Commits
- Commit:
80745f04113ce73ae4f5aaba5c6a458af92590d0
- From:
- Omar Polo <op@omarpolo.com>
- Date:
regress: change naming scheme for certs, add GENCERT_FLAGS knob
Call the certificates .pem and the keys .key; use contrib/gencert
to generate the certificates and provide a GENCERT_FLAGS knob so
that regress can be run with EC keys (GENCERT_FLAGS=-e). Still no
automatic way of testing with both RSA and EC keys.
- Commit:
56054fe197b01c5e4e2ee433c752fcec79a09fd3
- From:
- Omar Polo <op@omarpolo.com>
- Date:
use the legacy style in the tests for now
- Commit:
f736c9579c7c69cd124839bb61cfa9b26588aa9d
- From:
- Omar Polo <op@omarpolo.com>
- Date:
fix test after log style condensed change
- Commit:
471a5250e3d1df76765e22d14065363818084be6
- From:
- Omar Polo <op@omarpolo.com>
- Date:
rename ge -> gemexp in regress too
- Commit:
abd261d25bdfa01c44d07a9803db669bc62ddf76
- From:
- Omar Polo <op@omarpolo.com>
- Date:
allow to change the logging style; introduce some new ones
add `log style <style>'; The old default is called `legacy' now, a
new default format is added called `condensed', and `common' and
`combined' to mimick Apache httpd and nginx (respectively) are also
added.
- Commit:
60b4efa1e2df8b5465deaec5c5493e1b2bf6a6c4
- From:
- Omar Polo <op@omarpolo.com>
- Date:
add a test for the file logging
- Commit:
60f4107da6ed88a34867cdcbf63794b5dc039f94
- From:
- Omar Polo <op@omarpolo.com>
- Date:
add a test with fastcgi, locations and forceful disabling
- Commit:
fdd67729b45c7073be9ea1720cbadbaae8f0d112
- From:
- Omar Polo <op@omarpolo.com>
- Date:
adjust syntax in fastcgi test; add another test for the old syntax
- Commit:
2247b66842be7049e4dbfe099781bd3d2f69fbe9
- From:
- Omar Polo <op@omarpolo.com>
- Date:
improve fcgi test: send more than one chunk of data
- Commit:
5a345722826201a4da926abc096aed76de3cdaa4
- From:
- Omar Polo <op@omarpolo.com>
- Date:
use REGRESS_HOST to specify the host to listen to; use in CI
some CI envs don't like `listen on localhost' but tolerate INADDR_ANY
or IN6ADDR_ANY_INIT.
- Commit:
509d0509a50883a6f8407b63774f40dd1e41dadf
- From:
- Omar Polo <op@omarpolo.com>
- Date:
implement `listen on'
Listening by default on all the addresses is so bad I don't know
why I haven't changed this before. Anyway.
Add a `listen on $hostname port $port' syntax to the config file
and deprecate the old "port" and "ipv6" global setting. Still try
to honour them when no "listen on" directive is used for backward
compatibily, but this will go away in the next next version hopefully.
At the moment the `listen on' in server context don't filter the
host, i.e. one can still reach a host from a address not specified
in the corresponding `liste on', this will be added later.
- Commit:
611dffe81628683ebd2b48ae6f02f9bff6081ee9
- From:
- Omar Polo <op@omarpolo.com>
- Date:
remove regress/sha
we can use cmp to tell if two files are different, which also has
the benefit of being available everywhere and reporting the byte
offset of the first difference. Reduces the test dependencies on
some systems.
- Commit:
9adeb265792f0049321c34bf9e32674b0be65942
- From:
- Omar Polo <op@omarpolo.com>
- Date:
re-establish fastcgi test
- Commit:
a5fb2593a9ab1c6cc4ae027924724dd2714f7fe1
- From:
- Omar Polo <op@omarpolo.com>
- Date:
adjust regress to use `ge' for the old configless test
- Commit:
d29a2ee2246e1b1b0c5222a823820e42422c894e
- From:
- Omar Polo <op@omarpolo.com>
- Date:
get rid of the CGI support
I really want to get rid of the `executor' process hack for CGI scripts
and its escalation to allow fastcgi and proxying to work on non-OpenBSD.
This drops the CGI support and the `executor' process entirely and is
the first step towards gmid 2.0. It also allows to have more secure
defaults.
On non-OpenBSD systems this means that the sandbox will be deactivated
as soon as fastcgi or proxying are used: you can't open sockets under
FreeBSD' capsicum(4) and I don't want to go thru the pain of making it
work under linux' seccomp/landlock. Patches are always welcome however.
For folks using CGI scripts (hey, I'm one of you!) not all hope is lost:
fcgiwrap or OpenBSD' slowcgi(8) are ways to run CGI scripts as they were
FastCGI applications.
fixes for the documentation and to the non-OpenBSD sandboxes will
follow.