aboutsummaryrefslogtreecommitdiffstats
path: root/vespalib
Commit message (Collapse)AuthorAgeFilesLines
* use latch instead of executor and improve timing testingHåvard Pettersen2018-11-301-36/+48
|
* added Latch utilityHåvard Pettersen2018-11-296-3/+178
|
* Merge pull request #7786 from vespa-engine/havardpe/initial-portal-codeTor Brede Vekterli2018-11-2924-0/+2070
|\ | | | | initial portal code
| * initial portal codeHåvard Pettersen2018-11-2724-0/+2070
| |
* | Also test with hash_mapHenning Baldersheim2018-11-281-2/+34
| |
* | Randomize keysHenning Baldersheim2018-11-281-5/+9
| |
* | =defaultHenning Baldersheim2018-11-282-15/+4
|/
* Rename `allowed-peers` to `authorized-peers`Tor Brede Vekterli2018-11-2014-143/+123
|
* Merge pull request #7608 from ↵Tor Brede Vekterli2018-11-1322-37/+827
|\ | | | | | | | | vespa-engine/vekterli/add-support-for-basic-certificate-verification-policies Add support for basic certificate verification policies in C++
| * `Cursor` -> `Inspector` for parsingTor Brede Vekterli2018-11-131-4/+4
| |
| * Correct test nameTor Brede Vekterli2018-11-131-1/+1
| |
| * Use explicit `const` for `auto`Tor Brede Vekterli2018-11-131-3/+3
| |
| * Add support for basic certificate verification policies in C++Tor Brede Vekterli2018-11-0822-36/+826
| | | | | | | | | | | | | | | | Extends TLS config JSON file with an `allowed-peers` object, which if non-empty specifies a set of policies that a peer may match. If at least one policy exists a peer must match all requirements in any single policy to be allowed to connect. I.e. it's sufficient to match 1 policy out of many.
* | = deafult and 0 -> nullptrHenning Baldersheim2018-11-092-8/+8
|/
* Use template args for the class, not on the find method.Henning Baldersheim2018-11-018-91/+46
|
* Use a templated find() to enable lookup without object creation when objects ↵Henning Baldersheim2018-11-014-7/+40
| | | | are comparable.
* remove extra hugHåvard Pettersen2018-10-191-2/+2
|
* half_close for sync crypto socketsHåvard Pettersen2018-10-193-0/+38
|
* half_close for crypto socketsHåvard Pettersen2018-10-199-4/+149
|
* Add support for half-close to `CryptoCodec` and OpenSSL implementationTor Brede Vekterli2018-10-184-69/+163
|
* Add support for custom certificate verification callbacksTor Brede Vekterli2018-10-1521-45/+931
| | | | | | | Specified as part of `TransportSecurityOptions` and will default to a callback accepting all pre-verified certificates if not given. Callback is provided with certificate subject Common Name and DNS Subject Alternate Name entries.
* added sync crypto socket with testHåvard Pettersen2018-10-097-3/+257
|
* added simple test for various crypto socketsHåvard Pettersen2018-10-093-0/+199
|
* added SingleFdSelector utilityHåvard Pettersen2018-10-093-0/+152
|
* test empty smart bufferHåvard Pettersen2018-10-091-0/+6
|
* Merge pull request #7160 from ↵Tor Brede Vekterli2018-10-011-0/+3
|\ | | | | | | | | vespa-engine/vekterli/silently-handle-tls-client-graceful-shutdown Handle case where SSL_read fails when client has shutdown normally
| * Handle case where SSL_read fails when client has shutdown normallyTor Brede Vekterli2018-10-011-0/+3
| | | | | | | | | | | | Break the connection silently when SSL_ERROR_ZERO_RETURN is returned from SSL_read, as this just implies the client has sent a shutdown alert frame.
* | GC HashMapHenning Baldersheim2018-09-2816-236721/+50
|/
* Merge pull request #7132 from ↵Tor Brede Vekterli2018-09-284-79/+301
|\ | | | | | | | | vespa-engine/vekterli/more-openssl-testing-and-improved-pem-error-reporting Improve OpenSSL codec tests and error detection for X509 PEM parsing
| * Improve OpenSSL codec tests and error detection for X509 PEM parsingTor Brede Vekterli2018-09-274-79/+301
| | | | | | | | | | Also support creating non-authenticated clients in case the codec will be used for non-RPC purposes at some point.
* | use static assertHåvard Pettersen2018-09-281-3/+1
| |
* | avoid dynamic castHåvard Pettersen2018-09-283-7/+9
| |
* | mixed mode tls support in fnetHåvard Pettersen2018-09-2710-4/+237
| |
* | remove performance disclaimer related to using SimpleBufferHåvard Pettersen2018-09-271-3/+0
|/
* Merge pull request #7081 from ↵Tor Brede Vekterli2018-09-277-4/+250
|\ | | | | | | | | vespa-engine/vekterli/add-tls-protocol-snooping-utilities Add functionality for detecting whether a client is using TLS or not
| * Address code review feedbackTor Brede Vekterli2018-09-253-12/+26
| |
| * Add functionality for detecting whether a client is using TLS or notTor Brede Vekterli2018-09-257-4/+236
| | | | | | | | | | Inspects first 8 bytes of a client's initial data stream to determine if it's (with very high confidence) a TLS ClientHello message.
* | Add newline and rewrite error handling to a linear sequence of guards.Henning Baldersheim2018-09-261-13/+13
| |
* | Add simple usage test for vespa-drop-file-from-cacheHenning Baldersheim2018-09-263-8/+28
| |
* | Add simple usage test for vespa-drop-file-from-cacheHenning Baldersheim2018-09-262-0/+21
| |
* | Nested namespace and =deleteHenning Baldersheim2018-09-261-10/+5
| |
* | Add simple program to drop files from the buffer cache.Henning Baldersheim2018-09-254-0/+36
|/
* Address code review feedbackTor Brede Vekterli2018-09-242-2/+2
|
* Introduce custom OpenSSL BIOs for providing direct buffer read/writeTor Brede Vekterli2018-09-199-147/+745
| | | | | | | | BIOs offer a dynamic view into source or sink (const/mutable) buffers and avoids overhead of copying from/to memory BIOs. Also strictly enforces buffer sizes to ensure there are no hidden reallocs. Additionally make code OpenSSL 1.1+ and TLSv1.3 compatible.
* drain as much as possible before reading more socket dataHåvard Pettersen2018-09-172-2/+6
|
* let xor crypto engine use smart buffersHåvard Pettersen2018-09-131-29/+36
| | | | | also use similar buffer strategies to the (tls) crypto codec adapter to make benchmark comparisons more reasonable.
* use smart buffer for crypto codec adapterHåvard Pettersen2018-09-131-4/+4
|
* Merge pull request #6912 from vespa-engine/havardpe/smart-buffer-in-vespalibHåvard Pettersen2018-09-126-0/+252
|\ | | | | slightly smarter buffer with test
| * slightly smarter buffer with testHåvard Pettersen2018-09-116-0/+252
| |
* | Merge pull request #6903 from ↵Tor Brede Vekterli2018-09-121-6/+12
|\ \ | |/ |/| | | | | vespa-engine/havardpe/better-handling-of-framed-sockets-in-fnet better handling of framed sockets in fnet