gmnisrv/include/config.h, branch main
Fork of gmnisrv (Gemini server): full CA certificate chain (Lets Encrypt), TLS 1.3 only, handshake buffer-overflow fix
https://git.virebent.art/virebent/gmnisrv/atom?h=main
2026-06-26T17:20:00+00:00
Serve CA full chain (Let's Encrypt), TLS 1.3, fix handshake buffer overflow
2026-06-26T17:20:00+00:00
Gab Virebent
gab@virebent.art
2026-06-26T17:20:00+00:00
urn:sha1:fb48d1308d2f63f8e9b23c5d1d921783fa0dacbe
- tls.c/config.h: read full PEM chain into STACK_OF(X509), send via SSL_set1_chain
- tls.c: minimum protocol TLS 1.2 -> TLS 1.3
- server.c: drain handshake output via local buffer loop instead of staging
into the fixed 4 KB client buffer (a full CA chain overflowed it -> assert)
- FORK.md: describe the fork
implement handling of ROUTE_EXACT definitions
2021-01-29T13:55:43+00:00
René Wagner
rwagner@rw-net.de
2021-01-27T19:57:18+00:00
urn:sha1:32913c35cd5f36b00056d3e239c0e85f1f0ed000
This patchset implements the handling of exact routes
as described in gmnisrvini(5).
Implement URL rewrites with regex capture groups
2020-11-01T16:19:51+00:00
Drew DeVault
sir@cmpwn.com
2020-11-01T16:19:51+00:00
urn:sha1:dc6e4e80c0b0a3950594e32db7cff1b2db24d75c
Initial pass on regex routing support
2020-10-30T02:47:56+00:00
Drew DeVault
sir@cmpwn.com
2020-10-30T02:47:56+00:00
urn:sha1:7e8a9537949f298eef026f6b97b8c349a9b56ea0
All this does is parse the regexes out of the config file.
I've vendored libregexp from Bellard's quickjs project, because it's
reasonably small and self-contained, and POSIX regexes don't support
captures. We're eventually going to want captures for URL rewrites, so
this'll do for now.
Initial support for CGI scripts
2020-10-26T03:16:50+00:00
Drew DeVault
sir@cmpwn.com
2020-10-26T03:16:50+00:00
urn:sha1:cc1bd152e30e14827d2a002fef99384f418c22ab
Initial implementation of a routing table
2020-10-26T01:46:01+00:00
Drew DeVault
sir@cmpwn.com
2020-10-26T01:46:01+00:00
urn:sha1:8baeb5a51c4dfa03956887ade2ef77295f17c95e
Remove [:tls] email directive
2020-09-26T20:41:11+00:00
Drew DeVault
sir@cmpwn.com
2020-09-26T20:41:11+00:00
urn:sha1:fc036335eb8d32ad991874aac364752b68a43a24
Implement autoindex option
2020-09-26T19:51:28+00:00
Drew DeVault
sir@cmpwn.com
2020-09-26T19:51:28+00:00
urn:sha1:6bc9c4deb90e8daa228d792b23a3e61b7bebdb78
Implement TLS exchange with clients
2020-09-24T23:58:41+00:00
Drew DeVault
sir@cmpwn.com
2020-09-24T23:58:34+00:00
urn:sha1:fa69887e52201eb348f1bfbecf72bdab5c57bd9c
This probably leaves a bit to be desired tbh
tls: move cert/key into host structure
2020-09-24T21:55:10+00:00
Drew DeVault
sir@cmpwn.com
2020-09-24T21:55:10+00:00
urn:sha1:7af04ea4713770cd19cb9659a59f8758e4207c2c
We'll later want to set these on the SSL object (rather than SSL_CTX),
so move these into the host struct for later access.
We'll prefer to set it on the SSL object so that we can automatically
use an up-to-date certificate, per ~sircmpwn/gmni#26.