gmnisrv, branch main

Serve CA full chain (Let's Encrypt), TLS 1.3, fix handshake buffer overflow

2026-06-26T17:20:00+00:00

- tls.c/config.h: read full PEM chain into STACK_OF(X509), send via SSL_set1_chain - tls.c: minimum protocol TLS 1.2 -> TLS 1.3 - server.c: drain handshake output via local buffer loop instead of staging into the fixed 4 KB client buffer (a full CA chain overflowed it -> assert) - FORK.md: describe the fork

README.md: add maintenance notice

2023-01-16T12:33:40+00:00

Close some files when too many are open

2022-12-19T11:02:08+00:00

notify clients about malformed requests

2022-08-15T13:50:27+00:00

I think this has been broken for a while and I came across it while implementing my own client. The server should notify the client that the request is malformed but wasn't sending the response when SSL_read returned SSL_ERROR_WANT_READ.

serve: make hostname matching case-insensitive

2021-11-15T20:07:23+00:00

Reported-by: James Tomasino Signed-off-by: William Casarin

set session id context

2021-08-27T07:48:07+00:00

This is necessary now client certificates are supported. Without it, an attempt to resume a session fails with "ssl_get_prev_session:session id context uninitialized".

Check index before serving autoindex

2021-06-21T12:42:29+00:00

if a directory is being served.

Support REMOTE_USER in CGI

2021-06-17T13:52:50+00:00

Support TLS_CLIENT_SERIAL_NUMBER in CGI

2021-06-17T13:52:50+00:00

Use strncpy to build TLS_CLIENT_HASH

2021-06-17T13:52:49+00:00

strncat on an uninitialized array leads to issues.