Commits


fix sandbox_server_process it does the unveil(2)ing based on the first config, which breaks config-reloading.


rework fcgi-test so that it binds a local socket still not re-enabled.


readd proxy certs and `require client ca' support Was temporarly disabled during the transition to real privsep. While here, fix a memory leak when using `require client ca'. Also, avoid leaking info about the parent address space layout to server processes by not sending pointer values.


configure: look for WAIT_ANY


fix typo


provide sandbox_main_process on !OpenBSD


fix build of proc.c on !OpenBSD


safety measure, explicitly memset config in config_init


keep cert/key/ocsp path as strings and don't send them via imsg


fix ge build


less logger.h


fix previous


remove foreground / verbose from config set them as global vars; rename foreground -> debug


remove forgotten include of logger.h


move logger() prototype to gmid.h and delete logger.h