split into two processes: listener and executor this way, we can sandbox the listener with seccomp (todo) or capsicum (already done) and still have CGI scripts. When we want to exec, we tell the executor what to do, the executor executes the scripts and send the fd backt to the listener.

set SERVER_NAME to the vhost when executing CGI scripts

drop inet_ntop leftovers we switched to getnameinfo some time ago, but that call to inet_ntop remained. Fortunately, it doesn't harm, since what i wrote is overwritten by getnameinfo and the provided buffer should be large enough.

move cgi stuff to its own file

add protocols to the config

sync changes

check also that the port number matches

style

sandbox also on FreeBSD with capsicum

update README

added sample configuration

normalize host name when parsing the IRI RFC3986 3.2.2 "Host" says that > Although host is case-insensitive, producers and normalizers should > use lowercase for registered names and hexadecimal addresses for the > sake of uniformity, while only using uppercase letters for > percent-encodings. so we cope with that.

conf & vhosts * gmid.c (main): changed behaviour: daemon off by default (main): changed -c in -C (cert option) (main): changed -k in -K (key option, for consistency with -C) (main): added -c to load a configuration (main): certs, key and doc (-C -K and -d) doesn't have a default value anymore (handle_handshake): add vhosts support

typo

sync changes