1 2021-10-13 Omar Polo <op@omarpolo.com>
3 * server.c (do_accept): don't die on ECONNABORTED (``Software caused connection abort'')
5 2021-10-11 Omar Polo <op@omarpolo.com>
7 * contrib/renew-certs: add script to automatically renew self-signed certificates
9 2021-10-09 Omar Polo <op@omarpolo.com>
11 * parse.y (print_conf): multiple -n to dump the parsed configuration
13 * contrib/gencert: add gencert, a simple script to generate self-signed certs
15 2021-10-04 Omar Polo <op@omarpolo.com>
17 * regress/lib.sh (raw): reduced the timeout time for single checks from 30 to 10 seconds
19 * regress/runtime: regression test restructured. still implemented as a set of POSIX-scripts
21 2021-10-02 Omar Polo <op@omarpolo.com>
23 * server.c (client_read): reworked the internal structure. Now we leverage libevent' bufferevents more.
24 (cgi_read): be more strict with CGI scripts: don't pass through illegal CGI responses.
26 2021-09-26 Omar Polo <op@omarpolo.com>
28 * fcgi.c (fcgi_req): the FastCGI implementation is fully asynchronous
30 2021-09-24 Omar Polo <op@omarpolo.com>
32 * configure (VERSION): 1.7.4 tagged
34 * server.c (check_for_cgi): fix out-of-bound access, found with lots of help from cage, thanks!
36 2021-09-19 Omar Polo <op@omarpolo.com>
38 * sandbox.c (gmid_create_landlock_rs): [linux] use landlock on the server and logger process to reduce the fs access
40 * configure (VERSION): 1.7.3 tagged
42 2021-09-17 Omar Polo <op@omarpolo.com>
44 * log.c (logger_main): fix syslog logging on FreeBSD
46 2021-08-24 Omar Polo <op@omarpolo.com>
48 * gmid.c (main): don't crash on -n without -c
50 2021-07-29 Anna “CyberTailor”
52 * gmid.1: document logging, openssl key generation example, spelling/grammar and crosslinks
54 2021-07-27 Omar Polo <op@omarpolo.com>
56 * server.c (check_path): allow symlinks
58 2021-07-23 Omar Polo <op@omarpolo.com>
60 * sandbox.c: seccomp allow fstat64 (used by glibc an aarch64). Reported by pine, thanks!
62 2021-07-19 Omar Polo <op@omarpolo.com>
64 * gmid.c (setup_configless): unbreak configless mode
66 2021-07-13 Anna “CyberTailor”
68 * parse.y (yyerror): error and warning messages are prefixed with "error:" and "warning:"
69 (yywarn): fix off-by-one line number in warnings
71 2021-07-11 Omar Polo <op@omarpolo.com>
73 * configure (VERSION): 1.7.1 tagged
75 2021-07-11 Anna “CyberTailor”
77 * gmid.1 (common): fix misleading example in man page: macros names may not be reserved words
79 2021-07-10 Omar Polo <op@omarpolo.com>
81 * configure (VERSION): 1.7 tagged
83 2021-07-09 Omar Polo <op@omarpolo.com>
85 * parse.y (STRING): add `include' directive
86 (yylex): add @-macros (real macros)
88 2021-07-08 Omar Polo <op@omarpolo.com>
90 * parse.y (option): rename `mime MIME EXT' to `map MIME to-ext EXT', but retain the old `mime' for compatibility.
92 2021-07-06 Omar Polo <op@omarpolo.com>
94 * regress/gg.c (main): add -T timeout
96 * configure (guessing_cflags): try to preserve CFLAGS/LDFLAGS
98 2021-07-02 Omar Polo <op@omarpolo.com>
100 * sandbox.c (filter): seccomp filter reworked: now it should work on x86 and possibly other arches too!
102 2021-06-29 Omar Polo <op@omarpolo.com>
104 * parse.y (conf): don't require the strict order macro > options > servers
105 c-like strings: when two or more strings are next to each others, concat them
107 * gmid.c (main): add -D to define macros from the cmd line
109 * parse.y (yylex): allow to define macros in the config file
111 * gmid.c (main): use getopt_long, add --help as synonym of -h and -V/--version
113 2021-06-17 Omar Polo <op@omarpolo.com>
115 * gmid.1: document `log' option
117 2021-06-16 Omar Polo <op@omarpolo.com>
119 * parse.y (yylex): drop the dependency on lex by implementing
120 yylex by ourselves (the actual implementation is based off doas'
121 parse.y). This gave us various benefits, like cleaner code, \ to
122 break long lines, better handling of quotes etc...
124 2021-06-11 Omar Polo <op@omarpolo.com>
126 * parse.y (servopt): add `param' keyword
128 * fcgi.c (send_fcgi_req): send GATEWAY_INTERFACE, AUTH_TYPE,
129 REMOTE_USER, TLS_CLIENT_ISSUER, TLS_CLIENT_HASH, TLS_VERSION,
130 TLS_CIPHER, TLS_CIPHER_STRENGTH and TLS_CLIENT_NOT_BEFORE/AFTER.
131 (send_fcgi_req): support a custom list of params
133 2021-05-24 Omar Polo <op@omarpolo.com>
135 * gg.c: move `gg' to regress, as it's only used for the tests
137 2021-05-12 Omar Polo <op@omarpolo.com>
139 * utils.c (gen_certificate): don't add gmid as organisation when generating the certificate, and now it set the version 3, so it's compatible with java/android
141 2021-05-09 Omar Polo <op@omarpolo.com>
143 * server.c (apply_fastcgi): added fastcgi support!
145 2021-05-03 Omar Polo <op@omarpolo.com>
147 * parse.y: errors on duplicate values instead of silently using only the last value.
149 2021-04-30 Omar Polo <op@omarpolo.com>
151 * server.c (fmt_sbuf): ensure %p (path) is always absolute
153 * gmid.c (load_vhosts): allow ``root'' rule to be specified per-location block
155 2021-04-29 Omar Polo <op@omarpolo.com>
157 * parse.y (servopt): added ``alias'' option to define hostname aliases for a server
159 2021-04-28 Omar Polo <op@omarpolo.com>
161 * gmid.c (main): pidfile support with `-P pidfile'
163 2021-04-27 Omar Polo <op@omarpolo.com>
165 * parse.y (servopt): added ``env'' option to define environment vars for CGI scripts
167 * log.c (fatal): lower the log priority for fatal errors from CRIT to ERR
169 2021-04-25 Omar Polo <op@omarpolo.com>
171 * server.c (open_dir): sort the auto index alphabetically
173 2021-04-21 Omar Polo <op@omarpolo.com>
175 * mime.c (load_default_mime): use `text/x-patch' for .patch and .diff files
177 2021-04-14 Omar Polo <op@omarpolo.com>
179 * log.c (handle_imsg_log): print the datetime when logging to stderr
181 2021-04-13 Omar Polo <op@omarpolo.com>
183 * ex.c (launch_cgi): define TLS_VERSION, TLS_CIPHER and TLS_CIPHER_STRENGTH for CGI scripts
185 2021-04-12 Omar Polo <op@omarpolo.com>
189 * iri.c (path_clean): fix possible infinite loop in the IRI parsing code.
191 2021-03-31 Omar Polo <op@omarpolo.com>
193 * gmid.h (struct vhost): remove limits on the number of vhosts and location blocks
195 * gmid.c (mkdirs): fix recursive mkdirs for configless mode
197 2021-03-29 Omar Polo <op@omarpolo.com>
199 * Makefile (static): fixed `static' target
201 2021-03-29 kornellapacz @ github
203 * Dockerfile: add missing libevent-dev dependency, thanks!
205 2021-03-27 Omar Polo <op@omarpolo.com>
207 * gmid.h (struct client): correctly handle CGI scripts that replies with the maximum header length allowed
209 2021-03-20 Omar Polo <op@omarpolo.com>
213 * sandbox.c (sandbox_logger_process): add capsicum to the logger process
215 2021-03-19 Omar Polo <op@omarpolo.com>
217 * gmid.c (main): use imsg for all IPC; only the main process
218 listens for SIGHUP: this means that finally the config reload will
219 work with OpenBSD' rc (and probably other service manager too)
221 2021-02-22 Omar Polo <op@omarpolo.com>
223 * log.c (log_request): add `log on/off' to enable/disable logs per-server or per-location
225 2021-02-09 Omar Polo <op@omarpolo.com>
227 * parse.y (locopt): add `require client ca' rule to require client certs signed by a specified CA
229 2021-02-07 Omar Polo <op@omarpolo.com>
231 * ex.c (do_exec): [cgi] split the query in words if needed and add them to the argv
232 (launch_cgi): define TLS_CLIENT_NOT_BEFORE/NOT_AFTER in CGI scripts
234 * parse.y (option): added prefork option
236 2021-02-06 Omar Polo <op@omarpolo.com>
238 * parse.y (locopt): added ``block return'' and ``strip'' options
239 (servopt): add the ``entrypoint'' option
241 2021-02-05 Omar Polo <op@omarpolo.com>
243 * iri.c (parse_query): don't %-decode the query part. This affects the value of QUERY_STRING for CGI scripts too, since that must be %-encoded and we're currently shipping it decoded.
245 2021-02-04 Omar Polo <op@omarpolo.com>
247 * gmid.c (main): reload configuration on SIGHUP, without disconnecting the clients
249 2021-02-02 Omar Polo <op@omarpolo.com>
251 * server.c (handle_dirlist_head): print the header in the directory listing
252 (open_file): cgi follows globbing rules, just like location and hostname matching
254 2021-02-01 Omar Polo <op@omarpolo.com>
256 * parse.y (servopt): require absolute paths in config file
258 2021-01-31 Omar Polo <op@omarpolo.com>
260 * gmid.c (main): cgi scripts now have only std{in,out,err} open
262 2021-01-30 Omar Polo <op@omarpolo.com>
265 * server.c: change precedence of location rules
267 2021-01-29 Omar Polo <op@omarpolo.com>
269 * iri.c (parse_authority): accept a wider range of unicode
270 codepoints while parsing the host name.
272 2021-01-26 Omar Polo <op@omarpolo.com>
274 * puny.c (puny_decode): initial punycode support!
276 2021-01-25 Omar Polo <op@omarpolo.com>
278 * gmid.1: manpage improvements (example and usage)
280 * gmid.c (main): Dropping -C, -K, -f, changing the meaning of -d:
281 now it's the certificate directory. Serve the directory given as
282 positional argument (or the current one) when running in
284 (gen_certificate): automatically generate a certificate
286 * parse.y (option): added chroot and user options
288 2021-01-24 Omar Polo <op@omarpolo.com>
290 * server.c (open_dir): add directory listing (disabled by default)
292 * parse.y (vhost): added support for location blocks
294 * server.c (send_dir): make the directory index customizable
296 2021-01-23 Omar Polo <op@omarpolo.com>
298 * gg.c (main): added gg, a barebone gemini client. used by the
301 2021-01-21 Omar Polo <op@omarpolo.com>
303 * configure: added a configure script
305 * server.c (handle_handshake): glob for vhost domain
307 * gmid.c (log_request): logs the full IRI and the response code (even for CGI)
309 2021-01-19 Omar Polo <op@omarpolo.com>
311 * parse.y (servopt): add "lang" server option
312 (servopt): moving "default type" from global options to server options
314 * Dockerfile: add a dockerfile
316 2021-01-18 Omar Polo <op@omarpolo.com>
318 * parse.y (option): add mime and "default type" options for media types.
320 2021-01-17 Omar Polo <op@omarpolo.com>
322 * sandbox.c (sandbox): added initial seccomp(2) support
324 2021-01-15 Omar Polo <op@omarpolo.com>
326 * cgi.c (start_cgi): set SERVER_NAME to the vhost when executing CGI scripts
328 * parse.y (option): add ability to specify the tls versions with "protocols"
330 * gmid.c (handle_open_conn): ensure the port number of the request matches
332 * sandbox.c (sandbox): sandbox on OpenBSD (pledge/unveil, as before) and on FreeBSD (capsicum) too
334 * sample.conf: added sample configuration
336 * gmid.c (main): changed behaviour: daemon off by default
337 (main): changed -c in -C (cert option)
338 (main): changed -k in -K (key option, for consistency with -C)
339 (main): added -c to load a configuration
340 (main): certs, key and doc (-C -K and -d) doesn't have a default value anymore
341 (handle_handshake): add vhosts support
343 2021-01-13 Omar Polo <op@omarpolo.com>
345 * iri.c (parse_scheme): normalize scheme while parsing, so we're
348 2021-01-11 Omar Polo <op@omarpolo.com>
350 * 1.4 and 1.4.1 tagged
352 * gmid.c (main): ipv6 disabled by default and -6 flag to enable it
353 (handle): reject non-gemini protocols with 53
355 2021-01-10 Omar Polo <op@omarpolo.com>
357 * gmid.c (logs): log also the port of the client
358 (loop): accept both ipv4 and ipv6
360 2020-12-26 Omar Polo <op@omarpolo.com>
362 * uri.c (parse_uri): IRI support
364 2020-12-21 Omar Polo <op@omarpolo.com>
366 * gmid.c (main): -d supports relative paths
368 2020-12-02 Omar Polo <op@omarpolo.com>
370 * gmid.c: logging reworked and daemonize. The -l option was
371 removed: now it logs on syslog if -f (foreground) is not passed.
373 2020-11-18 Omar Polo <op@omarpolo.com>
377 * gmid.c (url_after_proto): fix bug introduced in last version
378 regarding full URLs with explicit gemini protocol.
382 * gmid.c (url_after_proto): correct url parsing: accept URLs
383 without explicit protocol
384 (url_start_of_request): correct handling of relative URLs
386 2020-11-17 Omar Polo <op@omarpolo.com>
388 * gmid.c (main): add flag -p to change the port
390 2020-11-10 Omar Polo <op@omarpolo.com>
392 * ChangeLog: 1.3 tagged, fixed ChangeLog format
394 * gmid.c (open_file): added support for path parameters for CGI
397 2020-11-06 Omar Polo <op@omarpolo.com>
399 * gmid.1: great improvements to the documentation
401 * gmid.c (url_after_proto): ensure that the requested protocol is
402 “gemini” and not something else that’s long 6 bytes.
404 * gmid.c (loop): added support for cgi scripts (can handle multiple
407 2020-11-06 Omar Polo <op@venera>
409 * gmid.1: added option to log to a file
411 2020-11-05 Omar Polo <op@omarpolo.com>
413 * gmid.c (filetypes): add MIME type for xml files
415 2020-11-03 Omar Polo <op@omarpolo.com>
419 * gmid.c (main): ignore SIGPIPE
421 2020-10-14 Omar Polo <op@omarpolo.com>
425 * switching to mmap() based file handling
427 2020-10-07 Omar Polo <op@omarpolo.com>
