Commits


convert remaining code to the imsg getters Now gmid doesn't touch anymore the internals of the imsg structs.


convert most of gmid to the new imsg APIs Makes parsing and handling of imsgs simpler / clearer. only crypto.c is left as-is.


convert to use imsg_get_fd() since proc_forward_imsg() never forwards a file descriptor (it's never called actually) just use -1 there.


ignore some errors from socket(2) There's no much we can do if we resolv an IPv6 address but its support is disabled in the current kernel, so ignore and go ahead. Spotted while testing gmid i n a FreeBSD jail without IPv6.


enable privsep crypto on all systems now that we have a bundled libtls we can actually do this. Retain the knob to disable it "just in case".


unbreak config_test() when !use_privsep_crypto The new config_test() fails miserably when the privsep crypto engine is not enabled. As a temporary workaround, forcibly disable it during config_test() as we're not going to run anyway.


try hard at loading the configuration during conftest (-n) Attempt to do also a few more steps that were previously done only at runtime. This can help verifying that the keypairs are matching for example, but also that there are no typos in the path to the root directories. Was requested some time ago by Marian Mizik, thanks for the feature request!


add `log syslog facility' to use a different syslog(3) facility Was requested ages ago by Karl Jeacle, now that there is some better support for configuring the logging there's no excuse to add this. It helps with filtering from syslog.d / syslog.conf.


set the default logging style back to legacy I think the condensed is better but it'll need to change post 2.0 to accomodate for logging the number of bytes read in the body of a titan request (and it's weird to hardcode a zero there.) 2.0 will ship with the legacy logging style thus.


actually use the specified log style


add log syslog off; don't turn syslog off when log access is specified


add ability to log to files with log access <path>


avoid use-after-free


revamp fastcgi configuration: make it per-location this revamps the syntax in the configuration to better match httpd(8) (and in general be less weird) and to allow per-location fastcgi configurations. the bare `param' is now deprecated, but for compatibility it acts like `fastcgi param' would do now. Same story for `fastcgi <pathÂ>'.


rename do_accept() -> server_accept()