mirror/haproxy
1
0
Fork 0
mirror of http://git.haproxy.org/git/haproxy.git synced 2026-02-06 12:43:40 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
9aacb684cd6671698a281fd29f4a6920243b8e9c
haproxy/src
History
sftcd 9aacb684cd MINOR: ssl/ech: key management via stats socket 
This patch extends the ECH support by adding runtime CLI commands to
view and modify ECH configurations.

New commands are added to the HAProxy CLI:
- "show ssl ech [<name>]" displays all ECH configurations or a specific
  one.
- "add ssl ech <name> <payload>" adds a new PEM-formatted ECH
  configuration.
- "set ssl ech <name> <payload>" replaces all existing ECH
  configurations.
- "del ssl ech <name> [<age-in-secs>]" removes ECH configurations,
  optionally filtered by age.
2025-10-30 10:38:31 +01:00
..
_ceb_addr.c
IMPORT: cebtree: import version 0.5.0 to support duplicates
2025-09-16 09:23:46 +02:00
_ceb_blk.c
IMPORT: cebtree: import version 0.5.0 to support duplicates
2025-09-16 09:23:46 +02:00
_ceb_int.c
IMPORT: cebtree: import version 0.5.0 to support duplicates
2025-09-16 09:23:46 +02:00
_ceb_str.c
IMPORT: cebtree: import version 0.5.0 to support duplicates
2025-09-16 09:23:46 +02:00
acl.c
BUG/MINOR: acl: warn if "_sub" derivative used with an explicit match
2025-10-28 11:59:32 +01:00
acme.c
MINOR: acme: display the complete challenge_ready command in the logs
2025-10-23 11:14:07 +02:00
action.c
…
activity.c
MINOR: activity/memory: count allocations performed under a lock
2025-09-11 16:32:34 +02:00
applet.c
MINOR: applet: do not put SE_FL_WANT_ROOM on rcv_buf() if the channel is empty
2025-10-27 16:57:07 +01:00
arg.c
…
auth.c
…
backend.c
MINOR: proxy: only check abortonclose through a dedicated function
2025-10-08 10:29:41 +02:00
base64.c
…
buf.c
…
cache.c
MINOR: cache: Use the <kip> value to check too big objects
2025-10-08 11:10:42 +02:00
calltrace.c
…
ceb32_tree.c
IMPORT: cebtree: import version 0.5.0 to support duplicates
2025-09-16 09:23:46 +02:00
ceb64_tree.c
IMPORT: cebtree: import version 0.5.0 to support duplicates
2025-09-16 09:23:46 +02:00
ceba_tree.c
IMPORT: cebtree: import version 0.5.0 to support duplicates
2025-09-16 09:23:46 +02:00
cebb_tree.c
IMPORT: cebtree: import version 0.5.0 to support duplicates
2025-09-16 09:23:46 +02:00
cebib_tree.c
IMPORT: cebtree: import version 0.5.0 to support duplicates
2025-09-16 09:23:46 +02:00
cebis_tree.c
IMPORT: cebtree: import version 0.5.0 to support duplicates
2025-09-16 09:23:46 +02:00
cebl_tree.c
IMPORT: cebtree: import version 0.5.0 to support duplicates
2025-09-16 09:23:46 +02:00
cebs_tree.c
IMPORT: cebtree: import version 0.5.0 to support duplicates
2025-09-16 09:23:46 +02:00
cebtree-dbg.c
IMPORT: cebtree: import version 0.5.0 to support duplicates
2025-09-16 09:23:46 +02:00
cebtree-prv.h
…
cfgcond.c
…
cfgdiag.c
…
cfgparse-global.c
MINOR: quic: rename "no-quic" to "tune.quic.listen"
2025-10-23 16:47:58 +02:00
cfgparse-listen.c
MEDIUM: proxy: index proxy ID using compact trees
2025-09-16 09:23:46 +02:00
cfgparse-quic.c
BUG/MINOR: quic: rename and duplicate stream settings
2025-10-23 16:49:20 +02:00
cfgparse-ssl.c
MEDIUM: ssl: Add certificate password callback that calls external command
2025-10-29 10:54:17 +01:00
cfgparse-tcp.c
MINOR: server: add the "cc" keyword to set the TCP congestion controller
2025-09-17 17:19:33 +02:00
cfgparse-unix.c
…
cfgparse.c
MEDIUM: quic: Fix build with openssl-compat
2025-10-24 13:51:15 +02:00
channel.c
…
check.c
MEDIUM: stats: consider that shared stats pointers may be NULL
2025-09-18 16:49:51 +02:00
chunk.c
…
cli.c
MINOR: init: Use devnullfd in stdio_quiet calls instead of recreating a fd everytime
2025-10-29 10:54:17 +01:00
clock.c
MINOR: clock: add clock_get_now_offset() helper
2025-08-07 22:27:09 +02:00
compression.c
MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL
2025-08-11 19:55:30 +02:00
connection.c
MEDIUM: connection: reintegrate conn_hash_node into connection
2025-09-16 09:23:46 +02:00
counters.c
MEDIUM: guid: switch guid to more compact cebuis_tree
2025-09-16 09:23:46 +02:00
cpu_topo.c
MINOR: cpu-topo: write thread-cpu bindings into trash buffer
2025-07-17 19:07:58 +02:00
cpuset.c
BUG/MINOR: cpu_topo: work around a small bug in musl's CPU_ISSET()
2025-09-06 11:05:52 +02:00
debug.c
MINOR: thread: add a lock level information in the thread_ctx
2025-09-11 16:32:34 +02:00
dgram.c
…
dict.c
…
dns_ring.c
…
dns.c
MEDIUM: dns: bind the nameserver sockets to the initiating thread
2025-09-10 16:48:09 +02:00
dynbuf.c
OPTIM: buffers: align the buffer pool to 64
2025-08-11 19:55:30 +02:00
eb32sctree.c
…
eb32tree.c
IMPORT: ebtree: only use __builtin_prefetch() when supported
2025-09-17 14:30:32 +02:00
eb64tree.c
IMPORT: ebtree: only use __builtin_prefetch() when supported
2025-09-17 14:30:32 +02:00
ebimtree.c
…
ebistree.c
…
ebmbtree.c
…
ebsttree.c
…
ebtree.c
…
ech.c
MINOR: ssl/ech: key management via stats socket
2025-10-30 10:38:31 +01:00
errors.c
…
ev_epoll.c
…
ev_evports.c
…
ev_kqueue.c
…
ev_poll.c
…
ev_select.c
…
event_hdl.c
MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL
2025-08-11 19:55:30 +02:00
extcheck.c
…
fcgi-app.c
MEDIUM: stats: consider that shared stats pointers may be NULL
2025-09-18 16:49:51 +02:00
fcgi.c
…
fd.c
CLEANUP: fd: make use of ha_aligned_alloc() for the fdtab
2025-08-11 19:55:30 +02:00
filters.c
MEDIUM: htx: Remove the HTX extra field
2025-10-08 11:10:42 +02:00
fix.c
…
flt_bwlim.c
MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL
2025-08-11 19:55:30 +02:00
flt_http_comp.c
MINOR: compression: Use the <kip> value to check body size
2025-10-08 11:10:42 +02:00
flt_spoe.c
BUG/MEDIUM: spoe: Improve error detection in SPOE applet on client abort
2025-08-26 16:12:18 +02:00
flt_trace.c
…
freq_ctr.c
MINOR: clock: make global_now_ms a pointer
2025-07-29 18:04:14 +02:00
frontend.c
MEDIUM: stats: avoid 1 indirection by storing the shared stats directly in counters struct
2025-07-25 16:46:10 +02:00
guid.c
MEDIUM: guid: switch guid to more compact cebuis_tree
2025-09-16 09:23:46 +02:00
h1_htx.c
BUG/MEDIUM: h1-htx: Don't set HTX_FL_EOM flag on 1xx informational messages
2025-10-21 14:22:26 +02:00
h1.c
BUG/MEDIUM: h1/h2/h3: reject forbidden chars in the Host header field
2025-05-16 15:13:17 +02:00
h2.c
BUG/MINOR: h2: forbid 'Z' as well in header field names checks
2025-10-02 15:29:58 +02:00
h3_stats.c
…
h3.c
BUG/MEDIUM: h3: properly encode response after interim one in same buf
2025-10-21 15:51:48 +02:00
haproxy.c
MINOR: init: Use devnullfd in stdio_quiet calls instead of recreating a fd everytime
2025-10-29 10:54:17 +01:00
hash.c
…
hlua_fcn.c
MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL
2025-08-11 19:55:30 +02:00
hlua.c
MINOR: hlua/http-fetch: Use <kip> instead of HTX extra field to get body size
2025-10-08 11:10:25 +02:00
hpack-dec.c
…
hpack-enc.c
…
hpack-huff.c
…
hpack-tbl.c
…
hq_interop.c
BUG/MINOR: hq-interop: adjust parsing/encoding on backend side
2025-09-09 16:55:09 +02:00
http_acl.c
…
http_act.c
MEDIUM: stats: consider that shared stats pointers may be NULL
2025-09-18 16:49:51 +02:00
http_ana.c
MINOR: proxy: introduce proxy_abrt_close_def() to pass the desired default
2025-10-08 10:29:41 +02:00
http_client.c
BUG/MEDIUM: http-client: Fix the test on the response start-line
2025-09-19 14:59:28 +02:00
http_conv.c
…
http_ext.c
CLEANUP: assorted typo fixes in the code and comments
2025-04-02 11:12:20 +02:00
http_fetch.c
MINOR: hlua/http-fetch: Use <kip> instead of HTX extra field to get body size
2025-10-08 11:10:25 +02:00
http_htx.c
…
http_rules.c
…
http.c
MINOR: http: fix 405,431,501 default errorfile
2025-10-29 08:47:19 +01:00
httpclient_cli.c
MINOR: httpclient-cli: Reset httpclient HTX buffer instead of removing blocks
2025-07-24 12:13:42 +02:00
htx.c
…
init.c
MINOR: init: add REGISTER_POST_DEINIT_MASTER() hook
2025-08-07 22:27:14 +02:00
jws.c
BUG/MEDIUM: jws: return size_t in JWS functions
2025-09-11 14:31:32 +02:00
jwt.c
MINOR: jwt: Add specific error code for known but unavailable certificate
2025-10-13 10:38:52 +02:00
lb_chash.c
BUG/MAJOR: lb-chash: fix key calculation when using default hash-key id
2025-10-16 10:43:09 +02:00
lb_fas.c
…
lb_fwlc.c
BUG/MEDIUM: fwlc: Handle memory allocation failures.
2025-10-01 18:13:33 +02:00
lb_fwrr.c
MEDIUM: lb_fwrr: Don't start all thread groups on the same server.
2025-04-17 17:38:23 +02:00
lb_map.c
…
lb_ss.c
…
limits.c
CLEANUP: assorted typo fixes in the code, commits and doc
2025-04-03 11:37:25 +02:00
linuxcap.c
MEDIUM: init: always warn when running as root without being asked to
2025-09-05 08:51:07 +02:00
listener.c
MINOR: listener: implement bind_conf_find_by_name()
2025-10-30 10:37:42 +01:00
log.c
MEDIUM: stats: consider that shared stats pointers may be NULL
2025-09-18 16:49:51 +02:00
lru.c
…
mailers.c
MINOR: mailers: warn if mailers are configured but not actually used
2025-06-27 16:41:18 +02:00
map.c
MINOR: cli/applet: Move appctx fields only used by the CLI in a private context
2025-04-24 15:09:37 +02:00
mjson.c
CLEANUP: mjson: remove unused defines from mjson.h
2025-10-06 09:30:07 +02:00
mqtt.c
…
mux_fcgi.c
MEDIUM: htx: Remove the HTX extra field
2025-10-08 11:10:42 +02:00
mux_h1.c
MEDIUM: h1: Immediately try to read data for frontend
2025-10-29 17:18:26 +01:00
mux_h2.c
MEDIUM: htx: Remove the HTX extra field
2025-10-08 11:10:42 +02:00
mux_pt.c
MEDIUM: mux_h1/mux_pt: Use XPRT_CAN_SPLICE to decide if we should splice
2025-08-20 18:33:10 +02:00
mux_quic.c
MINOR: quic: split Tx options for FE/BE usage
2025-10-23 16:49:20 +02:00
mux_spop.c
MEDIUM: connection: reintegrate conn_hash_node into connection
2025-09-16 09:23:46 +02:00
mworker.c
BUG/MEDIUM: mworker: more verbose error upon loading failure
2025-08-20 17:15:52 +02:00
namespace.c
…
ncbmbuf.c
MINOR: ncbmbuf: add tests as standalone mode
2025-10-22 15:04:24 +02:00
ncbuf.c
…
pattern.c
BUG/MINOR: pattern: Fix pattern lookup for map with opt@ prefix
2025-09-25 15:28:22 +02:00
payload.c
MINOR: ssl: Introduce new smp_client_hello_parse() function
2025-07-01 11:55:36 +02:00
peers.c
MEDIUM: peers: move process_peer_sync() to a single thread
2025-09-10 19:14:05 +02:00
pipe.c
MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL
2025-08-11 19:55:30 +02:00
pool.c
BUG/MAJOR: pools: fix default pool alignment
2025-10-22 09:06:20 +02:00
proto_quic.c
MINOR: quic: rename frontend sock-per-conn setting
2025-10-23 16:49:20 +02:00
proto_rhttp.c
OPTIM: proto_rhttp: Don't set SNI for non-ssl connections
2025-09-05 15:56:42 +02:00
proto_sockpair.c
…
proto_tcp.c
MINOR: server: add the "cc" keyword to set the TCP congestion controller
2025-09-17 17:19:33 +02:00
proto_udp.c
…
proto_uxdg.c
…
proto_uxst.c
MINOR: sock: Add protocol and socket types parameters to sock_create_server_socket()
2025-06-11 18:37:34 +02:00
protocol.c
MINOR: quic: rename "no-quic" to "tune.quic.listen"
2025-10-23 16:47:58 +02:00
proxy.c
MINOR: proxy: explicitly permit abortonclose on frontends and clarify the doc
2025-10-08 10:29:41 +02:00
qmux_http.c
MEDIUM: htx: Remove the HTX extra field
2025-10-08 11:10:42 +02:00
qmux_trace.c
MINOR: mux-quic: define flag for backend side
2025-06-12 11:28:54 +02:00
qpack-dec.c
…
qpack-enc.c
BUG/MINOR: h3: ensure that invalid status code are not encoded (FE side)
2025-07-15 18:39:23 +02:00
qpack-tbl.c
…
queue.c
OPTIM: queue: align the pendconn pools to 64
2025-08-11 19:55:30 +02:00
quic_ack.c
MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL
2025-08-11 19:55:30 +02:00
quic_cc_bbr.c
BUG/MINOR: quic: ensure cwnd limits are always enforced
2025-04-29 15:10:06 +02:00
quic_cc_cubic.c
MINOR: quic: split congestion controler options for FE/BE usage
2025-10-23 16:49:20 +02:00
quic_cc_drs.c
…
quic_cc_newreno.c
BUG/MINOR: quic: ensure cwnd limits are always enforced
2025-04-29 15:10:06 +02:00
quic_cc_nocc.c
MINOR: quic: rename min/max fields for congestion window algo
2025-04-29 15:10:06 +02:00
quic_cc.c
MINOR: quic: rename max Tx mem setting
2025-10-23 16:49:20 +02:00
quic_cid.c
…
quic_cli.c
BUG/MINOR: quic: check applet_putchk() for 'show quic' first line
2025-10-17 09:29:01 +02:00
quic_conn.c
BUG/MINOR: quic: split option for congestion max window size
2025-10-23 16:49:20 +02:00
quic_enc.c
TESTS: quic: useless param for b_quic_dec_int()
2025-10-15 09:58:03 +02:00
quic_fctl.c
…
quic_frame.c
MINOR: quic: remove ->offset qf_crypto struct field
2025-08-28 08:19:34 +02:00
quic_loss.c
MINOR: quic: split congestion controler options for FE/BE usage
2025-10-23 16:49:20 +02:00
quic_openssl_compat.c
MINOR: quic: prefer qc_is_back() usage over qc->target
2025-08-07 16:59:59 +02:00
quic_pacing.c
…
quic_retransmit.c
MINOR: quic: prefer qc_is_back() usage over qc->target
2025-08-07 16:59:59 +02:00
quic_retry.c
MINOR: quic-be: address validation support implementation (RETRY)
2025-06-26 09:48:00 +02:00
quic_rules.c
…
quic_rx.c
MINOR: quic: rename retry-threshold setting
2025-10-23 16:49:20 +02:00
quic_sock.c
MINOR: quic: get rid of ->target quic_conn struct member
2025-09-11 09:51:28 +02:00
quic_ssl.c
BUG/MAJOR: quic: use ncbmbuf for CRYPTO handling
2025-10-22 15:04:41 +02:00
quic_stats.c
…
quic_stream.c
MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL
2025-08-11 19:55:30 +02:00
quic_tls.c
BUG/MAJOR: quic: use ncbmbuf for CRYPTO handling
2025-10-22 15:04:41 +02:00
quic_token.c
…
quic_tp.c
BUG/MINOR: quic: rename and duplicate stream settings
2025-10-23 16:49:20 +02:00
quic_trace.c
MINOR: quic: define QUIC_FL_CONN_IS_BACK flag
2025-08-07 16:59:59 +02:00
quic_tx.c
MINOR: quic: split Tx options for FE/BE usage
2025-10-23 16:49:20 +02:00
raw_sock.c
MINOR: rawsock: introduce CO_RFL_TRY_HARDER to detect closures on complete reads
2025-10-01 10:23:01 +02:00
regex.c
MINOR: regex: use a thread-local match pointer for pcre2
2025-10-13 16:56:43 +02:00
resolvers.c
BUG/MINOR: resolvers: Apply dns-accept-family setting on additional records
2025-10-29 11:20:27 +01:00
ring.c
OPTIM: ring: avoid reloading the tail_ofs value before the CAS in ring_write()
2025-09-18 15:27:32 +02:00
sample.c
MINOR: quic: rename "no-quic" to "tune.quic.listen"
2025-10-23 16:47:58 +02:00
server_state.c
MEDIUM: stats: consider that shared stats pointers may be NULL
2025-09-18 16:49:51 +02:00
server.c
MINOR: tree-wide: add missing TAINTED flags for some experimental directives
2025-10-17 19:00:21 +02:00
session.c
MEDIUM: stats: consider that shared stats pointers may be NULL
2025-09-18 16:49:51 +02:00
sha1.c
…
shctx.c
…
signal.c
MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL
2025-08-11 19:55:30 +02:00
sink.c
BUG/MINOR: sink: retry attempt for sft server may never occur
2025-10-03 14:31:05 +02:00
slz.c
IMPORT: slz: silence a build warning on non-x86 non-arm
2025-05-16 16:43:53 +02:00
sock_inet.c
MINOR: clock: make global_now_ms a pointer
2025-07-29 18:04:14 +02:00
sock_unix.c
…
sock.c
MINOR: sock: update broken accept4 detection for older hardwares.
2025-08-08 06:01:18 +02:00
ssl_ckch.c
MINOR: ssl: Do not dump decrypted privkeys in 'dump ssl cert'
2025-10-29 10:54:17 +01:00
ssl_clienthello.c
MINOR: quic: get rid of ->target quic_conn struct member
2025-09-11 09:51:28 +02:00
ssl_crtlist.c
MEDIUM: ssl/cli: relax crt insertion in crt-list of type directory
2025-08-11 17:42:16 +02:00
ssl_gencert.c
BUG/MEDIUM: quic: Crash after QUIC server callbacks restoration (OpenSSL 3.5)
2025-07-09 16:01:02 +02:00
ssl_ocsp.c
BUG/MINOR: ocsp: Crash when updating CA during ocsp updates
2025-09-15 15:34:36 +02:00
ssl_sample.c
MINOR: ssl/ech: add logging and sample fetches for ECH status and outer SNI
2025-10-30 10:37:30 +01:00
ssl_sock.c
MEDIUM: ssl/ech: config and load keys
2025-10-30 10:37:12 +01:00
ssl_trace.c
BUG/MINOR: ssl: Fix potential NULL deref in trace callback
2025-09-11 14:31:32 +02:00
ssl_utils.c
CLEANUP: ssl: Use only NIDs in curve name to id table
2025-07-24 10:58:54 +02:00
stats-file.c
BUG/MAJOR: stats-file: ensure shm_stats_file_object struct mapping consistency (2nd attempt)
2025-10-24 09:35:38 +02:00
stats-html.c
MINOR: stats: display new curr_sess_idle_conns server counter
2025-08-28 18:58:11 +02:00
stats-json.c
…
stats-proxy.c
MINOR: stats: display new curr_sess_idle_conns server counter
2025-08-28 18:58:11 +02:00
stats.c
MINOR: pattern: add a counter of added/freed patterns
2025-07-05 00:12:45 +02:00
stconn.c
MEDIUM: applet: Forward <kip> to applets
2025-10-10 11:11:44 +02:00
stick_table.c
BUG/MINOR: stick-tables: properly index string-type keys
2025-10-24 10:15:11 +02:00
stream.c
MEDIUM: htx: Remove the HTX extra field
2025-10-08 11:10:42 +02:00
systemd.c
…
task.c
MINOR: sched: pass the thread number to is_sched_alive()
2025-10-01 10:18:53 +02:00
tcp_act.c
MEDIUM: stats: consider that shared stats pointers may be NULL
2025-09-18 16:49:51 +02:00
tcp_rules.c
MEDIUM: stats: consider that shared stats pointers may be NULL
2025-09-18 16:49:51 +02:00
tcp_sample.c
MINOR: sample: define bc_reused fetch
2025-04-02 14:57:40 +02:00
tcpcheck.c
BUG/MINOR: check: ensure checks are compatible with QUIC servers
2025-09-09 16:55:09 +02:00
thread.c
BUG/MEDIUM: threads/config: drop absent threads from thread groups
2025-10-17 20:36:00 +02:00
time.c
…
tools.c
CLEANUP: tools: use the item API for the file names tree
2025-09-16 10:41:19 +02:00
trace.c
MINOR: trace: don't call strlen() on the function's name
2025-09-18 08:31:57 +02:00
uri_auth.c
…
uri_normalizer.c
…
vars.c
CLEANUP: vars: use the item API for the variables trees
2025-09-16 10:51:23 +02:00
version.c
…
wdt.c
BUG/MEDIUM: wdt: improve stuck task detection accuracy
2025-10-01 10:18:53 +02:00
xprt_handshake.c
MINOR: xprt: Add recvmsg() and sendmsg() parameters to rcv_buf() and snd_buf().
2025-08-20 17:28:03 +02:00
xprt_quic.c
BUG/MEDIUM: quic-be: too early SSL_SESSION initialization
2025-09-04 20:49:06 +02:00