call getnameinfo() only once per request

copyright years++

load the certs per listening address

implement `listen on' Listening by default on all the addresses is so bad I don't know why I haven't changed this before. Anyway. Add a `listen on $hostname port $port' syntax to the config file and deprecate the old "port" and "ipv6" global setting. Still try to honour them when no "listen on" directive is used for backward compatibily, but this will go away in the next next version hopefully. At the moment the `listen on' in server context don't filter the host, i.e. one can still reach a host from a address not specified in the corresponding `liste on', this will be added later.

rename client->addr to raddr (remote address) and keep original length

typo; use the `l' variable not `len'

disable the privsep crypto engine on !OpenBSD it fails bandly at runtime on various linux distros and on freebsd. Until a fix is found, disable it so I can move forward.

don't have the config being a global

move hosts into the config struct

move fastcgi from global var to the config struct while here also make them a list rather than a fixed-size array.

fix ge build

less logger.h

make ge work again

remove now unused ibuf variable

rework the daemon to do fork+exec It uses the 'common' proc.c from various OpenBSD-daemons. gmid grew organically bit by bit and it was also the first place where I tried to implement privsep. It wasn't done very well, in fact the parent process (that retains root privileges) just fork()s a generation of servers, all sharing *exactly* the same address space. No good! Now, we fork() and re-exec() ourselves, so that each process has a fresh address space. Some features (require client ca for example) are temporarly disabled, will be fixed in subsequent commits. The "ge" program is also temporarly disabled as it needs tweaks to do privsep too.