Willy Tarreau f51c6989b0 MEDIUM: ssl: implement a workaround for the OpenSSL heartbleed attack ... Using the previous callback, it's trivial to block the heartbeat attack, first we control the message length, then we emit an SSL error if it is out of bounds. A special log is emitted, indicating that a heartbleed attack was stopped so that they are not confused with other failures. That way, haproxy can protect itself even when running on an unpatched SSL stack. Tests performed with openssl-1.0.1c indicate a total success.		2014-04-25 20:06:33 +02:00
..
acl.h	MINOR: pattern: store configuration reference for each acl or map pattern.	2014-03-17 18:06:07 +01:00
arg.h	MAJOR: sample: maintain a per-proxy list of the fetch args to resolve	2013-04-03 02:13:02 +02:00
auth.h	MEDIUM: pattern: The match function browse itself the list or the tree.	2014-03-17 18:06:07 +01:00
backend.h	MINOR: stats: Enhancement to stats page to provide information of last session time.	2014-02-08 01:19:58 +01:00
channel.h	CLEANUP: buffers: remove unused function buffer_contig_space_with_res()	2014-04-24 17:19:22 +02:00
checks.h	MINOR: checks: use an inline function for health_adjust()	2013-12-31 23:47:37 +01:00
compression.h	MINOR: compression: CPU usage limit	2012-11-21 02:15:16 +01:00
connection.h	MEDIUM: ssl: implement a workaround for the OpenSSL heartbleed attack	2014-04-25 20:06:33 +02:00
cttproxy.h
dumpstats.h	MEDIUM: stats: reimplement HTTP keep-alive on the stats page	2014-04-24 17:24:56 +02:00
fd.h	MINOR: polling: create function fd_compute_new_polled_status()	2014-01-26 00:42:32 +01:00
freq_ctr.h
frontend.h	REORG: connection: move the PROXY protocol management to connection.c	2012-10-05 00:32:33 +02:00
hdr_idx.h
lb_chash.h
lb_fas.h
lb_fwlc.h
lb_fwrr.h
lb_map.h
listener.h	CLEANUP: fix missing include <string.h> in proto/listener.h	2013-06-14 19:52:17 +02:00
log.h	MINOR: configuration: File and line propagation	2014-03-17 18:06:08 +01:00
map.h	MINOR: map: export parse output sample functions	2013-12-12 15:44:05 +01:00
obj_type.h	MINOR: obj: introduce a new type appctx	2013-12-09 15:40:22 +01:00
pattern.h	MINOR: pattern: find element in a reference	2014-04-25 17:31:13 +02:00
payload.h	MINOR: payload: split smp_fetch_rdp_cookie()	2013-08-01 21:17:13 +02:00
peers.h
pipe.h
port_range.h
proto_http.h	MEDIUM: http: register http-request and http-response keywords	2014-04-25 18:48:35 +02:00
proto_tcp.h	BUG/MEDIUM: stick-table: fix IPv4-to-IPv6 conversion in src_* fetches	2014-04-14 18:22:57 +02:00
proto_uxst.h
protocol.h
proxy.h	MEDIUM: proxy: create a tree to store proxies by name	2014-03-15 07:48:35 +01:00
queue.h	MINOR: http: implement the max-keep-alive-queue setting	2014-04-25 14:14:41 +02:00
raw_sock.h
sample.h	MINOR: configuration: File and line propagation	2014-03-17 18:06:08 +01:00
server.h	REORG: cfgparse: move server keyword parsing to server.c	2014-03-31 10:42:03 +02:00
session.h	MEDIUM: counters: stop relying on session flags at all	2014-01-28 23:34:45 +01:00
shctx.h	MINOR: ssl: Setting global tune.ssl.cachesize value to 0 disables SSL session cache.	2012-12-28 14:48:13 +01:00
signal.h
ssl_sock.h	MINOR: cli: add more information to the "show info" output	2014-01-28 15:19:44 +01:00
stick_table.h	MEDIUM: stick-tables: flush old entries upon soft-stop	2013-09-04 17:54:01 +02:00
stream_interface.h	MEDIUM: stream-int: make si_connect() return an established state when possible	2013-12-31 23:32:12 +01:00
task.h
template.h