gmnisrv/src/serve.c, branch main

serve: make hostname matching case-insensitive

2021-11-15T20:07:23+00:00

Reported-by: James Tomasino Signed-off-by: William Casarin

Check index before serving autoindex

2021-06-21T12:42:29+00:00

if a directory is being served.

Support REMOTE_USER in CGI

2021-06-17T13:52:50+00:00

Support TLS_CLIENT_SERIAL_NUMBER in CGI

2021-06-17T13:52:50+00:00

Use strncpy to build TLS_CLIENT_HASH

2021-06-17T13:52:49+00:00

strncat on an uninitialized array leads to issues.

Revert "Routing: Fix non-ascii paths"

2021-05-04T13:43:23+00:00

This causes a security issue (path traversal) This reverts commit ea360fa4c10791c3c720c33470c86923424348fe.

Send client certificate hash for CGI scripts.

2021-02-11T14:19:16+00:00

Set SSL_VERIFY_PEER to request a client certificate from the server, when available. Have to shim the certificate verification function or else it will fail on self-signed client certs. In serve_cgi retrieve client certificate, create a fingerprint, and set proper environment variables. It's pretty barebones, it doesn't parse the certificate to give any other useful info like the common name, but it's acceptable IMO. For most CGI uses the fingerprint is the only thing that is needed anyways.

ignore SIGCHLD to prevent CGI zombies

2021-02-07T13:07:05+00:00

with nothing waiting on the forked processes there is no reason not to reap the CGI process on exit intended to address issue from mailing list "gmnisrv uses too many tasks" <163806E8-A16A-463E-8C62-43E903EF1E35@librem.one>

implement handling of ROUTE_EXACT definitions

2021-01-29T13:55:43+00:00

This patchset implements the handling of exact routes as described in gmnisrvini(5).

Routing: Fix non-ascii paths

2021-01-22T13:15:03+00:00