Commit Briefs

Omar Polo

implement `listen on'

Listening by default on all the addresses is so bad I don't know why I haven't changed this before. Anyway. Add a `listen on $hostname port $port' syntax to the config file and deprecate the old "port" and "ipv6" global setting. Still try to honour them when no "listen on" directive is used for backward compatibily, but this will go away in the next next version hopefully. At the moment the `listen on' in server context don't filter the host, i.e. one can still reach a host from a address not specified in the corresponding `liste on', this will be added later.



Omar Polo

typo; use the `l' variable not `len'


Omar Polo

disable the privsep crypto engine on !OpenBSD

it fails bandly at runtime on various linux distros and on freebsd. Until a fix is found, disable it so I can move forward.


Omar Polo

don't have the config being a global


Omar Polo

move hosts into the config struct


Omar Polo

move fastcgi from global var to the config struct

while here also make them a list rather than a fixed-size array.


Omar Polo

fix ge build


Omar Polo

less logger.h


Omar Polo

make ge work again


Omar Polo

remove now unused ibuf variable


Omar Polo

rework the daemon to do fork+exec

It uses the 'common' proc.c from various OpenBSD-daemons. gmid grew organically bit by bit and it was also the first place where I tried to implement privsep. It wasn't done very well, in fact the parent process (that retains root privileges) just fork()s a generation of servers, all sharing *exactly* the same address space. No good! Now, we fork() and re-exec() ourselves, so that each process has a fresh address space. Some features (require client ca for example) are temporarly disabled, will be fixed in subsequent commits. The "ge" program is also temporarly disabled as it needs tweaks to do privsep too.



Omar Polo

switch to the more usual log.c


Omar Polo

rename log.[ch] to logger.[ch]