Commits


add `require client ca' rule to require certs signed by a CA


add conf for a ca


gg: add support for client certs


refactor apply_block_return move the strip and fmt logic to their own function


align


mention libevent


allow sigreturn and sigaction on linux


fix seccomp for the new event loop add/remove syscalls from the BPF filter and move sandbox() after libevent initialisation


define config_path as global variable


define conf in the test program, not in puny.c


fix detection on non-openbsd systems


look for libevent


add check for libevent


rewrite main loop using libevent


define TLS_CLIENT_NOT_BEFORE/NOT_AFTER in CGI scripts