| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | | added testbed for config errors and fixed a bug | Rainer Gerhards | 2008-07-29 | 1 | -0/+1 | |
| | | | | | | | | | | | | | - bugfix: no error was reported if the target of a $IncludeConfig could not be accessed. - added testbed for common config errors | |||||
| * | | enhanced configuration file error reporting and verification | Rainer Gerhards | 2008-07-29 | 1 | -0/+2 | |
| |/ | | | | | | | | | | | | - enhanced config file checking - no active actions are detected - added -N rsyslogd command line option for a config validation run (which does not execute actual syslogd code and does not interfere with a running instance) - somewhat improved emergency configuration. It is now also selected if the config contains no active actions - rsyslogd error messages are now reported to stderr by default. can be turned off by the new "$ErrorMessagesToStderr off" directive Thanks to HKS for suggesting these new features. | |||||
| * | bugfix: machine certificate was required for client even in TLS anon mode | Rainer Gerhards | 2008-07-02 | 1 | -0/+1 | |
| | | | | | | | Reference: http://bugzilla.adiscon.com/show_bug.cgi?id=85 The fix also slightly improves performance by not storing certificates in client sessions when there is no need to do so. | |||||
| * | added (internal) error codes to error messages | Rainer Gerhards | 2008-06-27 | 1 | -3/+9 | |
| | | | | | | Also added redirector to web description of error codes closes bug http://bugzilla.adiscon.com/show_bug.cgi?id=20 | |||||
| * | changed Rcv-Interface in tcpsrv subsystem | Rainer Gerhards | 2008-06-23 | 1 | -0/+3 | |
| | | | | | | | It is now iRet based. This enables us to communicate more in-depth information to the upper peers. This is needed to handle the EGAIN case on rcv (not yet implemented) | |||||
| * | implemented wildcards inside certificate name check authentication | Rainer Gerhards | 2008-05-27 | 1 | -0/+2 | |
| | | ||||||
| * | client now provides cert even if it is not signed by one of the server's ↵ | Rainer Gerhards | 2008-05-27 | 1 | -0/+2 | |
| | | | | | trusted CAs (gtls) | |||||
| * | added certificate validity date check (gtls) | Rainer Gerhards | 2008-05-26 | 1 | -0/+3 | |
| | | ||||||
| * | added gtls name authentication based on common name (inside DN) | Rainer Gerhards | 2008-05-26 | 1 | -0/+1 | |
| | | | | | also changed fingerprint gtls auth mode to new format fingerprint | |||||
| * | implemented x509/certvalid "authentication" | Rainer Gerhards | 2008-05-21 | 1 | -0/+1 | |
| | | ||||||
| * | first implementation of TLS server client authentication check | Rainer Gerhards | 2008-05-19 | 1 | -0/+2 | |
| | | | | | | | | The TLS server now checks the client fingerprint. This works, but is highly experimental. Needs to be refined for practice. Also: - implemented permittedPeers helper construct to store names - changed omfwd implementation to use new permittedPeers | |||||
| * | improved error messages and corrected fingerprint format | Rainer Gerhards | 2008-05-19 | 1 | -1/+1 | |
| | | ||||||
| * | added first rough ability to authenticate the server against its certificate | Rainer Gerhards | 2008-05-16 | 1 | -0/+3 | |
| | | | | | | | | | | | This is very experimental and needs some more work. It probably even segfaults - but the base code is there and running. The rest is refinement. While working on this, I did these two bugfixes: - bugfix: small mem leak in omfwd on exit (strmdriver name was not freed) - bugfix: $ActionSendStreamDriver had no effect | |||||
| * | server's X509 cert fingerprint is obtained by client on connect | Rainer Gerhards | 2008-05-08 | 1 | -0/+1 | |
| | | ||||||
| * | added a bit of doc (at least something...) | Rainer Gerhards | 2008-05-08 | 1 | -0/+1 | |
| | | ||||||
| * | server handshake now works with nonblocking sockets | Rainer Gerhards | 2008-04-30 | 1 | -0/+1 | |
| | | ||||||
| * | ability to load proper select netstrm driver | Rainer Gerhards | 2008-04-29 | 1 | -1/+2 | |
| | | ||||||
| * | added $ActionSendStreamDriverMode config directive | Rainer Gerhards | 2008-04-28 | 1 | -0/+1 | |
| | | ||||||
| * | added select() driver for GnuTls | Rainer Gerhards | 2008-04-24 | 1 | -0/+1 | |
| | | ||||||
| * | made this compile with the new abstracted socket server calls | Rainer Gerhards | 2008-04-24 | 1 | -3/+0 | |
| | | | | | | undid some invalid changes during merge plus did a few wrappers. Compiles, but does not yet work. | |||||
| * | Merge branch 'sock-abstract' into tls | Rainer Gerhards | 2008-04-24 | 1 | -0/+11 | |
| |\ | | | | | | | | | | | | | | | | | | | Conflicts: runtime/Makefile.am runtime/netstrm.c runtime/nsd.h runtime/nsd_ptcp.c runtime/rsyslog.h | |||||
| | * | removed listener array from inidividual netstrm (mostly finished) | Rainer Gerhards | 2008-04-23 | 1 | -0/+1 | |
| | | | ||||||
| | * | added new netstrms class | Rainer Gerhards | 2008-04-23 | 1 | -0/+2 | |
| | | | | | | | | | netstrms is at the top layer of the socket abstraction | |||||
| | * | objects for receive-side socket abstraction specified | Rainer Gerhards | 2008-04-23 | 1 | -0/+5 | |
| | | | | | | | | | | | | | | | The objects for receiver-side socket abstraction have now be specified. The project as whole does not yet compile and definitely not run, but I'd like to commit some milestones along this way. | |||||
| * | | first working TLS-enabled plain TCP sender | Rainer Gerhards | 2008-04-18 | 1 | -0/+1 | |
| | | | | | | | | | | | implemented a first working version of a TLS-enabled plain TCP sender (but, of course, the implementation is insecure as it is) | |||||
| * | | Merge branch 'master' into tls | Rainer Gerhards | 2008-04-18 | 1 | -0/+1 | |
| |\ \ | ||||||
| | * | | bugfix: a recent change effectively disabled error messages | Rainer Gerhards | 2008-04-18 | 1 | -0/+1 | |
| | | | | ||||||
| * | | | set stage for TLS client implementation | Rainer Gerhards | 2008-04-18 | 1 | -0/+3 | |
| | |/ |/| | ||||||
| * | | converted netstrm into generic netstrm and the nsd_pctp driver | Rainer Gerhards | 2008-04-18 | 1 | -0/+3 | |
| | | | ||||||
| * | | imported tcp module from librelp as basis for new stream class | Rainer Gerhards | 2008-04-17 | 1 | -0/+5 | |
| | | | | | | | | | | | we got permission to include the tcp module from librelp copyright holders | |||||
| * | | added new "netstrm" class (not yet implemented) | Rainer Gerhards | 2008-04-17 | 1 | -1/+2 | |
| |/ | ||||||
| * | completed better modularity of runtime | Rainer Gerhards | 2008-04-17 | 1 | -4/+4 | |
| | | | | | | | | | | | - added the ability to specify an error log function for the runtime - removed dependency of core runtime on dirty.h Note that it is "better" modularity, not perfect. There is still work to do, but I think we can for the time being proceed with other things. | |||||
| * | moved "glblModPath" variable inside global data pool | Rainer Gerhards | 2008-04-17 | 1 | -0/+11 | |
| | | | | | (but still as a variable, not part of glbl object) | |||||
| * | modularization work | Rainer Gerhards | 2008-04-17 | 1 | -1/+3 | |
| | | | | | | cleanup + created an abstract class for global data items and moved glblGetWorkDir to it | |||||
| * | prevented segfault during runtime library init phase | Rainer Gerhards | 2008-04-16 | 1 | -0/+1 | |
| | | ||||||
| * | some more cleanup | Rainer Gerhards | 2008-04-16 | 1 | -0/+16 | |
| | | | | | | reduced dependencies, moved non-runtime files to its own directory except for some whom's status is unclear | |||||
| * | provided ability to initialize the runtime | Rainer Gerhards | 2008-04-16 | 1 | -0/+6 | |
| | | ||||||
| * | moved files to the runtime | Rainer Gerhards | 2008-04-16 | 1 | -0/+272 | |
| there are still some files left which could go into the runtime, but I think we will delete most of them once we are done with the full modularization. | ||||||
 |
index : rsyslog.git | |
| rsyslog development for Lumberjack - various unofficial and potentially rebased branches | Miloslav Trmac |
| summaryrefslogtreecommitdiffstats |