1 2023-07-25 Omar Polo <op@omarpolo.com>
3 * gmid.c (log_request): allow to change the logging style.
5 2023-07-24 Omar Polo <op@omarpolo.com>
7 * parse.y: add ability to log to files with `log access <path>'.
9 2023-07-23 Omar Polo <op@omarpolo.com>
11 * parse.y: revamp fastcgi configuration; make it per-location
13 2023-07-22 Omar Polo <op@omarpolo.com>
15 * titan.c (main): add titan(1), a simple titan client
17 * gg.c (get): warn when the server doesn't use TLS' close notify
19 2023-07-01 Omar Polo <op@omarpolo.com>
21 * fcgi.c (fcgi_handle_stdout): parse and log the fastcgi reply
23 2023-06-24 Omar Polo <op@omarpolo.com>
25 * server.c (handle_handshake): correctly handle TLS handshake failures.
27 * server.c (client_close_ev): plug memory leak
29 2023-06-23 Omar Polo <op@omarpolo.com>
31 * parse.y: implement `listen on'
33 2023-06-13 Omar Polo <op@omarpolo.com>
35 * regress/sha: remove regress/sha; sha256/sha256sum is no more required for the regress suite.
37 2023-06-12 Omar Polo <op@omarpolo.com>
39 * regress/lib.sh (run_test): use the default prefork in tests
41 2023-06-11 Omar Polo <op@omarpolo.com>
43 * crypto.c: add a privsep crypto engine (enabled only on OpenBSD)
45 * configure: add -Wpointer-sign to the mix, adjust the code to cope.
47 2023-05-05 Omar Polo <op@omarpolo.com>
49 * contrib/gencert: add -e to generate EC keys
51 2023-05-08 Omar Polo <op@omarpolo.com>
53 * sandbox.c: drop landlock, seccomp and capsicum support
55 2022-09-10 Omar Polo <op@omarpolo.com>
57 * parse.y (string): retire the deprecated `mime' and `map' config options
59 2022-09-07 Omar Polo <op@omarpolo.com>
61 * ge.c (main): add `gemexp': small program to quickly export a directory over Gemini.
63 2022-09-06 Omar Polo <op@omarpolo.com>
65 * server.c: drop CGI support.
67 2022-07-07 Omar Polo <op@omarpolo.com>
69 Included as part of gmid 1.8.5:
71 * log.c (logger_main): fix timestamps in log files. Reported by Karl Jeacle, thanks!
73 * dirs.c (scandir_fd): drop d_reclen; it's not available on DragonflyBSD (at least.)
75 2022-07-07 Anna “CyberTailor”
77 * Makefile: include contrib/ in dist
79 2022-07-04 Omar Polo <op@omarpolo.com>
81 * contrib/gmid: remove OpenBSD' rc file: it's now maintained in the ports tree
83 * configure (VERSION): 1.8.4 tagged
85 * server.c (check_path): log when it fails to open a file because of permissions
86 (client_write): encode file names in the directory index, spotted by cage
87 (client_write): add a trailing / for dirs in the directory index.
89 * iri.c (parse_path): allow '@' and ':' in paths
91 2022-04-08 Omar Polo <op@omarpolo.com>
93 * mime.c (mime): do a binary search to match the MIME time
95 * gmid.c (listener_main): don't load the default mime listing when
96 `types' is used. (text/gemini -> gmi/gemini is still hardcoded)
98 * mime.c (add_mime): fix memory leak in the mime handling
100 2022-04-07 Omar Polo <op@omarpolo.com>
102 * gmid.conf.5: move config file documentation into a new man page
104 * parse.y (option): deprecate `map' rule in favour of the `types' block
106 2022-03-27 Omar Polo <op@omarpolo.com>
108 * configure (VERSION): 1.8.3 tagged
110 * server.c (start_cgi): fix a possible out-of-bound access in the
113 2022-03-26 Omar Polo <op@omarpolo.com>
115 * configure (VERSION): 1.8.2 tagged
117 * server.c (handle_imsg_cgi_res): fix a CGI timing issue: if a
118 connection handled by a CGI scripts is interrupted with the right
119 timing it causes the server process to exit with "fatal in
120 client_by_id: invalid id X"
122 2022-02-26 Omar Polo <op@omarpolo.com>
124 * parse.y: add the types block
126 2022-02-13 Omar Polo <op@omarpolo.com>
128 * sandbox.c (filter): tightens seccomp policy wrt openat: allow
129 only with the O_RDONLY flag.
131 2022-02-13 Tobias Berger <tobi.berger13@gmail.com>
133 * sandbox.c (filter): allow fstatat64, llseek and sigreturn;
134 needed by glibc on armv7
136 2022-02-10 Omar Polo <op@omarpolo.com>
138 * configure (VERSION): 1.8.1 tagged
140 * sandbox.c (open_landlock): fix landlock usage
142 2022-01-30 Omar Polo <op@omarpolo.com>
144 * configure (VERSION): 1.8 “Lightbulb Sun” tagged
146 * proxy.c (proxy_setup_tls): allow to specify a custom hostname as SNI for the TLS handshake with the proxied host.
148 2022-01-02 Omar Polo <op@omarpolo.com>
150 * server.c (matched_proxy): allow to specify multiple proxy blocks and add matching rules
152 * parse.y (servbody): relax the strict ordering of options, location and proxy blocks
154 2022-01-01 Omar Polo <op@omarpolo.com>
156 * proxy.c (proxy_init): add support for client certificate when proxying
158 2021-12-29 Omar Polo <op@omarpolo.com>
160 * proxy.c (proxy_init): add proxying support via `proxy relay-to'
162 2021-12-11 Max <vdrummer@posteo.net>
164 * sandbox.c (filter): [seccomp]: allow ugetrlimit(2), needed by glibc on armv7l
166 2021-12-09 Omar Polo <op@omarpolo.com>
168 * server.c (client_read): don't check if the port in the request is the same we're listening on. Suggested by Allen Sobot, thanks!
169 * configure: add --prefix=... long argument.
171 2021-11-16 Omar Polo <op@omarpolo.com>
173 * configure (singletest): fix the cross-compilation: don't run the test binaries just built. Suggested by Nikolay Korotkiy (@sikmir), thanks!
175 2021-10-24 Omar Polo <op@omarpolo.com>
177 * log.c (log_request): fix "double slash" in logs: gmid ended up printing two slashes between the hostname and the path when logging the request IRI.
179 2021-10-15 Stephen Gregoratto <dev@sgregoratto.me>
181 * gmid.c (add_keypair): implement OCSP stapling support
183 2021-10-13 Omar Polo <op@omarpolo.com>
185 * server.c (do_accept): don't die on ECONNABORTED (``Software caused connection abort'')
187 2021-10-11 Omar Polo <op@omarpolo.com>
189 * contrib/renew-certs: add script to automatically renew self-signed certificates
191 2021-10-09 Omar Polo <op@omarpolo.com>
193 * parse.y (print_conf): multiple -n to dump the parsed configuration
195 * contrib/gencert: add gencert, a simple script to generate self-signed certs
197 2021-10-04 Omar Polo <op@omarpolo.com>
199 * regress/lib.sh (raw): reduced the timeout time for single checks from 30 to 10 seconds
201 * regress/runtime: regression test restructured. still implemented as a set of POSIX-scripts
203 2021-10-02 Omar Polo <op@omarpolo.com>
205 * server.c (client_read): reworked the internal structure. Now we leverage libevent' bufferevents more.
206 (cgi_read): be more strict with CGI scripts: don't pass through illegal CGI responses.
208 2021-09-26 Omar Polo <op@omarpolo.com>
210 * fcgi.c (fcgi_req): the FastCGI implementation is fully asynchronous
212 2021-09-24 Omar Polo <op@omarpolo.com>
214 * configure (VERSION): 1.7.4 tagged
216 * server.c (check_for_cgi): fix out-of-bound access, found with lots of help from cage, thanks!
218 2021-09-19 Omar Polo <op@omarpolo.com>
220 * sandbox.c (gmid_create_landlock_rs): [linux] use landlock on the server and logger process to reduce the fs access
222 * configure (VERSION): 1.7.3 tagged
224 2021-09-17 Omar Polo <op@omarpolo.com>
226 * log.c (logger_main): fix syslog logging on FreeBSD
228 2021-08-24 Omar Polo <op@omarpolo.com>
230 * gmid.c (main): don't crash on -n without -c
232 2021-07-29 Anna “CyberTailor”
234 * gmid.1: document logging, openssl key generation example, spelling/grammar and crosslinks
236 2021-07-27 Omar Polo <op@omarpolo.com>
238 * server.c (check_path): allow symlinks
240 2021-07-23 Omar Polo <op@omarpolo.com>
242 * sandbox.c: seccomp allow fstat64 (used by glibc an aarch64). Reported by pine, thanks!
244 2021-07-19 Omar Polo <op@omarpolo.com>
246 * gmid.c (setup_configless): unbreak configless mode
248 2021-07-13 Anna “CyberTailor”
250 * parse.y (yyerror): error and warning messages are prefixed with "error:" and "warning:"
251 (yywarn): fix off-by-one line number in warnings
253 2021-07-11 Omar Polo <op@omarpolo.com>
255 * configure (VERSION): 1.7.1 tagged
257 2021-07-11 Anna “CyberTailor”
259 * gmid.1 (common): fix misleading example in man page: macros names may not be reserved words
261 2021-07-10 Omar Polo <op@omarpolo.com>
263 * configure (VERSION): 1.7 tagged
265 2021-07-09 Omar Polo <op@omarpolo.com>
267 * parse.y (STRING): add `include' directive
268 (yylex): add @-macros (real macros)
270 2021-07-08 Omar Polo <op@omarpolo.com>
272 * parse.y (option): rename `mime MIME EXT' to `map MIME to-ext EXT', but retain the old `mime' for compatibility.
274 2021-07-06 Omar Polo <op@omarpolo.com>
276 * regress/gg.c (main): add -T timeout
278 * configure (guessing_cflags): try to preserve CFLAGS/LDFLAGS
280 2021-07-02 Omar Polo <op@omarpolo.com>
282 * sandbox.c (filter): seccomp filter reworked: now it should work on x86 and possibly other arches too!
284 2021-06-29 Omar Polo <op@omarpolo.com>
286 * parse.y (conf): don't require the strict order macro > options > servers
287 c-like strings: when two or more strings are next to each others, concat them
289 * gmid.c (main): add -D to define macros from the cmd line
291 * parse.y (yylex): allow to define macros in the config file
293 * gmid.c (main): use getopt_long, add --help as synonym of -h and -V/--version
295 2021-06-17 Omar Polo <op@omarpolo.com>
297 * gmid.1: document `log' option
299 2021-06-16 Omar Polo <op@omarpolo.com>
301 * parse.y (yylex): drop the dependency on lex by implementing
302 yylex by ourselves (the actual implementation is based off doas'
303 parse.y). This gave us various benefits, like cleaner code, \ to
304 break long lines, better handling of quotes etc...
306 2021-06-11 Omar Polo <op@omarpolo.com>
308 * parse.y (servopt): add `param' keyword
310 * fcgi.c (send_fcgi_req): send GATEWAY_INTERFACE, AUTH_TYPE,
311 REMOTE_USER, TLS_CLIENT_ISSUER, TLS_CLIENT_HASH, TLS_VERSION,
312 TLS_CIPHER, TLS_CIPHER_STRENGTH and TLS_CLIENT_NOT_BEFORE/AFTER.
313 (send_fcgi_req): support a custom list of params
315 2021-05-24 Omar Polo <op@omarpolo.com>
317 * gg.c: move `gg' to regress, as it's only used for the tests
319 2021-05-12 Omar Polo <op@omarpolo.com>
321 * utils.c (gen_certificate): don't add gmid as organisation when generating the certificate, and now it set the version 3, so it's compatible with java/android
323 2021-05-09 Omar Polo <op@omarpolo.com>
325 * server.c (apply_fastcgi): added fastcgi support!
327 2021-05-03 Omar Polo <op@omarpolo.com>
329 * parse.y: errors on duplicate values instead of silently using only the last value.
331 2021-04-30 Omar Polo <op@omarpolo.com>
333 * server.c (fmt_sbuf): ensure %p (path) is always absolute
335 * gmid.c (load_vhosts): allow ``root'' rule to be specified per-location block
337 2021-04-29 Omar Polo <op@omarpolo.com>
339 * parse.y (servopt): added ``alias'' option to define hostname aliases for a server
341 2021-04-28 Omar Polo <op@omarpolo.com>
343 * gmid.c (main): pidfile support with `-P pidfile'
345 2021-04-27 Omar Polo <op@omarpolo.com>
347 * parse.y (servopt): added ``env'' option to define environment vars for CGI scripts
349 * log.c (fatal): lower the log priority for fatal errors from CRIT to ERR
351 2021-04-25 Omar Polo <op@omarpolo.com>
353 * server.c (open_dir): sort the auto index alphabetically
355 2021-04-21 Omar Polo <op@omarpolo.com>
357 * mime.c (load_default_mime): use `text/x-patch' for .patch and .diff files
359 2021-04-14 Omar Polo <op@omarpolo.com>
361 * log.c (handle_imsg_log): print the datetime when logging to stderr
363 2021-04-13 Omar Polo <op@omarpolo.com>
365 * ex.c (launch_cgi): define TLS_VERSION, TLS_CIPHER and TLS_CIPHER_STRENGTH for CGI scripts
367 2021-04-12 Omar Polo <op@omarpolo.com>
371 * iri.c (path_clean): fix possible infinite loop in the IRI parsing code.
373 2021-03-31 Omar Polo <op@omarpolo.com>
375 * gmid.h (struct vhost): remove limits on the number of vhosts and location blocks
377 * gmid.c (mkdirs): fix recursive mkdirs for configless mode
379 2021-03-29 Omar Polo <op@omarpolo.com>
381 * Makefile (static): fixed `static' target
383 2021-03-29 kornellapacz @ github
385 * Dockerfile: add missing libevent-dev dependency, thanks!
387 2021-03-27 Omar Polo <op@omarpolo.com>
389 * gmid.h (struct client): correctly handle CGI scripts that replies with the maximum header length allowed
391 2021-03-20 Omar Polo <op@omarpolo.com>
395 * sandbox.c (sandbox_logger_process): add capsicum to the logger process
397 2021-03-19 Omar Polo <op@omarpolo.com>
399 * gmid.c (main): use imsg for all IPC; only the main process
400 listens for SIGHUP: this means that finally the config reload will
401 work with OpenBSD' rc (and probably other service manager too)
403 2021-02-22 Omar Polo <op@omarpolo.com>
405 * log.c (log_request): add `log on/off' to enable/disable logs per-server or per-location
407 2021-02-09 Omar Polo <op@omarpolo.com>
409 * parse.y (locopt): add `require client ca' rule to require client certs signed by a specified CA
411 2021-02-07 Omar Polo <op@omarpolo.com>
413 * ex.c (do_exec): [cgi] split the query in words if needed and add them to the argv
414 (launch_cgi): define TLS_CLIENT_NOT_BEFORE/NOT_AFTER in CGI scripts
416 * parse.y (option): added prefork option
418 2021-02-06 Omar Polo <op@omarpolo.com>
420 * parse.y (locopt): added ``block return'' and ``strip'' options
421 (servopt): add the ``entrypoint'' option
423 2021-02-05 Omar Polo <op@omarpolo.com>
425 * iri.c (parse_query): don't %-decode the query part. This affects the value of QUERY_STRING for CGI scripts too, since that must be %-encoded and we're currently shipping it decoded.
427 2021-02-04 Omar Polo <op@omarpolo.com>
429 * gmid.c (main): reload configuration on SIGHUP, without disconnecting the clients
431 2021-02-02 Omar Polo <op@omarpolo.com>
433 * server.c (handle_dirlist_head): print the header in the directory listing
434 (open_file): cgi follows globbing rules, just like location and hostname matching
436 2021-02-01 Omar Polo <op@omarpolo.com>
438 * parse.y (servopt): require absolute paths in config file
440 2021-01-31 Omar Polo <op@omarpolo.com>
442 * gmid.c (main): cgi scripts now have only std{in,out,err} open
444 2021-01-30 Omar Polo <op@omarpolo.com>
447 * server.c: change precedence of location rules
449 2021-01-29 Omar Polo <op@omarpolo.com>
451 * iri.c (parse_authority): accept a wider range of unicode
452 codepoints while parsing the host name.
454 2021-01-26 Omar Polo <op@omarpolo.com>
456 * puny.c (puny_decode): initial punycode support!
458 2021-01-25 Omar Polo <op@omarpolo.com>
460 * gmid.1: manpage improvements (example and usage)
462 * gmid.c (main): Dropping -C, -K, -f, changing the meaning of -d:
463 now it's the certificate directory. Serve the directory given as
464 positional argument (or the current one) when running in
466 (gen_certificate): automatically generate a certificate
468 * parse.y (option): added chroot and user options
470 2021-01-24 Omar Polo <op@omarpolo.com>
472 * server.c (open_dir): add directory listing (disabled by default)
474 * parse.y (vhost): added support for location blocks
476 * server.c (send_dir): make the directory index customizable
478 2021-01-23 Omar Polo <op@omarpolo.com>
480 * gg.c (main): added gg, a barebone gemini client. used by the
483 2021-01-21 Omar Polo <op@omarpolo.com>
485 * configure: added a configure script
487 * server.c (handle_handshake): glob for vhost domain
489 * gmid.c (log_request): logs the full IRI and the response code (even for CGI)
491 2021-01-19 Omar Polo <op@omarpolo.com>
493 * parse.y (servopt): add "lang" server option
494 (servopt): moving "default type" from global options to server options
496 * Dockerfile: add a dockerfile
498 2021-01-18 Omar Polo <op@omarpolo.com>
500 * parse.y (option): add mime and "default type" options for media types.
502 2021-01-17 Omar Polo <op@omarpolo.com>
504 * sandbox.c (sandbox): added initial seccomp(2) support
506 2021-01-15 Omar Polo <op@omarpolo.com>
508 * cgi.c (start_cgi): set SERVER_NAME to the vhost when executing CGI scripts
510 * parse.y (option): add ability to specify the tls versions with "protocols"
512 * gmid.c (handle_open_conn): ensure the port number of the request matches
514 * sandbox.c (sandbox): sandbox on OpenBSD (pledge/unveil, as before) and on FreeBSD (capsicum) too
516 * sample.conf: added sample configuration
518 * gmid.c (main): changed behaviour: daemon off by default
519 (main): changed -c in -C (cert option)
520 (main): changed -k in -K (key option, for consistency with -C)
521 (main): added -c to load a configuration
522 (main): certs, key and doc (-C -K and -d) doesn't have a default value anymore
523 (handle_handshake): add vhosts support
525 2021-01-13 Omar Polo <op@omarpolo.com>
527 * iri.c (parse_scheme): normalize scheme while parsing, so we're
530 2021-01-11 Omar Polo <op@omarpolo.com>
532 * 1.4 and 1.4.1 tagged
534 * gmid.c (main): ipv6 disabled by default and -6 flag to enable it
535 (handle): reject non-gemini protocols with 53
537 2021-01-10 Omar Polo <op@omarpolo.com>
539 * gmid.c (logs): log also the port of the client
540 (loop): accept both ipv4 and ipv6
542 2020-12-26 Omar Polo <op@omarpolo.com>
544 * uri.c (parse_uri): IRI support
546 2020-12-21 Omar Polo <op@omarpolo.com>
548 * gmid.c (main): -d supports relative paths
550 2020-12-02 Omar Polo <op@omarpolo.com>
552 * gmid.c: logging reworked and daemonize. The -l option was
553 removed: now it logs on syslog if -f (foreground) is not passed.
555 2020-11-18 Omar Polo <op@omarpolo.com>
559 * gmid.c (url_after_proto): fix bug introduced in last version
560 regarding full URLs with explicit gemini protocol.
564 * gmid.c (url_after_proto): correct url parsing: accept URLs
565 without explicit protocol
566 (url_start_of_request): correct handling of relative URLs
568 2020-11-17 Omar Polo <op@omarpolo.com>
570 * gmid.c (main): add flag -p to change the port
572 2020-11-10 Omar Polo <op@omarpolo.com>
574 * ChangeLog: 1.3 tagged, fixed ChangeLog format
576 * gmid.c (open_file): added support for path parameters for CGI
579 2020-11-06 Omar Polo <op@omarpolo.com>
581 * gmid.1: great improvements to the documentation
583 * gmid.c (url_after_proto): ensure that the requested protocol is
584 “gemini” and not something else that’s long 6 bytes.
586 * gmid.c (loop): added support for cgi scripts (can handle multiple
589 2020-11-06 Omar Polo <op@venera>
591 * gmid.1: added option to log to a file
593 2020-11-05 Omar Polo <op@omarpolo.com>
595 * gmid.c (filetypes): add MIME type for xml files
597 2020-11-03 Omar Polo <op@omarpolo.com>
601 * gmid.c (main): ignore SIGPIPE
603 2020-10-14 Omar Polo <op@omarpolo.com>
607 * switching to mmap() based file handling
609 2020-10-07 Omar Polo <op@omarpolo.com>
