Commits


missing break


switch to getcwd


split into two processes: listener and executor this way, we can sandbox the listener with seccomp (todo) or capsicum (already done) and still have CGI scripts. When we want to exec, we tell the executor what to do, the executor executes the scripts and send the fd backt to the listener.


move cgi stuff to its own file


add protocols to the config


check also that the port number matches


style


sandbox also on FreeBSD with capsicum


conf & vhosts * gmid.c (main): changed behaviour: daemon off by default (main): changed -c in -C (cert option) (main): changed -k in -K (key option, for consistency with -C) (main): added -c to load a configuration (main): certs, key and doc (-C -K and -d) doesn't have a default value anymore (handle_handshake): add vhosts support


track handshakes This alter the current state machine by adding S_HANDSHAKE as the initial state. There, we ensure we did the handshake and we check SNI. ATM we simply continue in S_OPEN, but later we can add virtual host checks there, and skip to S_INITIALIZING with an error state if the client is accessing a wrong host.


avoid __dead and return at the end of main


reject non-gemini protocols with 53


s/uri/iri since we accept IRIs


fix build


fix remote_user for CGI and add -6 flag to enable ipv6