Permalink
Switch branches/tags
Commits on Mar 21, 2016
  1. game over

    Jamie Turner committed Mar 21, 2016
Commits on Sep 4, 2012
  1. Merge pull request #90 from stash/ssl-flag

    Jamie Turner committed Sep 4, 2012
    Honor the ssl config file & command-line option
Commits on Aug 10, 2012
  1. Merge pull request #113 from zenazn/master

    Jamie Turner committed Aug 10, 2012
    Better PROXY support and SNI
Commits on Jul 20, 2012
  1. Add SNI support

    carl-stripe committed Jun 28, 2012
    If multiple certificates are specified, try to perform Server Name
    Indication to serve the most appropriate one. We fall back to the last
    certificate presented if none of the previous ones match, making it a
    useful place to put a star cert.
    
    A few caveats:
    - Certificate names are compared as case-insensitive strings, without
      any special logic for dealing with wildcards. The current workaround
      is to always place wildcard certificates last, where they act as the
      default catch-all.
    - Certificates are examined in order. The first certificate that matches
      any given request will be used.
    - The name -> certificate mapping is stored in a singly linked list.
      This performs very well for use with a handful of certificates, none
      of which have very many Subject Alternative Names, however sites which
      must serve a large number of certificates or names might find a linear
      list scan on every new connection too slow.
  2. Proxy-PROXY support

    carl-stripe committed Jun 20, 2012
    A mode that enables transparently passing the PROXY header generated by
    HAProxy et. al. through to the backend connection. This can be useful
    if you are using a TCP load balancer (such as HAProxy in tcp mode) to
    distribute encrypted streams to stud before they are unwrapped.
  3. Code cleanup

    carl-stripe committed Jun 20, 2012
    The code had mixed tabs/spaces and trailing whitespace. I standardized
    on 4-space indentation for stud.c and deleted all trailing whitespace. I
    also cleaned up whitespace in shctx.c (but did not standardize spacing
    there)
Commits on Jun 2, 2012
  1. Merge pull request #79 from EmericBr/StudClientMode

    Jamie Turner committed Jun 2, 2012
    Stud client mode
Commits on Apr 12, 2012
Commits on Mar 15, 2012
  1. Updated readme.

    Jamie Turner committed Mar 15, 2012
  2. year upgrade!

    Jamie Turner committed Mar 15, 2012
  3. Merge pull request #83 from saaros/syslog-facility

    Jamie Turner committed Mar 15, 2012
    Logging: make syslog facility configurable.
  4. Merge pull request #78 from EmericBr/FIXbannersprotocols

    Jamie Turner committed Mar 15, 2012
    FIX if server starts to speek immediatly (banners protocol)
Commits on Mar 13, 2012
Commits on Mar 5, 2012
  1. Add client stuff.

    Emeric committed Mar 5, 2012
  2. Review FSM to perform connect only after handshake validation, it is …

    Emeric committed Mar 5, 2012
    …more safe and prepare client certificate management.
    
    Add proxy line is performed only after handshake to prepare PROXY protocol extension to include SSL data.
Commits on Mar 2, 2012
  1. FIX if server starts to speek immediatly (banners protocol)

    Emeric committed Mar 2, 2012
    FIX on send PROXY header if handshake is not finished.
    FIX if client starts renegotiation and server continue to send data, or ring_down buffer is not empty.
    Add define to compile without defer accept for banners protocols
Commits on Feb 29, 2012
  1. Add newline to supress warning.

    Jamie Turner committed Feb 29, 2012
  2. Fixes for FreeBSD 9 build.

    Jamie Turner committed Feb 29, 2012
Commits on Feb 24, 2012
  1. readme update.

    Jamie Turner committed Feb 24, 2012
  2. Merge pull request #69 from bfg/config_file

    Jamie Turner committed Feb 24, 2012
    Added configuration file support.
Commits on Feb 2, 2012
  1. Added configuration file support.

    Brane F. Gračnar committed Feb 2, 2012
    This patch adds the following functionality:
      * configuration file loading
      * default configuration printout
      * printing of loaded configuration
      * configuration testing
      * nicer --help message
      * version printing
      * addresses have new syntax: [HOST]:PORT
      * HOST,PORT arguments are still supported
    
    Stud can still be built without configuration file support by
    providing NO_CONFIG_FILE=1 argument to make
Commits on Jan 19, 2012
  1. Merge pull request #66 from bfg/prefer_server_ciphers

    Jamie Turner committed Jan 19, 2012
    Prefer server cipher list.
  2. Merge pull request #65 from blovett/master

    Jamie Turner committed Jan 19, 2012
    compile cleanly on systems without openssl ec support.
Commits on Jan 17, 2012
  1. Prefer server cipher list.

    Brane F. Gračnar committed Jan 17, 2012
    This commit adds command line option -O, which
    enables server cipher order preference; the same
    functionality is found in Apache (SSLHonorCipherOrder) and
    Nginx (ssl_prefer_server_ciphers).
Commits on Jan 3, 2012
Commits on Dec 15, 2011
  1. Implemented daemon mode.

    Brane F. Gračnar committed Dec 15, 2011
    This patch adds --daemon command line switch implementing
    true daemon startup.
    
    Init script was updated to support daemon mode.
Commits on Dec 13, 2011
  1. Merge pull request #63 from bfg/debian

    Jamie Turner committed Dec 13, 2011
    Multi-instance init script and Debian/Ubuntu package creation files
  2. Added Debian/Ubuntu package creation scripts.

    Brane F. Gračnar committed Dec 13, 2011
    You can create debian package using the following command:
    
    	dpkg-buildpackage -rfakeroot -b
  3. Added stud multi-instance init script.

    Brane F. Gračnar committed Dec 13, 2011
    This script should work on any sh-compatible shell.
  4. Added .gitignore file.

    Brane F. Gračnar committed Dec 13, 2011
Commits on Dec 12, 2011
  1. Updated note about shmem/udp build.

    Jamie Turner committed Dec 12, 2011
  2. The dates they go up too.

    Jamie Turner committed Dec 12, 2011
  3. The numbers they go up!

    Jamie Turner committed Dec 12, 2011