Fabian Keil [Tue, 2 Nov 2021 11:17:56 +0000 (12:17 +0100)]
Add Artem Ivanov as contributor
Fabian Keil [Sat, 6 Nov 2021 12:50:49 +0000 (13:50 +0100)]
Regenerate config file
Fabian Keil [Sat, 6 Nov 2021 12:46:29 +0000 (13:46 +0100)]
config: Explicitly mention that the CGI pages disclosing the ca-password can be blocked
... and upgrade the disclosure paragraphs to a warning.
Fabian Keil [Thu, 4 Nov 2021 20:35:45 +0000 (21:35 +0100)]
uagen: Bump copyright
Fabian Keil [Wed, 31 Mar 2021 11:33:17 +0000 (13:33 +0200)]
privoxy-log-parser: Highlight 'Socket timeout 3 reached: 127.0.0.1:20000/no-filter/chunked-content/36'
Fabian Keil [Thu, 25 Mar 2021 14:45:53 +0000 (15:45 +0100)]
privoxy-log-parser: Improve documentation for inactivity-detection mode
Fabian Keil [Wed, 24 Mar 2021 06:55:54 +0000 (07:55 +0100)]
privoxy-log-parser: Detect date changes when looking for inactivity
Fabian Keil [Fri, 26 Nov 2021 12:18:23 +0000 (13:18 +0100)]
uagen: Bump BROWSER_REVISION to match Firefox version to 91 (ESR)
Regression introduced in
077333a08de.
Lee [Wed, 24 Nov 2021 21:18:32 +0000 (16:18 -0500)]
put all the requested debug options in the config
Section 11.1 of the Privoxy user manual lists all the debug options that
should be enabled when reporting problems or requesting support.
Make it easier for users to do the right thing by having all those
options present in the config.
Fabian Keil [Fri, 12 Nov 2021 08:55:06 +0000 (09:55 +0100)]
Disable fast-redirects for .zeit.de/zustimmung
Fabian Keil [Thu, 11 Nov 2021 09:59:35 +0000 (10:59 +0100)]
Update #184 to note that it will (hopefully) appear after the 3.0.34 release
Fabian Keil [Mon, 8 Nov 2021 13:46:43 +0000 (14:46 +0100)]
Unblock adv-archiv.dfn-cert.de/
Fabian Keil [Sat, 6 Nov 2021 17:02:25 +0000 (18:02 +0100)]
configure: Bump SOURCE_DATE_EPOCH
Fabian Keil [Sat, 6 Nov 2021 17:01:22 +0000 (18:01 +0100)]
Declare 3.0.33 stable
Lee [Thu, 11 Nov 2021 12:02:30 +0000 (07:02 -0500)]
nit: put all the '--enable-xxx' options together
Lee [Thu, 11 Nov 2021 11:59:10 +0000 (06:59 -0500)]
update the build script to use mbed tls version 2.6.11
Lee [Thu, 11 Nov 2021 11:54:23 +0000 (06:54 -0500)]
update build script to use the final 8.45 pcre library
https://www.pcre.org/
Version 8.45 is expected to be the final release of the older PCRE library, and new
projects should use PCRE2 instead.
Fabian Keil [Sat, 13 Mar 2021 10:17:38 +0000 (11:17 +0100)]
regression-tests.action: Add fetch test for p.p/wpad.dat
Bump for-privoxy-version to 3.0.33 which introduced the wpad.dat support.
Fabian Keil [Fri, 5 Mar 2021 10:32:03 +0000 (11:32 +0100)]
Bump copyright
Fabian Keil [Fri, 5 Mar 2021 08:44:43 +0000 (09:44 +0100)]
Add Richard Schneidt to the list of contributors
Fabian Keil [Mon, 1 Mar 2021 11:22:06 +0000 (12:22 +0100)]
Add a CGI handler for /wpad.dat
... that returns a Proxy Auto-Configuration (PAC) file.
Among other things, it can be used to instruct clients
through DHCP to use Privoxy as proxy.
For example with the dnsmasq option:
dhcp-option=252,http://config.privoxy.org/wpad.dat
Initial patch by Richard Schneidt.
Fabian Keil [Sat, 13 Feb 2021 12:43:02 +0000 (13:43 +0100)]
listen_loop(): When shutting down gracefully, close listening ports
... before waiting for the threads to exit.
Allows to start a second Privoxy with the same config file
while the first Privoxy is still running.
Fabian Keil [Sun, 7 Feb 2021 15:44:52 +0000 (16:44 +0100)]
GNUmakefile.in: Fix typo
Fabian Keil [Sat, 6 Feb 2021 21:38:04 +0000 (22:38 +0100)]
Add more tests for the '/send-banner' code
Fabian Keil [Sat, 6 Feb 2021 09:35:17 +0000 (10:35 +0100)]
Add test for OVE-
20210203-0001
Fabian Keil [Sat, 6 Feb 2021 09:16:17 +0000 (10:16 +0100)]
Add a test for CVE-2021-20217
Fabian Keil [Thu, 21 Jan 2021 13:16:51 +0000 (14:16 +0100)]
Bump copyright
Fabian Keil [Mon, 11 Jan 2021 13:16:12 +0000 (14:16 +0100)]
privoxy-log-parser: Add a --passed-request-statistics-threshold option
That can be set to get statistics for requests that
were passed.
Fabian Keil [Sun, 21 Mar 2021 17:52:32 +0000 (18:52 +0100)]
privoxy-log-parser: Add a "inactivity detection" mode
Which can be useful for debugging purposes.
Fabian Keil [Sun, 21 Mar 2021 17:58:03 +0000 (18:58 +0100)]
privoxy-log-parser: Bump version to 0.9.4
Fabian Keil [Tue, 23 Mar 2021 07:25:02 +0000 (08:25 +0100)]
action_render_string_actions_template(): Reposition an asterisk
Fabian Keil [Tue, 23 Mar 2021 07:22:36 +0000 (08:22 +0100)]
cgi_edit_process_string_action(): Fix an error message
Maxim Antonov [Mon, 14 Dec 2020 09:48:32 +0000 (16:48 +0700)]
Allow to edit the add-header action through the CGI editor
.. by generalizing the code that got added with the
suppress-tag action.
Closes: SF patch request #146
Fabian Keil [Thu, 25 Mar 2021 11:52:00 +0000 (12:52 +0100)]
Update max-client-connections's description
On modern systems other than Windows Privoxy should
use poll() in which case the FD_SETSIZE value isn't
releveant.
Fabian Keil [Thu, 25 Mar 2021 11:58:00 +0000 (12:58 +0100)]
Add a warning that the socket-timeout does not apply to operations done by TLS libraries
Fabian Keil [Thu, 25 Mar 2021 15:02:07 +0000 (16:02 +0100)]
privoxy-log-parser: Only run print_intro() and print_outro() when syntax highlighting
Fabian Keil [Thu, 25 Mar 2021 15:03:45 +0000 (16:03 +0100)]
privoxy-log-parser: Rephrase a sentence in the documentation
Fabian Keil [Fri, 26 Mar 2021 18:44:08 +0000 (19:44 +0100)]
process_encrypted_request(): Improve a log message
The function only processes request headers and there
may still be unread request body data left to process.
Fabian Keil [Fri, 26 Mar 2021 19:12:38 +0000 (20:12 +0100)]
privoxy-log-parser: Highlight 'Client socket 7 is no longer usable. The server socket has been closed.'
Fabian Keil [Sat, 27 Mar 2021 04:49:05 +0000 (05:49 +0100)]
read_http_request_body(): Fix two error messages that used an incorrect variable
Fabian Keil [Sat, 27 Mar 2021 06:46:00 +0000 (07:46 +0100)]
chat(): Log the applied actions before deciding how to forward the request
Fabian Keil [Sat, 27 Mar 2021 10:07:12 +0000 (11:07 +0100)]
parse_time_header(): Silence a coverity complaint when building without assertions
Fabian Keil [Sat, 27 Mar 2021 14:45:48 +0000 (15:45 +0100)]
Rename process_encrypted_request() to process_encrypted_request_headers()
... and update the comment.
Fabian Keil [Sat, 27 Mar 2021 14:44:10 +0000 (15:44 +0100)]
Rename receive_encrypted_request() to receive_encrypted_request_headers()
... and update the comment description.
Fabian Keil [Mon, 29 Mar 2021 10:31:00 +0000 (12:31 +0200)]
Block requests to eu-tlp01.kameleoon.eu/
Fabian Keil [Fri, 2 Apr 2021 08:48:47 +0000 (10:48 +0200)]
Block requests to fpa-events.arstechnica.com/
Fabian Keil [Fri, 2 Apr 2021 15:15:32 +0000 (17:15 +0200)]
receive_encrypted_request_headers(): Improve a log message
Fabian Keil [Thu, 4 Nov 2021 20:24:44 +0000 (21:24 +0100)]
uagen: Bump version to 1.2.3
Fabian Keil [Thu, 4 Nov 2021 20:23:48 +0000 (21:23 +0100)]
uagen: Bump generated Firefox version to 91 (ESR)
Lee [Wed, 7 Jul 2021 03:15:34 +0000 (23:15 -0400)]
nit: remove compiler warnings
"log_error(LOG_LEVEL_FATAL, ..." doesn't return but apparently the compiler doesn't know that.
Get rid of several "this statement may fall through [-Wimplicit-fallthrough=]" warnings.
i686-w64-mingw32-gcc -c -Imbedtls/include -pipe -O2 -fstack-protector-strong -D_FORTIFY_SOURCE=2 -Wall -Wextra -Wno-missing-field-initializers -Wno-sign-compare -Wno-type-limits -Wno-unused-parameter -Wno-unused-but-set-variable -Wformat=2 -Wlogical-op -Wshadow -DNDEBUG -DWINVER=0x501 -I/source/pcre-8.44/ -I/source/mbedtls-2.16.10/include -I/source/brotli-1.0.9/c/include -mwindows -Wall jcc.c -o jcc.o
jcc.c: In function ‘bind_port_helper’:
jcc.c:5820:13: warning: this statement may fall through [-Wimplicit-fallthrough=]
5820 | log_error(LOG_LEVEL_FATAL,
| ^~~~~~~~~~~~~~~~~~~~~~~~~~
5821 | "can't bind to %s:%d: There may be another Privoxy "
| ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
5822 | "or some other proxy running on port %d",
| ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
5823 | bind_address, hport, hport);
| ~~~~~~~~~~~~~~~~~~~~~~~~~~~
jcc.c:5825:10: note: here
5825 | case -2:
| ^~~~
Lee [Wed, 7 Jul 2021 02:53:52 +0000 (22:53 -0400)]
nit: note expected behavior
If building for Windows with -Wimplicit-fallthrough you'll get a warning message about
"this statement may fall through." Make it clear this is expected.
i686-w64-mingw32-gcc -c -Imbedtls/include -pipe -O2 -fstack-protector-strong -D_FORTIFY_SOURCE=2 -march=native -Wall -Wextra -Wno-missing-field-initializers -Wno-sign-compare -Wno-type-limits -Wno-unused-parameter -Wno-unused-but-set-variable -Wformat=2 -Wno-format-nonliteral -Wlogical-op -Wshadow -Wuninitialized -Winit-self -DNDEBUG -DWINVER=0x501 -I/source/pcre-8.44/ -I/source/mbedtls-2.16.10/include -I/source/brotli-1.0.9/c/include -mwindows -Wall w32log.c -o w32log.o
w32log.c: In function ‘LogWindowProc’:
w32log.c:1190:27: warning: this statement may fall through [-Wimplicit-fallthrough=]
1190 | g_bShowLogWindow = wParam;
| ~~~~~~~~~~~~~~~~~^~~~~~~~
w32log.c:1191:7: note: here
1191 | case WM_SIZE: /* note: implicit-fallthrough */
| ^~~~
Fabian Keil [Wed, 30 Jun 2021 12:58:12 +0000 (14:58 +0200)]
mbedTLS get_ciphersuites_from_string(): Use strlcpy() instead of strncpy()
Previously the terminating NUL wasn't copied which resulted
in a compiler warning. This didn't cause actual problems as
the target buffer was initialized by zalloc_or_die() so the
last byte of the target buffer was NUL already.
Actually copying the terminating NUL seems clearer, though.
Reported by: Lee
Fabian Keil [Wed, 24 Mar 2021 09:54:32 +0000 (10:54 +0100)]
privoxy-log-parser: Clarify --statistics output
... by explicitly mentioning that the status codes
sent by the server may differ from the ones in
"debug 512" messages.
Fabian Keil [Tue, 23 Mar 2021 14:06:55 +0000 (15:06 +0100)]
privoxy-log-parser: Fix typo in the --statistics output
Fabian Keil [Tue, 23 Mar 2021 16:53:24 +0000 (17:53 +0100)]
Mark #87 as work in progress
Fabian Keil [Tue, 23 Mar 2021 04:58:47 +0000 (05:58 +0100)]
load_config(): Fix indentation
Fabian Keil [Sun, 21 Mar 2021 17:05:53 +0000 (18:05 +0100)]
privoxy-log-parser: Remove an unused variable
Fabian Keil [Sun, 14 Mar 2021 16:58:00 +0000 (17:58 +0100)]
Update #184 to note that it will probably appear after the 3.0.33 release
Fabian Keil [Thu, 20 May 2021 09:39:27 +0000 (11:39 +0200)]
Rebuild docs
Fabian Keil [Tue, 18 May 2021 09:25:12 +0000 (11:25 +0200)]
Update the 'debug 1' description in two more places
... which I overlooked in
30c327078f4486.
As of
b94bbe62a9508 LOG_LEVEL_REQUEST logs all requests.
Pointed out by Lee.
Roland Rosenfeld [Sun, 11 Apr 2021 11:08:39 +0000 (13:08 +0200)]
Adapt Debian patches to GIT changes.
Roland Rosenfeld [Sun, 11 Apr 2021 11:06:38 +0000 (13:06 +0200)]
Import Debian changes from 3.0.32-2 (apparmor fixup and documentation)
Lee [Sat, 10 Apr 2021 19:09:12 +0000 (15:09 -0400)]
rebuild docs
Lee [Sat, 10 Apr 2021 17:38:01 +0000 (13:38 -0400)]
grammar nit
Lee [Sat, 10 Apr 2021 17:35:45 +0000 (13:35 -0400)]
grammar nit
Lee [Sat, 10 Apr 2021 17:33:39 +0000 (13:33 -0400)]
we don't need offensive documentation
Lee [Sat, 10 Apr 2021 17:29:44 +0000 (13:29 -0400)]
add FIXME cvs is no more!!! notes
Lee [Sat, 10 Apr 2021 17:27:54 +0000 (13:27 -0400)]
add another step in the windows release process
- verify that you have current software for the libraries
Lee [Sat, 10 Apr 2021 17:25:54 +0000 (13:25 -0400)]
add another step in the windows repease process
- verify that you have current software for the libraries
Lee [Sat, 10 Apr 2021 17:18:15 +0000 (13:18 -0400)]
remove leading spaces from <screen> and <programlisting> blocks
we automatically add two leading spaces to every line in <screen>
and <programlisting> blocks now, so remove the explicit indentation
that was there.
Lee [Sat, 10 Apr 2021 16:49:41 +0000 (12:49 -0400)]
have <screen> and <programlisting> blocks indented by two spaces
Define %indent-programlisting-lines% and %indent-screen-lines% to be
two spaces for both the print and html generated text styles
<style-specification id="print|html"
after which I get a stack overflow when pulling in the GPL licence text,
so import into a <literallayout> section instead of a <screen>
Lee [Sat, 10 Apr 2021 16:36:14 +0000 (12:36 -0400)]
update windows build instructions
tell where to get and how to build the PCRE, MBED-TLS, brotli libraries.
Lee [Sat, 10 Apr 2021 15:33:25 +0000 (11:33 -0400)]
Add missing <filename> ... </filename> markup for filenames.
Lee [Sat, 10 Apr 2021 15:16:42 +0000 (11:16 -0400)]
Update the max-client-connections documentation
The default value for max-client-connections is 128, so there is no
"Effect if unset:". The value is 128 or whatever the user specified in
the config file.
Lee [Sat, 10 Apr 2021 15:05:28 +0000 (11:05 -0400)]
"Maximum number of connections reached" msg log level changed to LOG_LEVEL_ERROR
Since the max number of connections is a user set value, make it easier to
notice that the limit is being hit.
It was logged at LOG_LEVEL_CONNECT, which is easy to miss.
Fabian Keil [Sun, 14 Mar 2021 01:23:46 +0000 (02:23 +0100)]
Remove #142 as the obsolete pcre code has been removed
Fabian Keil [Fri, 26 Feb 2021 09:35:36 +0000 (10:35 +0100)]
Remove obsolete pcre code
It was already detached from the build since
d7c2657e0b.
Lee [Sun, 21 Mar 2021 20:45:27 +0000 (16:45 -0400)]
fix indentation
Lee [Sun, 21 Mar 2021 20:41:34 +0000 (16:41 -0400)]
add a note that DEP is also called NX or nxcompat
and show how to check for the flag being set
Lee [Sun, 21 Mar 2021 20:33:03 +0000 (16:33 -0400)]
update the windows build to use the latest mbed tls v2.16.10
release notes:
https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.10
This release of Mbed TLS provides bug fixes and minor enhancements.
This release includes fixes for security issues.
Default behavior changes
In mbedtls_rsa_context objects, the ver field was formerly documented
as always 0. It is now reserved for internal purposes and may take
different values.
Security
Fix a buffer overflow in mbedtls_mpi_sub_abs() when calculating
|A| - |B| where |B| is larger than |A| and has more limbs (so the
function should return MBEDTLS_ERR_MPI_NEGATIVE_VALUE). Only
applications calling mbedtls_mpi_sub_abs() directly are affected:
all calls inside the library were safe since this function is
only called with |A| >= |B|. Reported by Guido Vranken in #4042.
Fix an errorneous estimation for an internal buffer in
mbedtls_pk_write_key_pem(). If MBEDTLS_MPI_MAX_SIZE is set to an odd
value the function might fail to write a private RSA keys of the largest
supported size.
Found by Daniel Otte, reported in #4093 and fixed in #4094,
backported in #4100.
Fix a stack buffer overflow with mbedtls_net_poll() and
mbedtls_net_recv_timeout() when given a file descriptor that is
beyond FD_SETSIZE. Reported by FigBug in #4169.
Guard against strong local side channel attack against base64 tables by
making access aceess to them use constant flow code.
Bugfix
Fix an incorrect error code if an RSA private operation glitched.
Fix a resource leak in CTR_DRBG and HMAC_DRBG when MBEDTLS_THREADING_C
is enabled, on platforms where initializing a mutex allocates resources.
This was a regression introduced in the previous release. Reported in
#4017, #4045 and #4071.
Ensure that calling mbedtls_rsa_free() or mbedtls_entropy_free()
twice is safe. This happens for RSA when some Mbed TLS library functions
fail. Such a double-free was not safe when MBEDTLS_THREADING_C was
enabled on platforms where freeing a mutex twice is not safe.
Fix a resource leak in a bad-arguments case of mbedtls_rsa_gen_key()
when MBEDTLS_THREADING_C is enabled on platforms where initializing
a mutex allocates resources.
This change makes 'mbedtls_x509write_crt_set_basic_constraints'
consistent with RFC 5280 4.2.1.9 which says: "Conforming CAs MUST
include this extension in all CA certificates that contain public keys
used to validate digital signatures on certificates and MUST mark the
extension as critical in such certificates." Previous to this change,
the extension was always marked as non-critical. This was fixed by
#4044.
Lee [Sun, 21 Mar 2021 20:22:07 +0000 (16:22 -0400)]
do not give warnings for a windows build using --disable-pthread
Posix threads need to be disabled on windows - see w32svrapi.c
...
Lee [Sun, 21 Mar 2021 19:24:57 +0000 (15:24 -0400)]
Merge branch 'master' of ssh://git.privoxy.org:23/git/privoxy
Fabian Keil [Sat, 20 Mar 2021 13:05:44 +0000 (14:05 +0100)]
If the the response is chunk-encoded, ignore the Content-Length
... header sent by the server.
Allows to load https://redmine.lighttpd.net/ with filtering enabled.
Previously requests would fail with complaints like:
2021-03-20 14:02:08.924
619000011880 Connect: Done reading from server. Expected content length: 7235. Actual content length: 7243. Bytes most recently read: 8130.
2021-03-20 14:02:08.924
619000011880 Re-Filter: Need to de-chunk first
2021-03-20 14:02:08.924
619000011880 Error: Not enough room for trailing CRLF.
2021-03-20 14:02:08.925
619000011880 Connect: Received 7243 bytes while expecting 7235.
2021-03-20 14:02:08.925
619000011880 Connect: Marking the server socket 8 tainted.
Privoxy would then forward a partialy de-chunked response with
trailing garbage without removing the Transfer-Encoding header.
Fabian Keil [Fri, 19 Mar 2021 09:03:38 +0000 (10:03 +0100)]
Add Gwyn Ciesla to the list of contributors
Fabian Keil [Thu, 18 Mar 2021 17:25:15 +0000 (18:25 +0100)]
configure: Add another warning in case --disable-pthread is used
... while POSIX threads are available.
Various features don't even compile when not using threads.
Fabian Keil [Sat, 6 Feb 2021 19:19:10 +0000 (20:19 +0100)]
Add configure option to enable MemorySanitizer
Fabian Keil [Sat, 6 Feb 2021 10:24:52 +0000 (11:24 +0100)]
Add configure option to enable UndefinedBehaviorSanitizer
Fabian Keil [Sat, 6 Feb 2021 10:23:50 +0000 (11:23 +0100)]
Add configure option to enable AddressSanitizer
Fabian Keil [Wed, 17 Mar 2021 11:35:12 +0000 (12:35 +0100)]
Bump copyright
Fabian Keil [Wed, 17 Mar 2021 11:12:42 +0000 (12:12 +0100)]
Add a configure option to disable pcre JIT compilation
While JIT compilation makes filtering faster it can
cause false-positive valgrind complaints like:
==94928== Thread 2:
==94928== Conditional jump or move depends on uninitialised value(s)
==94928== at 0x40A990B: ???
==94928== by 0x955E761: ???
==94928== Uninitialised value was created by a heap allocation
==94928== at 0x4C26A44: malloc (in /usr/local/lib/valgrind/vgpreload_memcheck-amd64-freebsd.so)
==94928== by 0x5114247: BUF_MEM_grow_clean (in /usr/local/lib/libcrypto.so.11)
==94928== by 0x50F2FD2: ??? (in /usr/local/lib/libcrypto.so.11)
==94928== by 0x50EDB7F: ??? (in /usr/local/lib/libcrypto.so.11)
==94928== by 0x50ECD78: ??? (in /usr/local/lib/libcrypto.so.11)
==94928== by 0x50ECC75: BIO_write (in /usr/local/lib/libcrypto.so.11)
==94928== by 0x5C15B0F: ??? (in /usr/local/lib/libssl.so.11)
==94928== by 0x5C422A9: ??? (in /usr/local/lib/libssl.so.11)
==94928== by 0x5C39156: ??? (in /usr/local/lib/libssl.so.11)
==94928== by 0x5C07F9A: ??? (in /usr/local/lib/libssl.so.11)
==94928== by 0x50ED3AA: BIO_ctrl (in /usr/local/lib/libcrypto.so.11)
==94928== by 0x460033: create_server_ssl_connection (openssl.c:1150)
As reported by Gwyn Ciesla in SF bug 924 it also can
cause problems when the SELinux policy does not grant
Privoxy "execmem" privileges.
Fabian Keil [Wed, 17 Mar 2021 11:06:49 +0000 (12:06 +0100)]
configure: Remove obsolete RPM_BASE check
Fabian Keil [Wed, 17 Mar 2021 10:58:38 +0000 (11:58 +0100)]
Bump copyright
Fabian Keil [Wed, 17 Mar 2021 08:13:53 +0000 (09:13 +0100)]
Store the PEM certificate in a dynamically allocated buffer
... when https-inspecting.
Should prevent errors like:
2021-03-16 22:36:19.148
7f47bbfff700 Error: X509 PEM cert len 16694 is larger than buffer len 16383
As a bonus it should slightly reduce the memory usage as most
certificates are smaller than the previously used fixed buffer.
Reported by: Wen Yue
Fabian Keil [Mon, 15 Mar 2021 21:05:23 +0000 (22:05 +0100)]
privoxy-log-parser: Highlight 'The peer notified us that the connection on socket 11 is going to be closed'
Fabian Keil [Sun, 14 Mar 2021 16:17:26 +0000 (17:17 +0100)]
Don't log the applied actions in process_encrypted_request()
Log them in continue_https_chat() instead to mirror chat().
Prevents the applied actions from getting logged twice
for the first request on an https-inspected connection.
Fabian Keil [Tue, 16 Mar 2021 19:05:42 +0000 (20:05 +0100)]
Bump copyright
Lee [Mon, 15 Mar 2021 16:55:58 +0000 (12:55 -0400)]
Merge branch 'master' of ssh://git.privoxy.org:23/git/privoxy
Fabian Keil [Mon, 15 Mar 2021 09:34:27 +0000 (10:34 +0100)]
OpenSSL generate_host_certificate(): Use config.privoxy.org as Common Name
... Org and Org Unit if the real host name is too long to
get accepted by OpenSSL.
Prevents failures like:
2021-03-15 10:04:34.318
802816f00 Error: X509 subject name (code: CN, val: only-d-pmjr9f4mclevwwl2mwckreicm8k1afzk-
1615774207025.nstool.netease.com) error: error:
0D07A097:asn1 encoding routines:ASN1_mbstring_ncopy:string too
Clients should only care about the Subject Alternative Name
anyway and we can continue to use the real host name for it.
Reported by Miles Wen on privoxy-users@.
Fabian Keil [Mon, 15 Mar 2021 08:56:10 +0000 (09:56 +0100)]
OpenSSL generate_host_certificate(): Fix two error messsages
Fabian Keil [Sun, 14 Mar 2021 16:36:25 +0000 (17:36 +0100)]
Improve description of handle_established_connection()