haproxy/src
William Lallemand ab4cd49c04 MEDIUM: ssl/crt-list: warn on negative filters only
negative SNI filters on crt-list lines only have a meaning when they
match a positive wildcard filter. This patch adds a warning which
is emitted when trying to use negative filters without any wildcard on
the same line.

This was discovered in ticket #2900.
2025-04-04 18:18:44 +02:00
..
acl.c MINOR: acl: export find_acl_default() 2024-11-18 15:15:54 +01:00
action.c
activity.c CLEANUP: assorted typo fixes in the code and comments 2025-04-02 11:12:20 +02:00
applet.c BUG/MEDIUM: applet: Don't handle EOI/EOS/ERROR is applet is waiting for room 2025-02-20 10:00:32 +01:00
arg.c MINOR: arg: add an argument type for identifier 2024-10-18 14:30:24 +02:00
auth.c BUG/MINOR: auth: Fix a leak on error path when parsing user's groups 2025-02-06 16:55:37 +01:00
backend.c MINOR: check/backend: support conn reuse with SNI 2025-04-03 17:19:07 +02:00
base64.c
buf.c CLEANUP: buffers: simplify b_get_varint() 2024-10-18 18:28:39 +02:00
cache.c CLEANUP: cache: use ASSUME_NONNULL() instead of DISGUISE() 2024-12-17 17:42:11 +01:00
calltrace.c
cbuf.c
cebtree-prv.h IMPORT: import cebtree (compact elastic binary trees) 2024-09-15 23:44:59 +02:00
cebu32_tree.c IMPORT: import cebtree (compact elastic binary trees) 2024-09-15 23:44:59 +02:00
cebu64_tree.c IMPORT: import cebtree (compact elastic binary trees) 2024-09-15 23:44:59 +02:00
cebua_tree.c IMPORT: import cebtree (compact elastic binary trees) 2024-09-15 23:44:59 +02:00
cebub_tree.c IMPORT: import cebtree (compact elastic binary trees) 2024-09-15 23:44:59 +02:00
cebuib_tree.c IMPORT: import cebtree (compact elastic binary trees) 2024-09-15 23:44:59 +02:00
cebuis_tree.c IMPORT: import cebtree (compact elastic binary trees) 2024-09-15 23:44:59 +02:00
cebul_tree.c IMPORT: import cebtree (compact elastic binary trees) 2024-09-15 23:44:59 +02:00
cebus_tree.c IMPORT: import cebtree (compact elastic binary trees) 2024-09-15 23:44:59 +02:00
cfgcond.c REORG: version: move the remaining BUILD_* stuff from haproxy.c to version.c 2025-01-20 17:53:55 +01:00
cfgdiag.c
cfgparse-global.c CLEANUP: assorted typo fixes in the code and comments 2025-04-02 11:12:20 +02:00
cfgparse-listen.c MINOR: proxy: add proxy->options3 2025-03-12 10:49:36 +01:00
cfgparse-quic.c CLEANUP: assorted typo fixes in the code and comments 2025-04-02 11:12:20 +02:00
cfgparse-ssl.c MEDIUM: ssl: replace "crt" lines by "ssl-f-use" lines 2025-04-03 16:38:15 +02:00
cfgparse-tcp.c BUG/MINOR: cfgparse-tcp: relax namespace bind check 2025-03-07 16:23:29 +01:00
cfgparse-unix.c
cfgparse.c BUG/MINOR: config: silence .notice/.warning/.alert in discovery mode 2025-04-01 09:06:25 +02:00
channel.c OPTIM: channel: speed up co_getline()'s search of the end of line 2024-09-30 11:36:39 +02:00
check.c MINOR: check: implement check-pool-conn-name srv keyword 2025-04-03 17:19:07 +02:00
chunk.c BUG/MEDIUM: chunk: make sure to flush the trash pool before resizing 2025-01-29 17:55:18 +01:00
cli.c MINOR: cli/server: don't take thread isolation to check for srv-removable 2025-03-18 17:36:02 +01:00
clock.c CLEANUP: assorted typo fixes in the code, commits and doc 2025-04-03 11:37:25 +02:00
compression.c BUG/MINOR: compression: handle a possible strdup() failure 2025-01-02 14:31:07 +01:00
connection.c MEDIUM: servers: Add strict-maxconn. 2025-02-26 13:00:18 +01:00
cpu_topo.c MINOR: cpu-topo: cpu_dump_topology() SMT info check little optimisation 2025-04-02 11:31:37 +02:00
cpuset.c MINOR: cpu-set: add a new function to print cpu-sets in human-friendly mode 2025-03-31 16:21:37 +02:00
debug.c DEBUG: init: add a way to register functions for unit tests 2025-03-03 12:43:32 +01:00
dgram.c MINOR: cfgparse: parse tune.{rcvbuf,sndbuf}.{frontend,backend} as sizes 2024-11-18 18:50:02 +01:00
dict.c
dns_ring.c MAJOR: import: update mt_list to support exponential back-off (try #2) 2024-07-09 16:46:38 +02:00
dns.c MEDIUM: socket: always properly use the sock_domain for requested families 2024-08-21 17:36:58 +02:00
dynbuf.c MINOR: cfgparse: parse tune.bufsize.small as a size 2024-11-18 19:07:05 +01:00
eb32sctree.c
eb32tree.c
eb64tree.c
ebimtree.c
ebistree.c
ebmbtree.c
ebpttree.c
ebsttree.c
ebtree.c
errors.c MEDIUM: errors: get rid of shm_open() 2025-01-07 16:42:38 +01:00
ev_epoll.c MEDIUM: pollers: Drop fd events after a takeover to another tgid. 2025-02-26 13:00:18 +01:00
ev_evports.c MEDIUM: pollers: Drop fd events after a takeover to another tgid. 2025-02-26 13:00:18 +01:00
ev_kqueue.c MEDIUM: pollers: Drop fd events after a takeover to another tgid. 2025-02-26 13:00:18 +01:00
ev_poll.c DEBUG: pollers/fd: add thread id suffix to per-thread memory areas name hints 2024-05-24 12:07:18 +02:00
ev_select.c DEBUG: pollers/fd: add thread id suffix to per-thread memory areas name hints 2024-05-24 12:07:18 +02:00
event_hdl.c BUG/MEDIUM: event_hdl: fix uninitialized value in async mode when no data is provided 2024-11-29 10:18:07 +01:00
extcheck.c BUG/MEDIUM: checks: make sure to always apply offsets to now_ms in expiration 2024-11-15 15:39:00 +01:00
fcgi-app.c CLEANUP: tree-wide: define and use acl_match_cond() helper 2025-01-27 11:11:43 +01:00
fcgi.c
fd.c MEDIUM: connections: Allow taking over connections from other tgroups. 2025-02-26 13:00:18 +01:00
filters.c BUG/MEDIUM: filters: Handle filters registered on data with no payload callback 2025-02-17 16:16:29 +01:00
fix.c
flt_bwlim.c MEDIUM: bwlim: Use a read-lock on the sticky session to apply a shared limit 2024-09-02 15:50:25 +02:00
flt_http_comp.c MINOR: compression: Introduce minimum size 2025-02-22 11:32:40 +01:00
flt_spoe.c MINOR: flt-spoe: Report end of input immediately after applet init 2025-02-06 11:19:32 +01:00
flt_trace.c BUG/MINOR: flt-trace: Support only one name option 2025-02-06 17:01:15 +01:00
freq_ctr.c MINOR: freq_ctr: provide non-blocking read functions 2025-02-21 18:26:29 +01:00
frontend.c MINOR: protocol: create abnsz socket address family 2024-10-29 12:14:50 +01:00
guid.c BUG/MINOR: guid/server: ensure thread-safety on GUID insert/delete 2024-11-07 18:17:03 +01:00
h1_htx.c BUG/MINOR: fcgi: Don't set the status to 302 if it is already set 2025-02-17 16:37:53 +01:00
h1.c MINOR: proxy: Rename accept-invalid-http-* options 2024-09-16 22:55:25 +02:00
h2.c CLEANUP: assorted typo fixes in the code, commits and doc 2025-04-03 11:37:25 +02:00
h3_stats.c MINOR: h3/qpack: adjust naming for errors 2024-05-16 10:31:17 +02:00
h3.c CLEANUP: assorted typo fixes in the code, commits and doc 2025-04-03 11:37:25 +02:00
haproxy.c CLEANUP: assorted typo fixes in the code and comments 2025-04-02 11:12:20 +02:00
hash.c
hlua_fcn.c MEDIUM: task: make notification_* API thread safe by default 2025-04-03 17:52:50 +02:00
hlua.c MEDIUM: task: make notification_* API thread safe by default 2025-04-03 17:52:50 +02:00
hpack-dec.c
hpack-enc.c
hpack-huff.c
hpack-tbl.c
hq_interop.c MINOR: h3/hq-interop: restore function for standalone FIN receive 2025-03-07 12:06:26 +01:00
http_acl.c
http_act.c CLEANUP: assorted typo fixes in the code and comments 2025-04-02 11:12:20 +02:00
http_ana.c MEDIUM: stream: interrupt costly rulesets after too many evaluations 2025-02-03 17:09:48 +01:00
http_client.c BUG/MEDIUM: mworker/httpclient: initialization skipped by accident in mworker mode 2024-10-17 12:16:35 +02:00
http_conv.c MINOR: http-conv: Remove unreachable goto statement in sample_conv_q_preferred 2024-11-06 10:06:52 +01:00
http_ext.c CLEANUP: assorted typo fixes in the code and comments 2025-04-02 11:12:20 +02:00
http_fetch.c BUG/MINOR: http-fetch: Ignore empty argument string for query() 2024-12-11 10:00:01 +01:00
http_htx.c MINOR: config: Alert about extra arguments for errorfile and errorloc 2025-01-03 10:10:09 +01:00
http_rules.c MINOR: http-ana: Add support for "set-cookie-fmt" option to redirect rules 2024-11-19 15:20:02 +01:00
http.c MINOR: http: Add support for HTTP 414/431 status codes 2024-11-19 15:29:40 +01:00
htx.c MEDIUM: htx: prevent <mark> to copy incomplete headers in htx_xfer_blks() 2025-01-31 15:51:51 +01:00
init.c
jws.c REORG: ssl: move curves2nid and nid2nist to ssl_utils 2025-04-02 19:34:09 +02:00
jwt.c BUG/MEDIUM: jwt: Clear SSL error queue on error when checking the signature 2024-07-26 16:59:00 +02:00
lb_chash.c MEDIUM: lb-chash: add directive hash-preserve-affinity 2025-03-25 18:01:01 +01:00
lb_fas.c MINOR: proxies/servers: Calculate queueslength and use it. 2025-01-28 12:49:41 +01:00
lb_fwlc.c BUG/MEDIUM: leastconn: Don't try to reposition if the server is down 2025-04-02 12:24:04 +02:00
lb_fwrr.c MINOR: proxies/servers: Calculate queueslength and use it. 2025-01-28 12:49:41 +01:00
lb_map.c MINOR: proxies/servers: Calculate queueslength and use it. 2025-01-28 12:49:41 +01:00
lb_ss.c
limits.c CLEANUP: assorted typo fixes in the code, commits and doc 2025-04-03 11:37:25 +02:00
linuxcap.c MINOR: startup: use global progname variable 2024-11-21 19:55:21 +01:00
listener.c MINOR: quic: remove unused pacing burst in bind_conf/quic_cc_path 2025-01-23 17:40:48 +01:00
log.c CLEANUP: log: adjust _lf_cbor_encode_byte() comment 2025-04-03 17:52:56 +02:00
lru.c
mailers.c BUG/MEDIUM: mailers: make sure to always apply offsets to now_ms in expiration 2024-11-15 15:39:58 +01:00
map.c MINOR: pattern: split pat_ref_set() 2024-11-26 16:12:05 +01:00
mjson.c
mqtt.c CLEANUP: mqtt: fix typo in MQTT_REMAINING_LENGHT_MAX_SIZE 2024-08-30 14:58:59 +02:00
mux_fcgi.c CLEANUP: assorted typo fixes in the code, commits and doc 2025-04-03 11:37:25 +02:00
mux_h1.c CLEANUP: assorted typo fixes in the code, commits and doc 2025-04-03 11:37:25 +02:00
mux_h2.c CLEANUP: assorted typo fixes in the code, commits and doc 2025-04-03 11:37:25 +02:00
mux_pt.c MEDIUM: tevt/muxes: Add dedicated termination events for muxc/se locations 2025-01-31 10:41:50 +01:00
mux_quic.c CLEANUP: assorted typo fixes in the code, commits and doc 2025-04-03 11:37:25 +02:00
mux_spop.c BUG/MEDIUM: spoe/mux-spop: Introduce an NOOP action to deal with empty ACK 2025-02-20 11:56:27 +01:00
mworker-prog.c BUG/MINOR: mworker-prog: don't warn about deprecated section with expose-deprecated-directives 2024-11-19 14:13:30 +01:00
mworker.c MEDIUM: errors: get rid of shm_open() 2025-01-07 16:42:38 +01:00
namespace.c BUG/MINOR: namespace: handle a possible strdup() failure 2024-12-10 08:05:34 +01:00
ncbuf.c
pattern.c CLEANUP: assorted typo fixes in the code, commits and doc 2025-04-03 11:37:25 +02:00
payload.c
peers.c BUG/MEDIUM: peers: prevent learning expiration too far in futur from unsync node 2025-04-03 11:26:29 +02:00
pipe.c
pool.c MEDIUM: pools: be a bit smarter when merging comparable size pools 2025-03-25 18:01:01 +01:00
proto_quic.c CLEANUP: assorted typo fixes in the code and comments 2025-04-02 11:12:20 +02:00
proto_rhttp.c BUG/MINOR: server: check for either proxy-protocol v1 or v2 to send hedaer 2025-03-03 04:05:47 +01:00
proto_sockpair.c MINOR: proto_sockpair: send_fd_uxst: init iobuf, cmsghdr, cmsgbuf to zeros 2024-11-25 15:20:24 +01:00
proto_tcp.c MEDIUM: protocol: add MPTCP per address support 2024-08-30 18:53:49 +02:00
proto_udp.c CLEANUP: protocol: no longer initialize .receivers nor .nb_receivers 2024-08-21 17:37:46 +02:00
proto_uxdg.c MINOR: protocol: create abnsz socket address family 2024-10-29 12:14:50 +01:00
proto_uxst.c BUG/MEDIUM: uxst: fix outgoing abns address family in connect() 2025-02-21 07:59:08 +01:00
protocol.c MEDIUM: protocol: add MPTCP per address support 2024-08-30 18:53:49 +02:00
proxy.c CLEANUP: assorted typo fixes in the code and comments 2025-04-02 11:12:20 +02:00
qmux_http.c MINOR: h3/hq-interop: restore function for standalone FIN receive 2025-03-07 12:06:26 +01:00
qmux_trace.c MINOR: mux-quic/h3: emit SETTINGS via MUX tasklet handler 2025-02-19 11:03:40 +01:00
qpack-dec.c MINOR: h3/qpack: adjust naming for errors 2024-05-16 10:31:17 +02:00
qpack-enc.c
qpack-tbl.c
queue.c CLEANUP: assorted typo fixes in the code and comments 2025-04-02 11:12:20 +02:00
quic_ack.c
quic_cc_bbr.c CLEANUP: assorted typo fixes in the code and comments 2025-04-02 11:12:20 +02:00
quic_cc_cubic.c MINOR: quic: move global tune options into quic_tune 2025-03-24 10:01:46 +01:00
quic_cc_drs.c BUG/MINOR: quic: remove max_bw filter from delivery rate sampling 2024-12-13 14:42:43 +01:00
quic_cc_newreno.c MINOR: quic: transform pacing settings into a global option 2025-01-30 17:19:38 +01:00
quic_cc_nocc.c MINOR: quic: transform pacing settings into a global option 2025-01-30 17:19:38 +01:00
quic_cc.c MINOR: quic: remove unused pacing burst in bind_conf/quic_cc_path 2025-01-23 17:40:48 +01:00
quic_cid.c CLEANUP: assorted typo fixes in the code and comments 2024-09-03 17:49:21 +02:00
quic_cli.c MINOR: cli/quic: Add a "help" keyword to show quic 2024-11-26 14:55:30 +01:00
quic_conn.c CLEANUP: assorted typo fixes in the code, commits and doc 2025-04-03 11:37:25 +02:00
quic_enc.c TESTS: quic: create first quic unittest 2025-03-07 12:06:26 +01:00
quic_fctl.c
quic_frame.c MINOR: quic: support frame type as a varint 2025-02-14 09:00:05 +01:00
quic_loss.c BUILD: quic: remove GCC undefined error in qc_release_lost_pkts() 2025-01-31 15:34:30 +01:00
quic_openssl_compat.c
quic_pacing.c MINOR: quic: adapt credit based pacing to BBR 2025-01-23 17:41:07 +01:00
quic_retransmit.c MINOR: quic: implement dedicated type for out-of-order stream ACK 2024-10-04 17:56:45 +02:00
quic_retry.c BUG/MEDIUM: quic: always validate sender address on 0-RTT 2024-08-30 17:04:09 +02:00
quic_rules.c CLEANUP: tree-wide: define and use acl_match_cond() helper 2025-01-27 11:11:43 +01:00
quic_rx.c CLEANUP: assorted typo fixes in the code, commits and doc 2025-04-03 11:37:25 +02:00
quic_sock.c BUILD: quic_sock: address a strict-aliasing build warning with gcc 5 and 6 2025-04-02 16:07:31 +02:00
quic_ssl.c BUG/MEDIUM: quic: avoid freezing 0RTT connections 2024-10-17 15:04:06 +02:00
quic_stats.c
quic_stream.c CLEANUP: assorted typo fixes in the code and comments 2025-04-02 11:12:20 +02:00
quic_tls.c CLEANUP: assorted typo fixes in the code, commits and doc 2025-04-03 11:37:25 +02:00
quic_token.c MINOR: quic: Token for future connections implementation. 2024-08-30 17:04:09 +02:00
quic_tp.c MINOR: quic: define max-stream-data configuration as a ratio 2025-03-25 16:30:35 +01:00
quic_trace.c MINOR: quic: implement dedicated type for out-of-order stream ACK 2024-10-04 17:56:45 +02:00
quic_tx.c CLEANUP: assorted typo fixes in the code and comments 2025-04-02 11:12:20 +02:00
raw_sock.c MINOR: tevt/connection: Add support for POLL_HUP/POLL_ERR events 2025-01-31 10:41:50 +01:00
regex.c
resolvers.c BUG/MEDIUM: promex/resolvers: Don't dump metrics if no nameserver is defined 2025-01-06 09:08:38 +01:00
ring.c MINOR: ring: count processed messages in ring_dispatch_messages() 2024-07-24 17:59:03 +02:00
sample.c CLEANUP: assorted typo fixes in the code and comments 2025-04-02 11:12:20 +02:00
server_state.c BUG/MINOR: server-state: Fix expiration date of srvrq_check tasks 2024-12-11 10:00:01 +01:00
server.c MINOR: check: implement check-pool-conn-name srv keyword 2025-04-03 17:19:07 +02:00
session.c MEDIUM: protocol: rely on AF_CUST_ABNS family to recognize ABNS sockets 2024-10-29 12:14:37 +01:00
sha1.c
shctx.c DEBUG: shctx: name shared memory using vma_set_name() 2024-05-21 17:55:03 +02:00
signal.c MINOR: tinfo: add a new thread flag to indicate a call from a sig handler 2025-02-21 17:41:38 +01:00
sink.c CLEANUP: assorted typo fixes in the code, commits and doc 2025-04-03 11:37:25 +02:00
slz.c
sock_inet.c MEDIUM: protocol: add MPTCP per address support 2024-08-30 18:53:49 +02:00
sock_unix.c MEDIUM: socket: add zero-terminated ABNS alternative 2024-10-29 12:15:24 +01:00
sock.c CLEANUP: assorted typo fixes in the code, commits and doc 2025-04-03 11:37:25 +02:00
ssl_ckch.c CLEANUP: assorted typo fixes in the code, commits and doc 2025-04-03 11:37:25 +02:00
ssl_clienthello.c BUG/MEDIUM: ssl: chosing correct certificate using RSA-PSS with TLSv1.3 2025-02-07 20:56:42 +01:00
ssl_crtlist.c MINOR: ssl/crtlist: handle crt_path == cc->crt in crtlist_load_crt() 2025-02-17 18:26:37 +01:00
ssl_gencert.c MINOR: ssl: store the filenames resulting from a lookup in ckch_conf 2025-02-13 17:44:00 +01:00
ssl_ocsp.c BUG/MAJOR: ssl/ocsp: fix NULL conn object dereferencing to access QUIC TLS counters 2025-01-07 15:19:42 +01:00
ssl_sample.c MEDIUM: ssl/sample: add ssl_fc_sigalgs_bin sample fetch 2024-08-26 15:17:40 +02:00
ssl_sock.c MEDIUM: ssl/crt-list: warn on negative filters only 2025-04-04 18:18:44 +02:00
ssl_utils.c REORG: ssl: move curves2nid and nid2nist to ssl_utils 2025-04-02 19:34:09 +02:00
stats-file.c MEDIUM: stats-file: silently ignore be/fe mistmatch 2024-11-19 16:44:51 +01:00
stats-html.c BUG/MEDIUM: stats/server: use watcher to track server during stats dump 2024-12-10 16:19:33 +01:00
stats-json.c BUG/MINOR: stats-json: Define JSON_INT_MAX as a signed integer 2025-02-06 17:19:49 +01:00
stats-proxy.c CLEANUP: assorted typo fixes in the code and comments 2025-04-02 11:12:20 +02:00
stats.c MINOR: stats: add alt name info to stat_cols_info where relevant 2025-03-21 17:05:02 +01:00
stconn.c MINOR: tevt/applet: Add limited support for termination event logs for applets 2025-01-31 10:41:50 +01:00
stick_table.c CLEANUP: assorted typo fixes in the code and comments 2025-04-02 11:12:20 +02:00
stream.c CLEANUP: assorted typo fixes in the code, commits and doc 2025-04-03 11:37:25 +02:00
systemd.c BUILD: systemd: fix usage of reserved name "sun" in the address field 2024-11-25 08:09:09 +01:00
task.c CLEANUP: task: move the barrier after clearing th_ctx->current 2025-02-21 18:31:46 +01:00
tcp_act.c MINOR: action: add do-log action 2024-10-04 21:38:14 +02:00
tcp_rules.c MEDIUM: stream: interrupt costly rulesets after too many evaluations 2025-02-03 17:09:48 +01:00
tcp_sample.c MINOR: sample: define bc_reused fetch 2025-04-02 14:57:40 +02:00
tcpcheck.c MINOR: check: implement check-pool-conn-name srv keyword 2025-04-03 17:19:07 +02:00
thread.c MINOR: threads: Add HA_RWLOCK_TRYRDTOWR() 2025-04-01 18:05:30 +02:00
time.c
tools.c CLEANUP: assorted typo fixes in the code, commits and doc 2025-04-03 11:37:25 +02:00
trace.c MINOR: trace: support all source alias on -dt 2025-01-10 14:50:59 +01:00
uri_auth.c MEDIUM: uri_auth: implement clean uri_auth cleaning 2024-11-14 15:03:38 +01:00
uri_normalizer.c BUILD: tree-wide: cast arguments to tolower/toupper to unsigned char (2) 2024-07-18 13:29:52 +02:00
vars.c OPTIM: vars: use multiple name heads in the vars struct 2024-09-15 23:51:51 +02:00
version.c REORG: version: move the remaining BUILD_* stuff from haproxy.c to version.c 2025-01-20 17:53:55 +01:00
wdt.c MINOR: tinfo: split the signal handler report flags into 3 2025-02-24 13:37:52 +01:00
xprt_handshake.c
xprt_quic.c BUG/MINOR: quic: prevent crash on conn access after MUX init failure 2025-02-18 10:43:56 +01:00