summaryrefslogtreecommitdiffhomepage
AgeCommit message (Collapse)Author
2018-02-25fix early loggingrofl0r
tinyproxy uses a curious mechanism to log those early messages that result from parsing the config file before the logging mechanism has been properly set up yet by finishing parsing of the config file: those early messages are written into a memory buffer and then are printed later on. this slipped my attention when making it possible to log to stdout in ccbbb81a.
2018-02-25make send_stored_logs staticrofl0r
2018-02-25implement HTTP basic auth for upstream proxiesrofl0r
loosely based on @valenbg1's code from PR #38 closes #38 closes #96
2018-02-25basicauth.[ch]: refactor to make basicauth_string() reusablerofl0r
2018-02-25fix possible memory leakbertliao
2018-02-23Remove #ifdef for HAVE_SYSLOG_HJohn Weldon
- syslog.h is a standard posix header, this #ifdef is an artifact accidentally left in.
2018-02-09Fix CVE-2017-11747: Create PID file before dropping privileges.Michael Adam
Resolves #106 Signed-off-by: Michael Adam <obnox@samba.org>
2018-02-06move base64 code into own filerofl0r
it will be needed to add support for upstream proxy auth.
2018-02-06Basic Auth: send correct response codes and headers acc. to rfc7235rofl0r
as reported by @natedogith1
2018-02-06add support for basic HTTP authenticationrofl0r
using the "BasicAuth" keyword in tinyproxy.conf. base64 code was written by myself and taken from my own library "libulz". for this purpose it is relicensed under the usual terms of the tinyproxy license.
2018-02-06tinyproxy.conf.in: add example for SOCKS upstreamrofl0r
2018-02-06fix types used in SOCKS4/5 support coderofl0r
the line len = buff[0]; /* max = 255 */ could lead to a negative length if the value in buff[0] is > 127.
2018-02-06add SOCKS upstream proxy support (socks4/socks5)Gonzalo Tornaria
original patch submitted in 2006 to debian mailing list: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=392848%29#12 this version was rebased to git and updated by Russ Dill <russ.dill@gmail.com> in 2015 (the original patch used a different config file format). as discussed in #40. commit message by @rofl0r.
2018-02-06activate reverse proxy support by defaultrofl0r
closes #17
2017-12-04safe_write/read: take void* buffer for generic userofl0r
if using one of unsigned or signed char for the function prototype, one gets nasty warnings when using it with the other type. the only proper solution is to put void* into the prototype, and then specialize the pointer inside the function using an automatic variable. for exactly this reason, libc functions like read(), write(), etc use void* too.
2017-11-29configure.ac: remove -Wc++-compatrofl0r
2017-11-27Add example value for Log Level settingBrian Cain
2017-11-16log to stdout if no logfile specifiedrofl0r
some users want to run tinyproxy on an as-needed basis in a terminal, without setting it up permanently to run as a daemon/service. in such use case, it is very annoying that tinyproxy didn't have an option to log to stdout, so the user has to keep a second terminal open to `tail -f` the log. additionally, this precluded usage with runit service supervisor, which runs all services in foreground and creates logfiles from the service's stdout/stderr. since logging to stdout doesn't make sense when daemonized, now if no logfile is specified and daemon mode activated, a warning is printed to stderr once, and nothing is logged. the original idea was to fail with an error message, though some users might actually want to run tinyproxy as daemon and no logging at all.
2017-11-16do not create a pidfile, if none is specified in configrofl0r
some people want to run tinyproxy with minimal configuration from the command line (and as non-root), but tinyproxy insists on writing a pid file, which only makes sense for usage as a service, hereby forcing the user to either run it as root so it can write to the default location, or start editing the default config file to work around it. and if no pidfile is specified in the config, it frankly doesn't make sense to force creation of one anyway.
2017-11-16Issue 15 fix. PRPablo Panero
2017-11-16tinyproxy.conf.in: default to allow CONNECT method more broadlyrofl0r
tinyproxy conservatively defaulted to allow CONNECT method only on two ports used by SSL in the ancient past, but since HTTPS usage got much more widespread (actually, it's now the default for the majority of websites), it makes sense now to allow it without restriction by default to accomodate for the new situation.
2017-11-16Update README.mdSteven Conaway
2017-08-24Merge pull request #100 from dmd/patch-1Michael Adam
tinyproxy configure does not actually support enable-static
2017-07-18tinyproxy configure does not actually support enable-staticDaniel M. Drucker
See #90 and #99
2017-03-30Merge pull request #86 from obnoxxx/getipstring1Michael Adam
honor result of inet_ntop in get_ip_string()
2017-03-29network: honour result of inet_ntop in get_ip_string()Michael Adam
Signed-off-by: Michael Adam <obnox@samba.org>
2017-03-29network: let get_ip_string() return const char * instead of const charMichael Adam
Signed-off-by: Michael Adam <obnox@samba.org>
2017-03-29Merge pull request #66 from rofl0r/configure_trimMichael Adam
Configure trim
2017-03-29Merge pull request #67 from dmz-uk/patch-1Michael Adam
Prevent child from calling exit() on interrupt
2017-03-29Merge pull request #85 from rofl0r/fix_72Michael Adam
src/Makefile.am: fix spaces vs TAB
2017-03-27src/Makefile.am: fix spaces vs TABrofl0r
this causes a build failure on several platforms using older versions of autotools or GNU make. make[2]: Entering directory `src' Makefile:670: *** missing separator (did you mean TAB instead of 8 spaces?). Stop. make[2]: Leaving directory `src' fixes #72
2017-01-04Merge pull request #59 from gmp216/pullMichael Adam
Fix OS X build
2017-01-04configure.ac: add conditional for -z,defsGreg
2017-01-04Added conditional for xmllint by testing "a2x" without the -L flag.Greg
2017-01-04Merge pull request #71 from gmp216/lookupMichael Adam
Move lookup_variable from html-error.c to hashmap.c
2016-12-30Prevent child from calling exit() on interruptdmz-uk
A proposed fix for the logrotate SIGHUP issue.
2016-12-27Move lookup_variable into hashmap.c / hashmap.hGreg
2016-12-27Change signature for lookup_variable to take map instead of connptrGreg
2016-12-24Merge pull request #70 from obnoxxx/compileMichael Adam
add 'compile' to gitignore
2016-12-24Merge pull request #69 from obnoxxx/readmeMichael Adam
README: mention --enable-reverse configure option
2016-12-24add 'compile' to gitignoreMichael Adam
it's generated by autogen Signed-off-by: Michael Adam <obnox@samba.org>
2016-12-24README: mention --enable-reverse configure optionMichael Adam
Signed-off-by: Michael Adam <obnox@samba.org>
2016-12-24Merge pull request #68 from obnoxxx/travisMichael Adam
Enable travis-ci: add .travis.yml
2016-12-24Enable travis-ci: add .travis.ymlMichael Adam
Signed-off-by: Michael Adam <obnox@samba.org>
2016-12-21configure: remove checks for standard typesrofl0r
2016-12-21configure: remove checks for standard POSIX funcsrofl0r
addresses #65
2016-12-21configure: do not check for standard POSIX headersrofl0r
addresses #65
2016-12-21configure: do not check for standard C headersrofl0r
addresses #65
2016-12-20Merge pull request #63 from rofl0r/fix_manpage_genMichael Adam
ship manpages as part of the dist tarball
2016-12-20ship manpages as part of the dist tarballrofl0r
`make dist` now creates the manpages and puts them into the tarball, so the user does not need to have `a2x` installed to build them. closes #2