1
0
mirror of synced 2026-10-24 00:28:57 +03:00

Commit Graph

  • a210b43e11 Give the ARM cross-compile job's build step its own time limit master yhirose 2026-10-22 18:00:44 -04:00
  • 7d28b64a03 Build BoringSSL with clang in the Linux CI job yhirose 2026-10-22 17:40:53 -04:00
  • 97a972fcef Give the issue-2431 job's test step its own time limit yhirose 2026-10-22 17:40:53 -04:00
  • 276cf08e84 Refuse a proxied path that does not start with a slash (#2638) metsw24-max 2026-10-23 02:31:58 +05:30
  • b4b24589ad Refuse to serve a path segment ending in a dot or a space yhirose 2026-10-22 11:16:27 -04:00
  • 70bed02bc9 Bound how much of an unread request body the server skips yhirose 2026-10-22 10:59:57 -04:00
  • 5db950e1e1 Normalize the extension of a user MIME type mapping when it is set yhirose 2026-10-22 10:21:06 -04:00
  • b8ae3e43d5 Answer 500 to an exception the exception handler gives no status yhirose 2026-10-22 10:01:48 -04:00
  • 64b5c68a46 Run RequestWithoutContentLengthOrTransferEncoding on Windows too yhirose 2026-10-22 09:32:29 -04:00
  • 1c91d54b7c Read no body from an unframed request in builds without TLS too yhirose 2026-10-22 08:50:17 -04:00
  • fbd3e2cc9b Answer 501 to a request with a transfer coding besides chunked yhirose 2026-10-22 07:58:28 -04:00
  • 32a0ca8b35 Ignore Range on requests other than GET and HEAD yhirose 2026-10-22 07:31:50 -04:00
  • b83b385ed4 Match trusted proxies as IP addresses yhirose 2026-10-22 00:37:09 -04:00
  • f297616584 Note that TLS settings do not pass through a plain HTTP redirect hop yhirose 2026-10-22 00:10:57 -04:00
  • 1e35f39675 Send the chunk overhead test requests whole before they are refused yhirose 2026-10-22 00:10:34 -04:00
  • e121385910 Reconnect after a TLS setting changes on a kept-alive client yhirose 2026-10-22 00:08:44 -04:00
  • fc37d3eae1 Add Server::set_compress() to turn off handler response compression yhirose 2026-10-21 23:34:48 -04:00
  • 3b8b9cf9d5 Parse a CA store PEM through a NUL-terminated copy on Mbed TLS yhirose 2026-10-21 23:28:19 -04:00
  • 3599533c24 Drop invalid response header fields before any header writer yhirose 2026-10-21 23:16:45 -04:00
  • 247a2abe4a Bound the bytes around chunk data in chunked transfer coding yhirose 2026-10-21 23:01:39 -04:00
  • 5bcfea7b90 Release v0.63.0 v0.63.0 latest yhirose 2026-10-21 22:26:15 -04:00
  • fd71c11e0e Verify the server certificate during the handshake on OpenSSL yhirose 2026-10-21 22:13:22 -04:00
  • fd5dd79bd2 Ready PSA Crypto before parsing a CA store on Mbed TLS 4.x yhirose 2026-10-21 17:16:11 -04:00
  • 6304fc6abb Keep the system CAs out when a custom CA comes through empty yhirose 2026-10-21 17:11:52 -04:00
  • 8772d10c90 Serve only canonical paths from mount points yhirose 2026-10-21 16:55:43 -04:00
  • 98647e059d Require client certificates once update_certs_pem() loads a client CA yhirose 2026-10-21 16:41:12 -04:00
  • 7a9cee0e05 Drop the SNI of a failed handshake on the Mbed TLS server yhirose 2026-10-21 16:29:56 -04:00
  • 71b5f0a1c8 Read a NUL-terminated client CA in SSLServer::PemMemory yhirose 2026-10-21 16:19:15 -04:00
  • 67b88030e8 End the stream at the header section for HEAD, 204 and 304 in open_stream (#2636) metsw24-max 2026-10-21 03:01:45 +05:30
  • 41c85c0733 Close the connection on an answered upgrade body in process_request (#2637) metsw24-max 2026-10-21 02:38:21 +05:30
  • 74ef3c4218 Release v0.62.0 v0.62.0 yhirose 2026-10-18 20:47:10 -04:00
  • f17d314979 Send the client's credentials and proxy target on a stream request yhirose 2026-10-18 20:32:27 -04:00
  • ebcd5551fd Report each failed client request to the error logger once yhirose 2026-10-18 19:21:41 -04:00
  • d99c697be6 Report a response body over the limit as ExceedMaxPayloadSize yhirose 2026-10-18 18:40:23 -04:00
  • 344aceb446 Run the pong timeout tests in the main test suite yhirose 2026-10-18 18:03:08 -04:00
  • 696b94b5ed Wake a WebSocket read on a pong timeout on every platform yhirose 2026-10-18 17:23:05 -04:00
  • 801bf2e0d2 Let SSEClient::stop() interrupt a blocked read yhirose 2026-10-18 14:01:59 -04:00
  • 03fa890a2e Revert "Let SSEClient::stop() interrupt a blocked read" yhirose 2026-10-18 13:19:15 -04:00
  • 1d5f0323b1 Run the pre-routing handler once for an unmatched WebSocket upgrade yhirose 2026-10-18 12:41:23 -04:00
  • cc9d67404e Dispatch an SSE event with an empty type as "message" yhirose 2026-10-18 12:41:23 -04:00
  • 2e3cb0f985 Parse chunked trailers when the stream API decompresses yhirose 2026-10-18 12:41:23 -04:00
  • 07edfb86b4 Do not report a body that ends with the connection as an error yhirose 2026-10-18 12:41:23 -04:00
  • 106edcf606 Return a 3xx without a Location instead of failing the redirect yhirose 2026-10-18 12:41:23 -04:00
  • 906a7bf04e Keep an accepting verifier from overriding Mbed TLS verification yhirose 2026-10-18 12:41:23 -04:00
  • 3744227de2 Let SSEClient::stop() interrupt a blocked read yhirose 2026-10-18 12:41:23 -04:00
  • 30879bb48b Honor the PEM lengths in PemMemory yhirose 2026-10-18 12:41:23 -04:00
  • 9bfd2ddf1c Fix README and docs pages that no longer match the code yhirose 2026-10-18 10:13:57 -04:00
  • 94cf1b5c9a Support HTTP proxies in WebSocketClient (#2635) Kim, Hyuk 2026-10-18 22:24:59 +09:00
  • 7220bdb8b2 Pass the read state to curl by address in the Expect test yhirose 2026-10-18 07:44:30 -04:00
  • 7234944098 Fix the warnings left in the 32-bit, BoringSSL and MSVC builds yhirose 2026-10-18 00:36:18 -04:00
  • e97165b5dc Spawn a dynamic thread when queued jobs outnumber idle threads yhirose 2026-10-17 23:55:12 -04:00
  • 062666f3a1 Fix the warnings clang gives when building the tests yhirose 2026-10-17 23:21:28 -04:00
  • e4b3865387 Revert "Encode the characters RFC 3986 doesn't allow in a client path" yhirose 2026-10-17 09:00:41 -04:00
  • 28f39225fc Encode the characters RFC 3986 doesn't allow in a client path yhirose 2026-10-17 07:06:24 -04:00
  • 87940631e2 Check the client certificate in the PEM memory test and skip the CA dir Claude 2026-10-17 05:00:23 +00:00
  • 4836eb0fa5 Check both outcomes in the update_certs_pem client cert test Claude 2026-10-17 03:56:21 +00:00
  • d00af3f4e6 Test client cert rejection for PEM memory servers and update_certs_pem Claude 2026-10-17 03:35:14 +00:00
  • 958f9aa82b Take resumable test sessions from the new-session callback yhirose 2026-10-17 00:32:39 -04:00
  • f1c5068ee8 Build the tests that throw only with exceptions yhirose 2026-10-17 00:32:39 -04:00
  • 3b9931a85c Keep time_point::max() clear of the Windows max macro yhirose 2026-10-17 00:32:29 -04:00
  • 2594f17983 Drop tests the merge duplicated yhirose 2026-10-17 00:21:49 -04:00
  • 0b382e353e Merge origin/master yhirose 2026-10-17 00:08:39 -04:00
  • cf409f7bab Note how multipart names with backslashes are read yhirose 2026-10-16 23:52:15 -04:00
  • 26febe0769 Say why the Digest uri is in origin form yhirose 2026-10-16 23:52:15 -04:00
  • a09e00b03d Do not resume sessions on an OpenSSL context with a verify callback yhirose 2026-10-16 23:52:15 -04:00
  • 8ca46a4db5 Bound the number of interim responses a client skips yhirose 2026-10-16 23:52:15 -04:00
  • 560126bffc Accept a Unix socket path with "//" in it yhirose 2026-10-16 23:52:15 -04:00
  • be5043a240 Replace the Content-Type along with the content yhirose 2026-10-16 23:52:15 -04:00
  • 7bf66db6ca Close the connection after a response body with no length yhirose 2026-10-16 23:52:15 -04:00
  • 645bdab90e Reject a certificate whose verify callback throws yhirose 2026-10-16 23:52:15 -04:00
  • 567e099361 Keep a verify callback alive while a handshake runs it yhirose 2026-10-16 23:52:15 -04:00
  • c52881cb1f Keep client certificates required after setting a verify callback yhirose 2026-10-16 23:52:15 -04:00
  • bb13a3bc76 Rotate ticket keys of the size BoringSSL and LibreSSL take yhirose 2026-10-16 23:52:15 -04:00
  • a1d4ccedea Reset the client's TLS error per attempt and read it under the request lock Claude 2026-10-17 02:40:23 +00:00
  • 28741cb9d1 Keep the TLS error behind a failed read or write in the client's Result Claude 2026-10-17 01:54:23 +00:00
  • 9a08b01ed7 Turn off session resumption on wolfSSL servers verifying clients yhirose 2026-10-16 21:38:40 -04:00
  • a7fce92ed0 Let a client resume its session with an OpenSSL mTLS server yhirose 2026-10-16 21:38:40 -04:00
  • 489fe8e504 Give a redirect client the CAs its client trusts yhirose 2026-10-16 21:38:40 -04:00
  • 9724ea6b2e Skip the CN next to a DNS SAN on Mbed TLS and wolfSSL yhirose 2026-10-16 21:38:40 -04:00
  • bf08ec763c Sign the request-target sent in a Digest uri yhirose 2026-10-16 21:38:40 -04:00
  • f29721c7d8 Treat 0 as no limit for the remaining limits yhirose 2026-10-16 21:38:40 -04:00
  • ad6c851d19 Bound an SSE stream by event only yhirose 2026-10-16 21:38:40 -04:00
  • 35342285a0 Serve files without mapping them on POSIX yhirose 2026-10-16 21:38:40 -04:00
  • a10338a6ee Unescape quoted Content-Type parameters and escape backslashes yhirose 2026-10-16 21:38:40 -04:00
  • aa0a588ed5 Answer WebSocket control frames from one place yhirose 2026-10-16 21:38:40 -04:00
  • fb439bda2e Split authentication challenges with split_unquoted yhirose 2026-10-16 21:38:40 -04:00
  • 079f2176af Put Params before the fragment of a client path yhirose 2026-10-16 21:38:40 -04:00
  • f18f0b7576 Close the client connection after faulty response framing yhirose 2026-10-16 21:38:40 -04:00
  • b4ef313cc7 Accept a write error for a client rejected after the TLS 1.3 handshake Claude 2026-10-17 01:04:13 +00:00
  • 9a3c1febee Stop copying CA certificates on Mbed TLS yhirose 2026-10-16 19:29:38 -04:00
  • 6529de1a91 Declare tls::set_verify_callback() for the split test build Claude 2026-10-16 23:29:35 +00:00
  • 43c9c6ddf3 Frame response bodies in one place yhirose 2026-10-16 19:13:12 -04:00
  • bc837b87fc Bound the request head by the read timeout as a whole yhirose 2026-10-16 19:13:03 -04:00
  • 8f21292d16 Tidy the client certificate test helpers Claude 2026-10-16 23:02:50 +00:00
  • 589b028022 Build the client-cert-still-required tests on the existing helpers Claude 2026-10-16 22:48:39 +00:00
  • aa3aeb8ec3 Name the Mbed TLS verify-mode helper like the other backends Claude 2026-10-16 22:25:51 +00:00
  • 300c084d6f Derive the TLS verify mode from one place per backend Claude 2026-10-16 21:12:47 +00:00
  • ae169c6253 Address review of the audit fixes yhirose 2026-10-16 16:39:08 -04:00
  • ceedf6ac22 Fuzz the buffered path of the line reader yhirose 2026-10-16 16:39:00 -04:00
  • 66266b80c6 Document regex route, file handler and WebSocket Origin caveats yhirose 2026-10-16 16:39:00 -04:00