summaryrefslogtreecommitdiffstats
path: root/runtime/nsd_gtls.h
Commit message (Collapse)AuthorAgeFilesLines
* license changesRainer Gerhards2012-01-161-16/+14
|
* added support for EGAIN while trying to receive data on gTLS sessionRainer Gerhards2008-06-241-0/+15
| | | | | | | | | This maps to bugzilla bug 83: http://bugzilla.adiscon.com/show_bug.cgi?id=83 This is the first test version, posted to user for repro of the problem. It contains code to handle the case, HOWEVER, I have not been able to test it in a scenario where a retry actually happens while receiving (I dont't get this in my environment). So I assume it is buggy and will probably not work.
* changed Rcv-Interface in tcpsrv subsystemRainer Gerhards2008-06-231-1/+2
| | | | | | It is now iRet based. This enables us to communicate more in-depth information to the upper peers. This is needed to handle the EGAIN case on rcv (not yet implemented)
* client now provides cert even if it is not signed by one of the server's ↵Rainer Gerhards2008-05-271-1/+5
| | | | trusted CAs (gtls)
* added capability to auto-configure tls auth rule for client connecting to serverRainer Gerhards2008-05-261-0/+1
| | | | must match hostname in send action
* implemented x509/certvalid "authentication"Rainer Gerhards2008-05-211-1/+3
|
* first implementation of TLS server client authentication checkRainer Gerhards2008-05-191-1/+2
| | | | | | | The TLS server now checks the client fingerprint. This works, but is highly experimental. Needs to be refined for practice. Also: - implemented permittedPeers helper construct to store names - changed omfwd implementation to use new permittedPeers
* improved error messages and corrected fingerprint formatRainer Gerhards2008-05-191-0/+3
|
* added first rough ability to authenticate the server against its certificateRainer Gerhards2008-05-161-0/+6
| | | | | | | | | | This is very experimental and needs some more work. It probably even segfaults - but the base code is there and running. The rest is refinement. While working on this, I did these two bugfixes: - bugfix: small mem leak in omfwd on exit (strmdriver name was not freed) - bugfix: $ActionSendStreamDriver had no effect
* added fromhost-ip properties and some bugfixesRainer Gerhards2008-05-161-0/+2
| | | | | | | | | | - bugfix: TCP input modules did incorrectly set fromhost property (always blank) - bugfix: imklog did not set fromhost property - added "fromhost-ip" property - added "RSYSLOG_DebugFormat" canned template - bugfix: hostname and fromhost were swapped when a persisted message (in queued mode) was read in
* server handshake now works with nonblocking socketsRainer Gerhards2008-04-301-1/+2
|
* made plain tcp syslog via TLS work on the serverRainer Gerhards2008-04-301-1/+8
| | | | ... but so far only in blocking mode
* first working TLS-enabled plain TCP senderRainer Gerhards2008-04-181-0/+2
| | | | | implemented a first working version of a TLS-enabled plain TCP sender (but, of course, the implementation is insecure as it is)
* set stage for TLS client implementationRainer Gerhards2008-04-181-0/+47