- 08 Jan, 2017 10 commits
-
-
Tatsuhiro Tsujikawa authored
-
Tatsuhiro Tsujikawa authored
Mention client-ciphers, and no-http2-cipher-black-list options in psk-secrets and client-psk-secrets options.
-
Tatsuhiro Tsujikawa authored
-
Tatsuhiro Tsujikawa authored
Previously, ciphers option sets cipher list for both frontend and backend TLS connections. With this commit, ciphers option only sets cipher list for frontend connections. The new client-ciphers option sets cipher list for backend connection.
-
Tatsuhiro Tsujikawa authored
This commit adds client-no-http2-cipher-black-list option to disable enforcement of HTTP/2 cipher black list on backend HTTP/2 connection. Previously, existing no-http2-cipher-black-list option disables it for both frontend and backend connections. Now no-http2-cipher-black-list option only disables it for frontend connection.
-
Tatsuhiro Tsujikawa authored
-
Tatsuhiro Tsujikawa authored
-
Tatsuhiro Tsujikawa authored
Because of the redundant check in backend HTTP/2 session, no-http2-cipher-black-list does not work on backend HTTP/2 connection. This commit fixes it.
-
Tatsuhiro Tsujikawa authored
-
Tatsuhiro Tsujikawa authored
-
- 07 Jan, 2017 2 commits
-
-
Tatsuhiro Tsujikawa authored
-
Tatsuhiro Tsujikawa authored
-
- 06 Jan, 2017 1 commit
-
-
Tatsuhiro Tsujikawa authored
-
- 04 Jan, 2017 2 commits
-
-
Tatsuhiro Tsujikawa authored
Fix issue reporting by PVS Studio
-
Tatsuhiro Tsujikawa authored
Update README file
-
- 03 Jan, 2017 10 commits
-
-
Alexis La Goutte authored
Consider checking the fourth actual argument of the 'fprintf' function. The SIGNED integer type argument is expected.
-
Alexis La Goutte authored
nghttp2_hd: fix It is odd that the body of 'hd_get_num_table_entries' function is fully equivalent to the body of 'get_max_index' function found by PVS Studio (V524)
-
Alexis La Goutte authored
nghttp2_submit: fix Parameter 'flags' is always rewritten in function body before being used found by PVS Studio (V763)
-
makovich authored
-
Tatsuhiro Tsujikawa authored
-
Tatsuhiro Tsujikawa authored
-
Tatsuhiro Tsujikawa authored
-
Tatsuhiro Tsujikawa authored
-
Tatsuhiro Tsujikawa authored
-
Tatsuhiro Tsujikawa authored
Previously, global accept-proxy-protocol option enables PROXY protocol support for all frontend listeners, but this was inflexible. To fix this issue, accept-proxy-protocol option is now deprecated, and instead proxyproto parameter in frontend option enables PROXY protocol support per frontend.
-
- 02 Jan, 2017 1 commit
-
-
Tatsuhiro Tsujikawa authored
boringssl says: /* It is an error to clear any bits that have already been set. (We can't try * to get a second close_notify or send two.) */ assert((SSL_get_shutdown(ssl) & mode) == SSL_get_shutdown(ssl));
-
- 30 Dec, 2016 3 commits
-
-
Tatsuhiro Tsujikawa authored
-
Tatsuhiro Tsujikawa authored
-
Tatsuhiro Tsujikawa authored
-
- 27 Dec, 2016 4 commits
-
-
Tatsuhiro Tsujikawa authored
-
Tatsuhiro Tsujikawa authored
-
Tatsuhiro Tsujikawa authored
-
Tatsuhiro Tsujikawa authored
-
- 25 Dec, 2016 5 commits
-
-
Tatsuhiro Tsujikawa authored
-
Tatsuhiro Tsujikawa authored
Plain write(2) is OK, but SSL_write requires same arguments on retry. It would be better to avoid calling them again.
-
Tatsuhiro Tsujikawa authored
-
Tatsuhiro Tsujikawa authored
-
Tatsuhiro Tsujikawa authored
-
- 24 Dec, 2016 2 commits
-
-
Tatsuhiro Tsujikawa authored
-
Tatsuhiro Tsujikawa authored
nghttpx: Add frontend-keep-alive-timeout option
-