through ring_dispatch_messages()

2025-04-08 14:36:35 +02:00

arg.c

…

auth.c

…

backend.c

MINOR: counters: rename last_change counter to last_state_change

2025-06-30 16:26:38 +02:00

base64.c

…

buf.c

…

cache.c

MAJOR: counters: dispatch counters over thread groups

2025-06-05 09:59:38 +02:00

calltrace.c

…

cebtree-prv.h

…

cebu32_tree.c

…

cebu64_tree.c

…

cebua_tree.c

…

cebub_tree.c

…

cebuib_tree.c

…

cebuis_tree.c

…

cebul_tree.c

…

cebus_tree.c

…

cfgcond.c

…

cfgdiag.c

…

cfgparse-global.c

MINOR: glitches: add global setting "tune.glitches.kill.cpu-usage"

2025-05-21 15:47:42 +02:00

cfgparse-listen.c

MEDIUM: proxy: mark the "dispatch" directive as deprecated

2025-06-26 15:29:47 +02:00

cfgparse-quic.c

MEDIUM: quic: limit global Tx memory

2025-04-29 15:19:32 +02:00

cfgparse-ssl.c

MINOR: ssl: Add "renegotiate" server option

2025-06-25 15:23:48 +02:00

cfgparse-tcp.c

…

cfgparse-unix.c

…

cfgparse.c

MAJOR: cfgparse: make sure server names are unique within a backend

2025-06-23 15:42:32 +02:00

channel.c

…

check.c

MEDIUM: server: add and use a separate last_change variable for internal use

2025-06-30 16:26:25 +02:00

chunk.c

…

cli.c

MINOR: cli: handle EOS/ERROR first

2025-06-16 16:47:59 +02:00

clock.c

CLEANUP: assorted typo fixes in the code, commits and doc

2025-04-03 11:37:25 +02:00

compression.c

…

connection.c

BUG/MEDIUM: connections: Report connection closing in conn_create_mux()

2025-04-30 17:17:36 +02:00

counters.c

MINOR: counters: rename last_change counter to last_state_change

2025-06-30 16:26:38 +02:00

cpu_topo.c

MEDIUM: cpu-topo: switch to the "performance" cpu-policy by default

2025-06-26 16:27:43 +02:00

cpuset.c

…

debug.c

MINOR: debug: bump the dump buffer to 8kB

2025-05-07 10:02:58 +02:00

dgram.c

…

dict.c

…

dns_ring.c

…

dns.c

BUG/MINOR: dns: prevent ds accumulation within dss

2025-04-29 21:20:54 +02:00

dynbuf.c

…

eb32sctree.c

…

eb32tree.c

…

eb64tree.c

…

ebimtree.c

…

ebistree.c

…

ebmbtree.c

…

ebpttree.c

…

ebsttree.c

…

ebtree.c

…

errors.c

…

ev_epoll.c

…

ev_evports.c

…

ev_kqueue.c

…

ev_poll.c

…

ev_select.c

…

event_hdl.c

…

extcheck.c

…

fcgi-app.c

MAJOR: counters: dispatch counters over thread groups

2025-06-05 09:59:38 +02:00

fcgi.c

…

fd.c

…

filters.c

…

fix.c

…

flt_bwlim.c

…

flt_http_comp.c

MAJOR: counters: dispatch counters over thread groups

2025-06-05 09:59:38 +02:00

flt_spoe.c

BUG/MINOR: spoe: Don't report error on applet release if filter is in DONE state

2025-05-13 19:51:40 +02:00

flt_trace.c

…

freq_ctr.c

…

frontend.c

MAJOR: counters: dispatch counters over thread groups

2025-06-05 09:59:38 +02:00

guid.c

BUG/MEDIUM: server: fix potential null-deref after previous fix

2025-05-22 18:09:12 +02:00

h1_htx.c

MINOR: h1-htx: Skip C-L and T-E headers for 1xx and 204 messages during parsing

2025-04-22 16:14:47 +02:00

h1.c

BUG/MEDIUM: h1/h2/h3: reject forbidden chars in the Host header field

2025-05-16 15:13:17 +02:00

h2.c

BUG/MEDIUM: h1/h2/h3: reject forbidden chars in the Host header field

2025-05-16 15:13:17 +02:00

h3_stats.c

…

h3.c

BUG/MINOR: mux-quic/h3: properly handle too low peer fctl initial stream

2025-06-18 17:18:55 +02:00

haproxy.c

CLEANUP: startup: move comment about nbthread where it's more appropriate

2025-06-26 18:02:16 +02:00

hash.c

…

hlua_fcn.c

MINOR: hlua_fcn: enforce yield after *_get_stats() methods

2025-04-30 17:00:31 +02:00

hlua.c

BUG/MEDIUM: hlua: Forbid any L6/L7 sample fetche functions from lua services

2025-06-30 16:47:59 +02:00

hpack-dec.c

…

hpack-enc.c

…

hpack-huff.c

…

hpack-tbl.c

…

hq_interop.c

MINOR: hq-interop: handle HTX response forward if not enough space

2025-06-13 17:41:13 +02:00

http_acl.c

…

http_act.c

MAJOR: counters: dispatch counters over thread groups

2025-06-05 09:59:38 +02:00

http_ana.c

MINOR: hlua: emit a log instead of an alert for aborted actions due to unavailable yield

2025-06-24 10:55:55 +02:00

http_client.c

MEDIUM: server: automatically add server to proxy list in new_server()

2025-06-02 17:51:30 +02:00

http_conv.c

…

http_ext.c

…

http_fetch.c

…

http_htx.c

…

http_rules.c

…

http.c

…

htx.c

…

init.c

…

jws.c

REORG: ssl: move curves2nid and nid2nist to ssl_utils

2025-04-02 19:34:09 +02:00

jwt.c

MAJOR: jwt: Allow certificate instead of public key in jwt_verify converter

2025-06-30 17:59:55 +02:00

lb_chash.c

…

lb_fas.c

…

lb_fwlc.c

MINOR: fwlc: Factorize code.

2025-06-20 15:59:03 +02:00

lb_fwrr.c

MEDIUM: lb_fwrr: Don't start all thread groups on the same server.

2025-04-17 17:38:23 +02:00

lb_map.c

…

lb_ss.c

…

limits.c

CLEANUP: assorted typo fixes in the code, commits and doc

2025-04-03 11:37:25 +02:00

linuxcap.c

…

listener.c

BUILD: listener: fix 'for' loop inline variable declaration

2025-06-12 08:46:36 +02:00

log.c

BUG/MINOR: log: Be able to use %ID alias at anytime of the stream's evaluation

2025-06-24 08:04:50 +02:00

lru.c

…

mailers.c

MINOR: mailers: warn if mailers are configured but not actually used

2025-06-27 16:41:18 +02:00

map.c

MINOR: cli/applet: Move appctx fields only used by the CLI in a private context

2025-04-24 15:09:37 +02:00

mjson.c

…

mqtt.c

…

mux_fcgi.c

MEDIUM: mux_fcgi: Make sure we return the tasklet from fcgi_deferred_shut

2025-04-25 16:14:26 +02:00

mux_h1.c

MAJOR: counters: dispatch counters over thread groups

2025-06-05 09:59:38 +02:00

mux_h2.c

BUG/MEDIUM: mux-h2: Properly handle connection error during preface sending

2025-06-30 16:48:00 +02:00

mux_pt.c

…

mux_quic.c

MEDIUM: mux-quic: implement attach for new streams on backend side

2025-06-18 17:25:27 +02:00

mux_spop.c

BUG/MINOR: mux-spop: Fix null-pointer deref on SPOP stream allocation failure

2025-06-04 08:48:49 +02:00

mworker.c

MAJOR: mworker: remove program section support

2025-06-25 16:11:34 +02:00

namespace.c

…

ncbuf.c

…

pattern.c

CLEANUP: assorted typo fixes in the code, commits and doc

2025-04-03 11:37:25 +02:00

payload.c

MINOR: sample: add 4 new sample fetches for clienthello parsing

2025-04-17 16:39:47 +02:00

peers.c

BUG/MEDIUM: peers: also limit the number of incoming updates

2025-05-15 16:57:21 +02:00

pipe.c

…

pool.c

DEBUG: pools: add a new integrity mode "backup" to copy the released area

2025-05-09 14:57:00 +02:00

proto_quic.c

MINOR: quic: mark ctrl layer as ready on quic_connect_server()

2025-06-12 11:25:12 +02:00

proto_rhttp.c

BUG/MINOR: rhttp: fix reconnect if timeout connect unset

2025-04-17 14:49:36 +02:00

proto_sockpair.c

…

proto_tcp.c

MINOR: sock: Add protocol and socket types parameters to sock_create_server_socket()

2025-06-11 18:37:34 +02:00

proto_udp.c

…

proto_uxdg.c

…

proto_uxst.c

MINOR: sock: Add protocol and socket types parameters to sock_create_server_socket()

2025-06-11 18:37:34 +02:00

protocol.c

…

proxy.c

MEDIUM: proxy: add and use a separate last_change variable for internal use

2025-06-30 16:26:31 +02:00

qmux_http.c

…

qmux_trace.c

MINOR: mux-quic: define flag for backend side

2025-06-12 11:28:54 +02:00

qpack-dec.c

…

qpack-enc.c

BUILD: qpack: fix a build issue on older compilers

2025-06-26 18:09:24 +02:00

qpack-tbl.c

…

queue.c

MEDIUM: server: add and use a separate last_change variable for internal use

2025-06-30 16:26:25 +02:00

quic_ack.c

…

quic_cc_bbr.c

BUG/MINOR: quic: ensure cwnd limits are always enforced

2025-04-29 15:10:06 +02:00

quic_cc_cubic.c

BUG/MINOR: quic: ensure cwnd limits are always enforced

2025-04-29 15:10:06 +02:00

quic_cc_drs.c

…

quic_cc_newreno.c

BUG/MINOR: quic: ensure cwnd limits are always enforced

2025-04-29 15:10:06 +02:00

quic_cc_nocc.c

MINOR: quic: rename min/max fields for congestion window algo

2025-04-29 15:10:06 +02:00

quic_cc.c

MINOR: quic: add some missing includes

2025-05-21 14:44:27 +02:00

quic_cid.c

…

quic_cli.c

MINOR: quic-be: get rid of ->li quic_conn member

2025-06-11 18:37:34 +02:00

quic_conn.c

MINOR: quic-be: address validation support implementation (RETRY)

2025-06-26 09:48:00 +02:00

quic_enc.c

…

quic_fctl.c

…

quic_frame.c

BUG/MINOR: quic: work around NEW_TOKEN parsing error on backend side

2025-06-12 17:47:15 +02:00

quic_loss.c

…

quic_openssl_compat.c

MINOR: quic-be: Make the secret derivation works for QUIC backends (USE_QUIC_OPENSSL_COMPAT)

2025-06-11 18:37:34 +02:00

quic_pacing.c

…

quic_retransmit.c

…

quic_retry.c

MINOR: quic-be: address validation support implementation (RETRY)

2025-06-26 09:48:00 +02:00

quic_rules.c

…

quic_rx.c

MINOR: quic-be: address validation support implementation (RETRY)

2025-06-26 09:48:00 +02:00

quic_sock.c

BUG/MINOR: quic: don't restrict reception on backend privileged ports

2025-06-13 16:40:21 +02:00

quic_ssl.c

BUG/MINOR: quic: Fix OSSL_FUNC_SSL_QUIC_TLS_got_transport_params_fn callback (OpenSSL3.5)

2025-06-16 10:02:45 +02:00

quic_stats.c

…

quic_stream.c

MINOR: quic: refactor handling of streams after MUX release

2025-05-21 14:26:45 +02:00

quic_tls.c

MINOR: quic-be: address validation support implementation (RETRY)

2025-06-26 09:48:00 +02:00

quic_token.c

…

quic_tp.c

BUG/MINOR: quic-be: Wrong retry_source_connection_id check

2025-06-27 07:59:12 +02:00

quic_trace.c

MINOR: quic-be: SSL sessions initializations

2025-06-11 18:37:34 +02:00

quic_tx.c

MINOR: quic-be: address validation support implementation (RETRY)

2025-06-26 09:48:00 +02:00

raw_sock.c

…

regex.c

…

resolvers.c

MEDIUM: sock-inet: re-check IPv6 connectivity every 30s

2025-05-09 15:45:44 +02:00

ring.c

BUG/MEDIUM: cli/ring: Properly handle shutdown in "show event" I/O handler

2025-05-26 19:00:00 +02:00

sample.c

MAJOR: jwt: Allow certificate instead of public key in jwt_verify converter

2025-06-30 17:59:55 +02:00

server_state.c

MINOR: counters: rename last_change counter to last_state_change

2025-06-30 16:26:38 +02:00

server.c

MINOR: counters: rename last_change counter to last_state_change

2025-06-30 16:26:38 +02:00

session.c

MINOR: tcp: add support for setting TCP_NOTSENT_LOWAT on both sides

2025-04-29 12:13:42 +02:00

sha1.c

…

shctx.c

…

signal.c

…

sink.c

MINOR: server: move send-proxy* incompatibility check in _srv_check_proxy_mode()

2025-06-27 16:41:13 +02:00

slz.c

IMPORT: slz: silence a build warning on non-x86 non-arm

2025-05-16 16:43:53 +02:00

sock_inet.c

MEDIUM: sock-inet: re-check IPv6 connectivity every 30s

2025-05-09 15:45:44 +02:00

sock_unix.c

…

sock.c

MINOR: sock: Add protocol and socket types parameters to sock_create_server_socket()

2025-06-11 18:37:34 +02:00

ssl_ckch.c

MINOR: ssl: Prevent delete on certificate used by jwt_verify

2025-06-30 17:59:55 +02:00

ssl_clienthello.c

MINOR: ssl: check TLS1.3 ciphersuites again in clienthello with recent AWS-LC

2025-06-30 16:43:51 +02:00

ssl_crtlist.c

MINOR: ssl: support strict-sni in ssl-default-bind-options

2025-05-22 15:31:54 +02:00

ssl_gencert.c

MINOR: quic: OpenSSL 3.5 internal QUIC custom extension for transport parameters reset

2025-05-20 15:00:06 +02:00

ssl_ocsp.c

MINOR: quic-be: get rid of ->li quic_conn member

2025-06-11 18:37:34 +02:00

ssl_sample.c

…

ssl_sock.c

MINOR: ssl: Add "renegotiate" server option

2025-06-25 15:23:48 +02:00

ssl_trace.c

BUILD: ssl: avoid possible printf format warning in traces

2025-05-21 10:01:14 +02:00

ssl_utils.c

MINOR: ssl: add function to extract X509 notBefore date in time_t

2025-05-02 16:01:32 +02:00

stats-file.c

MAJOR: counters: dispatch counters over thread groups

2025-06-05 09:59:38 +02:00

stats-html.c

…

stats-json.c

…

stats-proxy.c

MINOR: counters: rename last_change counter to last_state_change

2025-06-30 16:26:38 +02:00

stats.c

…

stconn.c

BUG/MEDIUM: stconn: Disable 0-copy forwarding for filters altering the payload

2025-05-16 15:11:37 +02:00

stick_table.c

BUG/MEDIUM: stick-table: always remove update before adding a new one

2025-05-08 23:32:25 +02:00

stream.c

BUG/MINOR: stream: Avoid recursive evaluation for unique-id based on itself

2025-06-24 08:04:50 +02:00

systemd.c

…

task.c

CLEANUP: tasks: use the local state, not t->state, to check for tasklets

2025-05-02 11:09:28 +02:00

tcp_act.c

MAJOR: counters: dispatch counters over thread groups

2025-06-05 09:59:38 +02:00

tcp_rules.c

MINOR: hlua: emit a log instead of an alert for aborted actions due to unavailable yield

2025-06-24 10:55:55 +02:00

tcp_sample.c

…

tcpcheck.c

MINOR: check: implement check-pool-conn-name srv keyword

2025-04-03 17:19:07 +02:00

thread.c

MAJOR: jwt: Allow certificate instead of public key in jwt_verify converter

2025-06-30 17:59:55 +02:00

time.c

…

tools.c

BUG/MINOR: tools: use my_unsetenv instead of unsetenv

2025-06-26 18:02:16 +02:00

trace.c

…

uri_auth.c

…

uri_normalizer.c

…

vars.c

…

version.c

…

wdt.c

CLEANUP: wdt: clarify the comments on the common exit path

2025-05-20 16:37:06 +02:00

xprt_handshake.c

BUG/MEDIUM: connections: Report connection closing in conn_create_mux()

2025-04-30 17:17:36 +02:00

xprt_quic.c

MINOR: quic-be: Prevent the MUX to send/receive data

2025-06-11 18:37:34 +02:00