Commit graph

77 commits

Author SHA1 Message Date
Gerhard Rieger
47b98aed7a Print CRL warning only once 2024-08-24 14:23:04 +02:00
Gerhard Rieger
ec0e1ca20c Reworked domain name resolution, centralized IPv4/IPv6 sorting 2024-08-24 14:21:35 +02:00
Gerhard Rieger
868998eb60 Mitigated regressions of 1.8.0.0 with TCP-LISTEN e.a. by making -4 the default 2024-08-24 14:20:32 +02:00
Gerhard Rieger
2ab4b232fc Again ported to NetBSD 2024-07-28 12:58:16 +02:00
Gerhard Rieger
c9ff62744f Corrections for better 32bit systems support, and some minor fixes 2023-11-13 20:08:23 +01:00
Gerhard Rieger
a846b94e6c Implementation of DCCP socket addresses 2023-11-06 22:01:50 +01:00
Gerhard Rieger
d605ab57f5 Fixed the end-close option, it just did not work 2023-11-06 21:23:27 +01:00
Gerhard Rieger
8641344c73 Renewed port to OpenBSD 2023-11-06 08:38:24 +01:00
Gerhard Rieger
5034b941bf Corrected order of OpenSSL set_cipher_list and use_certificate_chain_file 2023-11-06 08:20:01 +01:00
Gerhard Rieger
50b199dcd9 On bad parameter number print syntax; struct single pointers are now mostly called sfd 2023-11-05 22:19:10 +01:00
Gerhard Rieger
5eebca3a5b Internal: Reworked xioopts 2023-11-05 21:05:55 +01:00
Gerhard Rieger
c82e3df210 Options res-* now apply to whole open phase 2023-11-05 19:39:01 +01:00
Gerhard Rieger
277f0d755d Preferred IP version sorts getaddrionf() results 2023-11-05 13:59:14 +01:00
Gerhard Rieger
4e00a345b4 Mechanism for ai-* options; new option ai-addrconfig 2023-11-05 13:56:58 +01:00
Gerhard Rieger
8b2e0593f3 Added configure option --with-default-ipv 2023-10-26 22:16:21 +02:00
Gerhard Rieger
cb6e16b360 TCP based clients try all results of name resolution until a connection succeeded 2023-10-26 19:55:56 +02:00
Gerhard Rieger
b5640dd707 New option retrieve-vlan (experimental) 2023-10-26 19:13:08 +02:00
Gerhard Rieger
8c9b185890 New option children-shutup 2023-10-26 18:50:29 +02:00
Gerhard Rieger
2db04378ae New options openssl-maxfraglen, openssl-maxsendfrag 2023-10-26 16:43:20 +02:00
Gerhard Rieger
d36f78d854 Formatted help output; address keywords in help now uppercase 2023-10-26 14:56:50 +02:00
Gerhard Rieger
797d0f9695 Catch the case of empty SNI host to prevent OpenSSL error 2023-10-26 14:52:53 +02:00
Gerhard Rieger
3e282ee7a0 Internal: renamed xioopts_t to xioparms_t 2023-09-30 11:46:47 +02:00
Gerhard Rieger
4bab097ffc Warning that Socat does not check CRLs 2023-09-30 11:32:59 +02:00
Gerhard Rieger
2cddaf22b1 Introduced groups_t instead of uint32_t 2023-09-30 09:42:54 +02:00
Gerhard Rieger
33896a3f38 Removed trailing white space from *.h and *.c files 2023-06-12 23:01:54 +02:00
Gerhard Rieger
ffe940041c Guard OPENSSL_INIT_new() for LibreSSL 2023-06-12 19:24:16 +02:00
Gerhard Rieger
3678757fed Do not take IP address as SNI parameter 2023-06-12 19:23:09 +02:00
Gerhard Rieger
5fdd033e7d Replaced // comments for C89/C90 standard compliance 2023-06-12 12:28:48 +02:00
Gerhard Rieger
5edcb9b308 ctype(3) functions need there arguments to be unsigned char 2022-10-29 20:59:03 +02:00
Gerhard Rieger
15e38be2f5 Fixed SIGSEGV of OpenSSL on exit() 2022-10-29 15:12:44 +02:00
Gerhard Rieger
22a738d2d0 The variable for the no-sni option was not initialized 2022-01-06 17:17:10 +01:00
Gerhard Rieger
abdf738d1f Socat might have crashed on peer cert without subject 2022-01-06 17:14:27 +01:00
Gerhard Rieger
1477334905 OpenSSL server could be crashed by client cert with IPv6 address in SubjectAltname 2021-10-31 11:30:14 +01:00
Gerhard Rieger
072377c68c Fixed a few minor coding issues 2021-10-31 10:26:40 +01:00
Gerhard Rieger
6b9736472c OpenSSL file transfer failed 2021-01-10 13:44:58 +01:00
Gerhard Rieger
45ad4018b0 More corrections to recent changes and from systematic tests 2021-01-03 16:56:50 +01:00
Gerhard Rieger
b7a277472b With OPENSSL_API_COMPAT=0x10000000L the files openssl/dh.h, openssl/bn.h must be included 2021-01-03 07:43:00 +01:00
Gerhard Rieger
82f5321204 SSL_read,SSL_write errors sometimes stated SSL_connect 2021-01-01 18:24:50 +01:00
Gerhard Rieger
aa2b9c00b2 Added SNI support to OPENSSL-CONNECT, with options no-sni, snihost 2020-12-31 14:49:43 +01:00
Gerhard Rieger
6128ea36ac OpenSSL client checks SubjectAltName IP addresses 2020-12-31 12:19:17 +01:00
Gerhard Rieger
d1b809b4ab DTLS over UDP 2020-12-30 20:59:04 +01:00
Gerhard Rieger
d9d320cb47 Corrected UNIX client NAMED options to work on bind address 2020-12-29 05:22:41 +01:00
Gerhard Rieger
de2f2c471b OpenSSL options min-version, max-version 2020-12-28 12:38:52 +01:00
Gerhard Rieger
3ef518fde0 Unsetenv was not conditional in xio-openssl.c 2020-12-27 20:52:41 +01:00
Gerhard Rieger
cbeb06b19b Fixed regression: SSL_CTX_clear_mode() not available in older OpenSSL versions 2020-01-01 14:14:12 +01:00
Gerhard Rieger
bc3723e970 OpenSSL: clear SSL_MODE_AUTO_RETRY 2019-03-12 21:09:18 +01:00
Gerhard Rieger
14f3e4fed8 Disable option openssl-method 2019-03-03 13:20:12 +01:00
Gerhard Rieger
d7473dbac6 Corrected mention of SSL-LISTEN and SSL-CONNECT in doc; more minor corrections 2017-01-08 11:50:11 +01:00
Gerhard Rieger
522cf716f8 LibreSSL support: check for OPENSSL_NO_COMP 2017-01-06 19:11:00 +01:00
Gerhard Rieger
7da1766048 Use RAND_status to determine PRNG state 2016-12-26 18:57:13 +01:00