this way, we can sandbox the listener with seccomp (todo) or capsicum (already done) and still have CGI scripts. When we want to exec, we tell the executor what to do, the executor executes the scripts and send the fd backt to the listener.

It's correct, while my hacked valid_multibyte_utf8 would allow things that aren't technically UTF8.

This extends the URI parser so it supports full IRI (Internationalized Resource Identifiers, RFC3987). Some areas of it can/may be improved, but here's a start. Note: we assume UTF-8 encoded IRI.

"concurrently" means at the same time, which can be confusing when we say that it's single-threaded on a single process.

The -l option was removed: now it logs on syslog if -f (foreground) is not passed.

internally, gmid doesn’t care if the client issued a certificate, but now we pass that information to the CGI script in some new environment variables.

enhance the CGI scripting support so that script can take path parameters. That is, a script at /cgi/foo is called when the request path is /cgi/foo/bar/... This commit also introduce some backward incompatible changes as the default env variables set for the CGI script changed.