7ca2a8213d
h2load: Enable --data for HTTP/3
2021-08-21 18:33:39 +09:00
1c8e5046e5
Compile with the latest ngtcp2
2021-08-21 18:33:39 +09:00
6b4be30c64
Cap --window-bits to 26 for QUIC
2021-08-21 18:33:39 +09:00
6ce952ad4a
Set X25519 as default
2021-08-21 18:33:39 +09:00
5ae62dd9d7
Cap --window-bits to 23 for QUIC
2021-08-21 18:33:39 +09:00
51987107a2
Compile with the latest ngtcp2
2021-08-21 18:33:39 +09:00
e4a8c4813c
Compile with the latest ngtcp2
2021-08-21 18:33:39 +09:00
3d708f7dc4
Compile with the latest ngtcp2
2021-08-21 18:33:39 +09:00
10ec8c9558
Compile with the latest ngtcp2
2021-08-21 18:33:38 +09:00
3900f758ea
QUIC needs termination without session
2021-08-21 18:33:38 +09:00
a3346fbad8
Compile with latest ngtcp2
2021-08-21 18:33:38 +09:00
813d5e1ddf
Compile with latest ngtcp2
2021-08-21 18:33:38 +09:00
acb661df72
Fix bug for platform which does not have SOCK_NONBLOCK
2021-08-21 18:33:38 +09:00
4bc7710de9
Fix compile error
2021-08-21 18:33:38 +09:00
b8c1f4f138
Compile with latest ngtcp2
2021-08-21 18:33:38 +09:00
387b67472c
Compile latest ngtcp2 crypto lib
2021-08-21 18:33:38 +09:00
b2c099bac6
Use ngtcp2_conn_handle_expiry
2021-08-21 18:33:38 +09:00
1acebb1cc4
draft-28
2021-08-21 18:33:38 +09:00
8d89a8dcb0
Assert ndatalen
2021-08-21 18:33:38 +09:00
a60a34331b
Revert "Ensure complete packet is written"
...
This reverts commit c19046b09f8e66713f0e067f986ed92d676eb6b6.
2021-08-21 18:33:38 +09:00
749015eb86
Ensure complete packet is written
2021-08-21 18:33:38 +09:00
4b45142e72
Fix compile error with the latest ngtcp2
2021-08-21 18:33:38 +09:00
2722119776
Handle stream limit increment
2021-08-21 18:33:38 +09:00
0b61e46f95
draft-25
2021-08-21 18:33:38 +09:00
5c0da486b9
Remove unused member function declaration
2021-08-21 18:33:38 +09:00
9701e5e6e4
Fix compile error
2021-08-21 18:33:38 +09:00
a93eb8b8f5
Optimize QUIC write
2021-08-21 18:33:38 +09:00
c591ab5e6f
Only count STREAM data as bytes_total
2021-08-21 18:33:38 +09:00
b3fbebed55
Use correct type
2021-08-21 18:33:38 +09:00
4621f88441
Follow ngtcp2 API update
2021-08-21 18:33:38 +09:00
747edb3a99
quic draft-24
2021-08-21 18:33:38 +09:00
73fd20a608
Add SSLKEYLOGFILE support
2021-08-21 18:33:38 +09:00
78c2c33b9e
Compile with the latest ngtcp2
2021-08-21 18:33:38 +09:00
610add1f59
Send SNI
2021-08-21 18:33:38 +09:00
f7414700f4
Small adjustment of successful HTTP/3 error code
...
Non-zero successful error code is a bit annoying because ngtcp2 does
not know it. Enforcing successful application error code to 0 is a
lot simpler.
2021-08-21 18:33:38 +09:00
53a860a5bf
Simplify write_quic
2021-08-21 18:33:38 +09:00
1aae450303
Handle sending just fine
2021-08-21 18:33:38 +09:00
b3a2f8837c
Avoid setting 0 to repeat field
2021-08-21 18:33:38 +09:00
33d2a93294
Add missing acked_stream_data_offset callback
2021-08-21 18:33:38 +09:00
2da0db70de
Fix return value
2021-08-21 18:33:38 +09:00
ff7067f3a3
Compile with the latest ngtcp2 and ngtcp2_crypto_openssl
2021-08-21 18:33:38 +09:00
6b8b152444
Remove error handling which does not happen
2021-08-21 18:33:38 +09:00
3dbe3b3e7f
Follow ngtcp2 API changes and use libngtcp2_crypto_openssl
2021-08-21 18:33:38 +09:00
7aa4bff97b
quic: Support TLS_AES_128_CCM_SHA256
2021-08-21 18:33:38 +09:00
6002fac9f1
h2load: Add --tls13-ciphers option
2021-08-21 18:33:38 +09:00
c3eb7e1634
Handle preferred address
2021-08-21 18:33:38 +09:00
05a6ee2b49
Show ngtcp2 debug log with --verbose
2021-08-21 18:33:38 +09:00
94d76c042d
h2load: Add --groups option
2021-08-21 18:33:38 +09:00
23ccaa6191
Always call write_quic when timer expires
2021-08-21 18:33:38 +09:00
476e9d0a48
h3-22
2021-08-21 18:33:38 +09:00
7cd5ed6fc6
Handle Retry
2021-08-21 18:33:38 +09:00
750c23f319
quic: Configure settings with options
2021-08-21 18:33:38 +09:00
bb36df8b2e
h2load: Fix possible deadlock
2021-08-21 18:33:38 +09:00
9c748d20d5
[WIP] Add QUIC to h2load
2021-08-21 18:33:38 +09:00
80c9c705b8
Merge pull request #1607 from nghttp2/dnf
...
Add "dnf" (= "do not forward") parameter to backend option
2021-08-14 17:35:20 +09:00
138419d232
Add "dnf" (= "do not forward") parameter to backend option
2021-08-14 17:16:21 +09:00
c2d4a53b67
Fix prototype mismatch for function 'file_read_callback'
...
Summary:
The [data_flags](https://github.com/lhuang04/nghttp2/blob/master/src/HttpServer.cc#L1078 ) is defined as `uint32_t*` in definition, but delared as [int*](https://github.com/lhuang04/nghttp2/blob/master/src/HttpServer.h#L245 ) in the prototype.
```
stderr: error: no previous prototype for function 'file_read_callback' [-Werror,-Wmissing-prototypes]
ssize_t file_read_callback(nghttp2_session *session, int32_t stream_id,
^
```
Test Plan:
Reviewers:
Subscribers:
Tasks:
Tags:
2021-08-07 07:24:21 -07:00
29cbf8b83f
clang-format-12
2021-08-04 15:04:58 +09:00
fa16e66a6d
nghttpx: Fix max distance in weight group/address cycle comparison
2021-07-14 23:26:33 +09:00
40af31da4c
nghttpx: Set connect_blocker and live_check after shuffling addresses
2021-07-14 23:09:28 +09:00
43a47aa08b
Do not return HPE_USER from where it is prohibited
2021-05-13 13:59:44 +09:00
cef458c31c
Replace black-list with block-list
...
nghttpx --no-http2-cipher-black-list and
--client-no-http2-cipher-black-list are deprecated and replaced with
--no-http2-cipher-block-list and --client-no-http2-cipher-block-list
respectively.
2021-04-02 22:35:37 +09:00
617a5766a2
Replace master with main
2021-04-02 22:08:19 +09:00
f1d6733554
Initialize Config rps field
2021-03-10 13:45:20 +09:00
5f3bcb1f58
Add precious variables for libev and jemalloc and use JEMALLOC_CFLAGS
2021-03-06 22:32:17 +09:00
e406a2c15e
Update doc
2021-02-23 17:41:27 +09:00
6cdc13d6c6
h2load: Add --rps option
2021-02-23 16:40:17 +09:00
92944f7847
h2load: Allow unit in -D option
2021-02-23 15:31:54 +09:00
276792a812
Remove unnecessary function
...
on_stream_close is called after on_frame_not_send_callback with
success=false without this function.
2021-02-23 14:32:43 +09:00
2f2b211766
Add LIBTOOL_LDFLAGS configure variable
2021-02-21 21:32:48 +09:00
40679cf638
Merge pull request #1553 from nghttp2/nghttpx-fix-accesslog-method
...
nghttpx: Remove trailing white space after $method log variable
2021-02-08 23:02:19 +09:00
50a1121d81
nghttpx: Remove trailing white space after $method log variable
2021-02-08 22:22:05 +09:00
5b9892a902
docs: asio: fix some typos
...
Really just a s/pusedo/pseudo/g and s/exluced/excluded/g.
2021-01-15 00:39:39 +01:00
d32e20bcaa
nghttpx: Make sure that Pool gets cleared when all buffers are returned
2020-12-16 23:27:58 +09:00
81fb015391
nghttpx: Choose ECDSA cert if compatible signature algorithm available
2020-12-13 23:40:43 +09:00
6787423edc
nghttpx: Add workaround to include ':' in backend pattern
2020-11-27 22:15:46 +09:00
da7959c2e8
nghttpx: Deal with the case when h2 backend is retired before it is initialized
2020-11-15 11:19:07 +09:00
4e3c61ef4d
nghttpx: Add accesslog variables to record request path without query
...
This commit the following variables to construct request line without
including query component:
* $method
* $path
* $path_without_query
* $protocol_version
2020-09-19 23:58:37 +09:00
7b4de401d2
nghttpx: Check worker wide blocker before creating new downstream connection
2020-09-19 23:22:14 +09:00
7df73a5d90
nghttpx: mrb_run was removed
2020-09-02 22:12:45 +09:00
d5550e946d
Amend f1d8547b29
...
Better handling of tls and early data buffer
2020-07-14 19:47:08 +09:00
62411f5a6e
nghttpx: Set client_handler to special frontend objects
2020-07-14 01:13:29 +09:00
e9465f0ee5
Revert "nghttpx: Fix ubsan error"
...
This reverts commit 14dfeee4ed
2020-07-14 01:13:29 +09:00
14dfeee4ed
nghttpx: Fix ubsan error
2020-07-14 00:12:07 +09:00
f1d8547b29
nghttpx: Fix stall when TLS follows after proxy protocol
...
This fixes that nghttpx stalls when TLS handshake and data follow
after proxy protocol header and no extra read notification is
triggered (e.g., just small 1 HTTP request).
2020-07-13 23:39:17 +09:00
abe80e371e
nghttpx: Fix logging integer
2020-06-10 20:56:33 +09:00
854e9fe395
nghttpx: Always call init_forwarded_for
...
Always call init_forwarded_for to get the default when source address
in PROXY protocol is ignored. This ensures that forwarded header
field has the same value as x-forwarded-for.
2020-04-18 17:16:45 +09:00
49cd8e6e73
nghttpx: Add PROXY-protocol v2 support
2020-04-18 17:16:30 +09:00
4922bb41d6
static_cast size parameter in StringRef constructor to size_t
2020-03-31 00:54:08 -07:00
aad8697575
Fix get_x509_serial for long serial numbers
2020-03-31 00:19:06 -07:00
5e13274b7c
Fix typo
2019-12-21 11:39:05 +09:00
e0d7f7de5e
h2load: Allow port in --connect-to
2019-12-21 11:39:05 +09:00
df575f968f
h2load: add --connect-to option
2019-12-21 11:39:05 +09:00
29042f1c95
priority_spec::valid(): remove const qualifier from return value
...
gcc generates warning:
* type qualifiers ignored on function return type [-Wignored-qualifiers]
2019-10-29 11:28:26 +01:00
6f967c6ef3
Fix errors reported by coverity scan
2019-09-21 13:45:20 +09:00
fe8946ddc7
nghttpx: Fix bug that mruby is incorrectly shared between backends
...
Previously, mruby context is wrongly shared by multiple patterns if
the underlying SharedDownstreamAddr is shared by multiple
DownstreamAddrGroups. This commit fixes it.
2019-09-16 22:25:06 +09:00
f8933fe504
nghttpx: Reconnect h1 backend if it lost connection before sending headers
...
This is the second attempt. The first attempt was
8a59ce6d37
2019-09-07 18:20:24 +09:00
5080db84e2
Revert "nghttpx: Reconnect h1 backend if it lost connection before sending headers"
...
This reverts commit 8a59ce6d37
2019-09-06 22:01:03 +09:00
053c7ac588
nghttpx: Returns 408 if backend timed out before sending headers
2019-09-03 00:29:01 +09:00
8a59ce6d37
nghttpx: Reconnect h1 backend if it lost connection before sending headers
2019-09-03 00:28:21 +09:00
f2fde180cd
Remove redundant null check before delete
...
Reported in https://github.com/nghttp2/nghttp2/issues/1384
2019-08-19 22:27:32 +09:00
95efb3e19d
Don't read too greedily
2019-08-14 11:44:28 +09:00
319d5ab1c6
nghttpx: Fix request stall
...
Fix request stall if backend connection is reused and buffer is full.
2019-08-06 20:50:29 +09:00
4f7aedc9d2
cmake: Support building nghttpx with systemd
2019-07-29 13:55:05 +03:00
7a5908933e
Fix clang-8 warning
2019-06-22 17:44:16 +09:00
ee44313445
Fix FPE with default backend
2019-06-11 23:15:01 +09:00
abef9b90ef
Fix log-level is not set with cmd-line or configuration file
2019-06-11 23:13:43 +09:00
b7220f075c
cmake: Remove SPDY related files
2019-06-08 00:23:17 +09:00
77f1c872b1
nghttpx: Fix unchanged log level on configuration reload
...
Previously, if log-level is not mentioned in configuration file and
reload happens, the log level was not set to the default value NOTICE.
Instead, the log level stayed the same. This commit fixes this bug.
2019-06-05 21:17:23 +09:00
b0f5e5cc79
Implement daemon() using fork() for OSX
2019-05-30 23:22:44 +09:00
2e1975ddf6
clang-format-8
2019-05-18 10:28:35 +09:00
4fca2502d8
nghttpx: Ignore Content-Length and Transfer-Encoding in 1xx or 200 to CONNECT
...
A well known server sends content-length: 0 in 101 response. RFC 7230
says Content-Length or Transfer-Encoding in 200 response to CONNECT
request: https://tools.ietf.org/html/rfc7230#section-3.3.3
2019-05-17 22:58:26 +09:00
0288093caf
Fix llhttp_get_error_pos usage
...
It returns NULL if return value is HPE_OK.
2019-04-21 00:07:11 +09:00
c64d2573dc
Replace http-parser with llhttp
...
llhttp does not include URL parser. We extracted URL parser code from
http-parser and put it under third-party/url-parser.
llhttp bd3d224eb8cdc92c6fc8f508d7bbe0ba266e8e92
2019-04-20 18:42:30 +09:00
f028cc4392
clang-format
2019-04-18 23:37:48 +09:00
cbba1ebf8f
asio: support boost-1.70
...
In boost 1.70, deprecated get_io_context() has finally been removed.
Introduce GET_IO_SERVICE macro that based on boost version uses
old get_io_service() interface (boost < 1.70), or get_executor().context()
for boost 1.70+.
Commit based idea seen in monero-project/monero@17769db946
2019-04-18 12:35:54 +02:00
a35059e3f1
nghttpx: Fix bug that altered authority and path affect backend selection
...
Fix bug that altered authority and path by per-pattern mruby script
affect backend selection on retry.
2019-04-16 22:18:30 +09:00
5a30fafdda
Merge branch 'nghttpx-fix-chunked-request-stall'
2019-04-16 00:26:18 +09:00
2cff8b43cf
nghttpx: Fix bug that chunked request stalls
2019-04-15 23:58:30 +09:00
be96654d56
nghttpx: Don't log authorization request header field value with -LINFO
2019-04-15 22:59:26 +09:00
ec519f22dc
Merge pull request #1270 from baitisj/master
...
Fix for compilation against modern LibreSSL
2019-03-13 20:52:50 +09:00
371bc3a8f7
clang-format
2019-03-08 00:19:34 +09:00
f5feb16ef4
Merge pull request #1295 from bratkartoffel/fix-compile-boringssl
...
Fix compilation with boringssl
2019-02-20 00:13:00 +09:00
2591960e2f
Explicitly set install location when building shared libs
2019-02-06 10:26:30 -08:00
d93842db3e
nghttpx: Fix backend stall if header and request body are sent in 2 packets
2019-01-23 17:57:12 +09:00
8dc2b263ba
nghttpx: Use std::priority_queue
2019-01-22 00:01:17 +09:00
1ff9de4c87
nghttpx: Backend address selection with weight
2019-01-21 22:23:19 +09:00
34482ed4df
Fix compilation with boringssl
2019-01-18 20:12:57 +01:00
ab2aa5672b
Fix test failure
...
Now http_parser_parse_url returns nonzero if empty URI is given.
2019-01-17 23:16:49 +09:00
e9c9838cdc
nghttpx: Pool h1 backend connection per address
...
Pool HTTP/1.1 backend connection per address and reuse it only when
the next round robin index refers to this address. Previously if
there is a pooled connection, there is no round robin selection.
2019-01-14 22:20:58 +09:00
803d4ba948
Merge branch 'nghttpx-randomize-roundrobin-order'
2019-01-14 22:17:12 +09:00
732245e562
make clang-format
2019-01-12 00:11:31 +09:00
fdcdb21c38
nghttpx: Randomize backend address round robin order per thread
2019-01-11 22:36:45 +09:00
11d0533cfc
nghttpx: Ensure that cert serial does not exceed 20 bytes
2019-01-05 10:03:44 +09:00
5b2efc0a12
Fix getting long serial numbers for openssl < 1.1
...
From https://www.ietf.org/rfc/rfc5280.txt
> As noted in Section 4.1.2.2, serial numbers can be expected to
> contain long integers. Certificate users MUST be able to handle
> serialNumber values up to 20 octets in length. Conforming CAs MUST
> NOT use serialNumber values longer than 20 octets.
Without this, nghttpx will fatal.
jbraeg$ openssl x509 -in ~/test_certs/client.crt -serial -noout
serial=E0CFDFC7CEA10DF8AAF715C37FAEB410
jbraeg$ curl -k --key ~/test_certs/client.key --cert ~/test_certs/client.crt https://192.168.98.100:3000/ ; echo
curl: (56) Unexpected EOF
...
Assertion failed: n == b.size() (shrpx_tls.cc: get_x509_serial: 2051)
2019-01-03T20:25:21.289Z 1 1 f84316ae NOTICE (shrpx_log.cc:895) Worker process: [9] exited abnormally with status 0x06; exit status 0; signal Aborted(6)
2019-01-03T20:25:21.290Z 1 1 f84316ae NOTICE (shrpx.cc:4311) Shutdown momentarily
2019-01-03 13:20:29 -08:00
124c7848c0
nghttpx: Add missing return
2018-12-11 22:52:34 +09:00
f3f40840b3
nghttpx: Fix broken trailing slash handling
...
nghttpx allows a pattern with trailing slash to match a request path
without it. Previously, under certain pattern registration, this does
not work.
2018-12-09 17:07:28 +09:00
2c1570595e
Fix for compilation against modern LibreSSL
2018-12-02 13:30:42 -08:00
302abf1b46
h2load: Fix compile error with gcc
2018-11-23 14:39:51 +09:00
089a03be42
h2load: Write log file with write(2)
2018-11-23 13:08:38 +09:00
d1b3a83f59
h2load: add an option to write per-request logs
2018-11-23 12:11:00 +09:00
6800d317e7
added access to the number of the current server port
2018-11-23 10:56:21 +09:00
f51e696e4a
asio: Add stop() to listen_and_serve doc
2018-11-18 17:30:35 +09:00
a433b132fc
Merge pull request #1260 from nghttp2/h2load-non-final-response
...
h2load: Handle HTTP/1 non-final response
2018-11-15 17:32:15 +09:00
6cad1b243b
nghttpx: Write mruby send_info early
2018-11-15 10:17:47 +09:00
3c393dca58
nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
2018-11-15 10:17:41 +09:00
172924457f
h2load: Handle HTTP/1 non-final response
2018-11-15 10:13:19 +09:00
dcbe0c690f
nghttpx: Simplify move ctor and operator
2018-11-02 15:40:53 +09:00
2996c28456
nghttpx: Cleanup
2018-11-02 15:16:36 +09:00
42e8ceb656
nghttpx: Convert API status code to enum class
2018-11-02 14:14:48 +09:00
1daf9ce8b7
nghttpx: Convert WorkerEventType to enum class
2018-11-02 14:14:48 +09:00
d68edf56c0
nghttpx: Convert MemcachedStatusCode to enum class
2018-11-02 14:14:48 +09:00
0c4e9fef29
nghttpx: Convert memcached op to enum class
2018-11-02 14:14:48 +09:00
571404c6e8
nghttpx: Convert MemcachedParseState to enum class
2018-11-02 14:14:48 +09:00
4d562b773b
nghttpx: Convert LogFragmentType to enum class
2018-11-02 14:14:48 +09:00
e62258713e
nghttpx: Convert connection check status to enum class
2018-11-02 14:14:48 +09:00
4bd075defd
nghttpx: Convert Http2Session state to enum class
2018-11-02 14:14:48 +09:00
b46a324943
nghttpx: Convert FreelistZone to enum class
2018-10-17 14:19:58 +09:00
4bd44b9cdf
nghttpx: Convert dispatch state to enum class
2018-10-17 14:19:58 +09:00
1b42110d4f
nghttpx: Make Downstream state enum class
2018-10-17 14:19:58 +09:00
0735ec55f3
nghttpx: Convert shrpx_connect_proto to enum class
2018-10-17 14:19:58 +09:00
00554779e1
nghttpx: Convert DNSResolverStatus to enum class
2018-10-17 14:19:58 +09:00
0963f38935
nghttpx: Convert SerialEventType to enum class
2018-10-17 14:19:58 +09:00
1abfa3ca5f
nghttpx: Make TLS handshake state enum class
2018-10-17 08:52:27 +09:00
f2159bc2c1
nghttpx: Convert UpstreamAltMode to enum class
2018-10-17 08:38:55 +09:00
b0eb68ee9e
nghttpx: Convert shrpx_forwarded_node_type to enum class
2018-10-16 23:10:17 +09:00
e7b7b037f6
nghttpx: Convert shrpx_cookie_secure to enum class
2018-10-16 23:06:59 +09:00
5e4f434fd8
nghttpx: Convert shrpx_session_affinity to enum class
2018-10-16 23:03:17 +09:00
20ea964f2f
nghttpx: Convert shrpx_proto to enum class
2018-10-16 22:59:34 +09:00
d105619bc3
src: Remove extra braces if possible
2018-10-15 23:46:33 +09:00
ec5729b1fa
Use std::make_unique
2018-10-15 23:02:44 +09:00
46576178a3
Don't send Transfer-Encoding to pre-HTTP/1.1 clients
2018-10-14 22:57:54 +09:00
5e925f873e
Update doc
2018-10-14 22:57:11 +09:00
153531d4d0
nghttpx: Use the same type as standard stream operator<<
2018-10-07 22:19:00 +09:00
7c8cb3a0ce
nghttpx: Improve CONNECT response status handling
2018-10-04 12:04:15 +09:00
aeb92bbbe2
nghttpx: Add read/write-timeout parameters to backend option
2018-09-30 12:32:43 +09:00
fc7489e044
nghttpx: Fix mruby parameter validation
2018-09-30 12:30:19 +09:00
87ac872fdc
nghttpx: Update doc
2018-09-30 12:28:43 +09:00
c278adde7a
nghttpx: Log error when mruby file cannot be opened
2018-09-30 12:23:01 +09:00
f94d720909
Merge pull request #1234 from nghttp2/nghttpx-rfc8441
...
nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
2018-09-29 11:54:47 +09:00
02566ee383
nghttpx: Update doc
2018-09-29 11:42:37 +09:00
3002f31b1f
src: Add debug output for SETTINGS_ENABLE_CONNECT_PROTOCOL
2018-09-29 11:39:49 +09:00
d2a594a753
nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
2018-09-29 11:35:41 +09:00
a42faf1cc2
nghttpx: Write TLS alert during handshake
2018-09-23 18:01:38 +09:00
88ff8c69a0
Update mruby 1.4.1
2018-09-16 22:54:09 +09:00
a63558a1eb
nghttpx: Call OCSP_response_get1_basic only when OCSP status is successful
2018-09-16 22:19:27 +09:00
3575a1325e
nghttpx: Fix crash with plain text HTTP
2018-09-15 12:16:23 +09:00
9c824b87fe
nghttpx: Get rid of std::stringstream from Log
2018-09-14 22:58:48 +09:00
ed7c9db2a6
nghttpx: Add mruby env.tls_handshake_finished
2018-09-09 22:59:35 +09:00
5b42815afb
nghttpx: Strip incoming Early-Data header field by default
2018-09-09 22:37:22 +09:00
cfe7fa9a75
nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
2018-09-09 16:35:47 +09:00
cb8a9d58fd
src: Remove TLSv1.3 ciphers from DEFAULT_CIPHER_LIST
...
TLSv1.3 ciphers are treated differently from the ciphers for TLSv1.2
or earlier.
2018-09-09 15:53:04 +09:00
9b03c64f68
nghttpx: Should postpone early data by default
2018-09-08 19:22:30 +09:00
b8eccec62d
nghttpx: Disable OpenSSL anti-replay
2018-09-08 19:10:59 +09:00
9f21258720
Specify SSL_CTX_set_max_early_data and add an option to change max value
2018-09-08 17:59:28 +09:00
47f6012407
nghttpx: Add an option to postpone early data processing
2018-09-08 17:57:21 +09:00
770e44de4d
Implement draft-ietf-httpbis-replay-02
...
nghttpx sends early-data header field when forwarding requests which
are received in TLSv1.3 early data, and the TLS handshake is still in
progress.
2018-09-08 17:54:35 +09:00
2ab319c137
Don't hide error code from openssl
2018-09-08 17:54:35 +09:00
3992302432
Remove SSL_ERROR_WANT_WRITE handling
2018-09-08 17:54:35 +09:00
b30f312a70
Honor SSL_read semantics
2018-09-08 17:54:35 +09:00
Tatsuhiro Tsujikawa
Lucas Pardue
Tatsuhiro Tsujikawa
lhuang04
Jan Kundrát
Jacky Tian
lucas
Richard Wolfert
Andrew Penkrat
Adam Gołębiowski
Don
Simon Frankenberger
Josh Braegger
Jeff 'Raid' Baitis
dawg
Pedro Santos