Cyril Bonté 1a0191d2ff BUG/MEDIUM: config: userlists should ensure that encrypted passwords are supported ...

When an unknown encryption algorithm is used in userlists or the password is
not pasted correctly in the configuration, http authentication silently fails.

An initial check is now performed during the configuration parsing, in order to
verify that the encrypted password is supported. An unsupported password will
fail with a fatal error.

This patch should be backported to 1.4 and 1.5.

2014-08-29 21:06:31 +02:00

..

acl.c

CLEANUP: acl: cleanup some of the redundancy and spaghetti after last fix

2014-08-29 19:13:32 +02:00

appsession.c

BUILD: definitely silence some stupid GCC warnings

2013-12-13 15:21:36 +01:00

arg.c

MINOR: arg: improve wording on error reporting

2013-12-13 00:38:47 +01:00

auth.c

BUG/MEDIUM: auth: fix segfault with http-auth and a configuration with an unknown encryption algorithm

2014-08-29 21:06:31 +02:00

backend.c

BUG/MEDIUM: backend: Update hash to use unsigned int throughout

2014-07-08 22:00:21 +02:00

base64.c

[MINOR] add encode/decode function for 30-bit integers from/to base64

2010-10-30 19:04:33 +02:00

buffer.c

MINOR: buffer: align the last output line if there are less than 8 characters left

2013-11-21 08:07:04 +01:00

cfgparse.c

BUG/MEDIUM: config: userlists should ensure that encrypted passwords are supported

2014-08-29 21:06:31 +02:00

channel.c

BUG/MEDIUM: channel: bi_putblk() must not wrap before the end of buffer

2014-04-24 17:19:21 +02:00

checks.c

BUG/MINOR: checks: external checks shouldn't wait for timeout to return the result

2014-08-07 07:23:51 +02:00

chunk.c

BUG/MINOR: chunk: Fix function chunk_strcmp and chunk_strcasecmp match a substring.

2014-05-09 19:16:13 +02:00

compression.c

BUG/MINOR: compression: correctly report incoming byte count

2014-04-23 19:31:17 +02:00

connection.c

MEDIUM: connection: add new bit in Proxy Protocol V2

2014-08-23 07:35:29 +02:00

cttproxy.c

CLEANUP: cttproxy: remove a warning on undeclared close()

2012-10-05 22:18:07 +02:00

dumpstats.c

BUILD: ssl: disable OCSP when using boringssl

2014-08-18 14:33:48 +02:00

ev_epoll.c

BUG/MEDIUM: polling: fix possible CPU hogging of worker processes after receiving SIGUSR1.

2014-05-20 14:57:36 +02:00

ev_kqueue.c

MINOR: polling: create function fd_compute_new_polled_status()

2014-01-26 00:42:32 +01:00

ev_poll.c

MINOR: polling: create function fd_compute_new_polled_status()

2014-01-26 00:42:32 +01:00

ev_select.c

MINOR: polling: create function fd_compute_new_polled_status()

2014-01-26 00:42:32 +01:00

fd.c

BUG/MEDIUM: polling: fix possible CPU hogging of worker processes after receiving SIGUSR1.

2014-05-20 14:57:36 +02:00

freq_ctr.c

BUG/MINOR: time: frequency counters are not totally accurate

2012-12-29 21:50:07 +01:00

frontend.c

MINOR: logs: don't limit HTTP header captures to HTTP frontends

2014-06-13 16:32:48 +02:00

haproxy-systemd-wrapper.c

MEDIUM: Improve signal handling in systemd wrapper.

2014-07-29 11:05:01 +02:00

haproxy.c

BUILD: ssl: handle boringssl in openssl version detection

2014-08-18 14:33:48 +02:00

hash.c

BUG/MEDIUM: backend: Update hash to use unsigned int throughout

2014-07-08 22:00:21 +02:00

hdr_idx.c

OPTIM/MINOR: move the hdr_idx pools out of the proxy struct

2011-10-24 18:15:04 +02:00

i386-linux-vsys.c

MEDIUM: listener: add support for linux's accept4() syscall

2012-10-08 20:11:03 +02:00

lb_chash.c

REORG/MEDIUM: server: split server state and flags in two different variables

2014-05-22 11:27:00 +02:00

lb_fas.c

REORG/MEDIUM: server: split server state and flags in two different variables

2014-05-22 11:27:00 +02:00

lb_fwlc.c

REORG/MEDIUM: server: split server state and flags in two different variables

2014-05-22 11:27:00 +02:00

lb_fwrr.c

REORG/MEDIUM: server: split server state and flags in two different variables

2014-05-22 11:27:00 +02:00

lb_map.c

MINOR: server: make use of srv_is_usable() instead of checking eweight

2014-05-23 14:29:11 +02:00

listener.c

MEDIUM: listener: support rebinding during resume()

2014-07-08 01:13:35 +02:00

log.c

MINOR: log: add a new field "%lc" to implement a per-frontend log counter

2014-08-28 15:08:14 +02:00

map.c

BUG/MEDIUM: patterns: last fix was still not enough

2014-04-28 14:19:17 +02:00

memory.c

MINOR: cli: add the new "show pools" command

2014-01-28 16:50:35 +01:00

pattern.c

BUG/MINOR: pattern: remove useless allocation of unused trash in pat_parse_reg()

2014-08-29 15:19:33 +02:00

payload.c

BUG/MINOR: acl: req_ssl_sni fails with SSLv3 record version

2014-04-10 23:30:59 +02:00

peers.c

BUG/MEDIUM: peers: fix key consistency for integer stick tables

2014-02-16 08:14:16 +01:00

pipe.c

BUILD/MINOR: silent a build warning in src/pipe.c (fcntl)

2011-10-24 17:09:22 +02:00

proto_http.c

BUG/MEDIUM: http: fix improper parsing of HTTP methods for use with ACLs

2014-08-29 15:15:50 +02:00

proto_tcp.c

BUG/MAJOR: tcp: fix a possible busy spinning loop in content track-sc*

2014-07-30 08:56:35 +02:00

proto_uxst.c

BUG/MEDIUM: unix: completely unbind abstract sockets during a pause()

2014-07-08 01:13:35 +02:00

protocol.c

REORG: split "protocols" files into protocol and listener

2012-09-15 22:29:32 +02:00

proxy.c

MEDIUM: proxy: make timeout parser a bit stricter

2014-05-22 08:26:41 +02:00

queue.c

MINOR: server: make use of srv_is_usable() instead of checking eweight

2014-05-23 14:29:11 +02:00

raw_sock.c

BUG/MINOR: raw_sock: also consider ENOTCONN in addition to EAGAIN for recv()

2014-03-04 07:27:18 +01:00

rbtree.c

[MINOR] imported the rbtree function from Linux kernel

2007-01-07 02:12:57 +01:00

regex.c

MINOR: regex: Use native PCRE API.

2014-06-18 15:14:00 +02:00

sample.c

BUG/MAJOR: tcp: fix a possible busy spinning loop in content track-sc*

2014-07-30 08:56:35 +02:00

server.c

MAJOR: checks: add support for a new "drain" administrative mode

2014-05-23 14:29:11 +02:00

session.c

MINOR: session: export the function 'smp_fetch_sc_stkctr'

2014-07-15 19:09:56 +02:00

sessionhash.c

[PATCH] appsessions: cleanup DEBUG_HASH and initialize request_counter

2008-08-13 23:43:26 +02:00

shctx.c

MINOR: stats: add counters for SSL cache lookups and misses

2014-05-28 16:53:04 +02:00

signal.c

BUG/MEDIUM: signal: signal handler does not properly check for signal bounds

2013-01-24 16:19:19 +01:00

ssl_sock.c

MEDIUM: connection: add new bit in Proxy Protocol V2

2014-08-23 07:35:29 +02:00

standard.c

MINOR: tools: add new functions to quote-encode strings

2014-06-16 18:20:14 +02:00

stick_table.c

BUG/MAJOR: tcp: fix a possible busy spinning loop in content track-sc*

2014-07-30 08:56:35 +02:00

stream_interface.c

MEDIUM: connection: Implement and extented PROXY Protocol V2

2014-05-09 08:25:38 +02:00

task.c

[OPTIM] task: don't scan the run queue if we know it's empty

2011-09-10 20:08:49 +02:00

time.c

BUG/MINOR: time: frequency counters are not totally accurate

2012-12-29 21:50:07 +01:00

trace.c

MINOR: add a new function call tracer for debugging purposes

2012-05-26 00:12:37 +02:00

uri_auth.c

BUG/MEDIUM: uri_auth: missing NULL check and memory leak on memory shortage

2013-01-24 16:19:19 +01:00