Commit Graph

1845 Commits

Author SHA1 Message Date
Heikki Hannikainen 79b6c3eb0f v2.1.13 2022-11-02 01:09:12 +02:00
Heikki Hannikainen 17dce48cd0 uplink: Fix building on older GCC 2022-11-01 23:08:03 +00:00
Heikki Hannikainen b66ec82f96 v2.1.12 2022-11-02 00:35:26 +02:00
Heikki Hannikainen e8f9a393bc tls: Make it build with openssl < 1.1 2022-11-02 00:35:01 +02:00
Heikki Hannikainen 667fbbd227
Merge pull request #76 from hessu/fixes
Fix issues found by coverity. Disable TLSv1.1 to meet PCI-DSS requirements.
2022-11-02 00:30:43 +02:00
Heikki Hannikainen f80e709945 tls: Disable TLSv1.1 to meet PCI-DSS requirements 2022-11-02 00:02:27 +02:00
Heikki Hannikainen 4dedec62b2 uplink: Check return value of getsockname, fix rare resource leak 2022-11-01 23:44:09 +02:00
Heikki Hannikainen cf468c9af9 coverity: Fix some uninitialized variables 2022-11-01 23:35:57 +02:00
Heikki Hannikainen 18505a1c4a dupecheck: Remove unused variables 2022-11-01 23:35:57 +02:00
Heikki Hannikainen 8a410f9690 coverity: Fix format string bugs in logging
Mostly long integers printed with %d.
2022-11-01 23:35:57 +02:00
Heikki Hannikainen 700671c360
Merge pull request #75 from hessu/feature/tls
tls: Add some TLS Q construct testing, build with TLS by default
2022-11-01 22:30:10 +02:00
Heikki Hannikainen 6f290ea4e2 tests: Disable Q construct test with TLS, fails on github actions
The test fails to connect on github actions, disable for now.
2022-11-01 22:13:29 +02:00
Heikki Hannikainen f90fb4773d tests: Add TLS full-feed listener to basic config 2022-11-01 21:27:25 +02:00
Heikki Hannikainen c11db1f303 tests: Run a set of Q construct tests with TLS, too
Confirm Q algorithm works for common igate cases with TLS.
2022-11-01 20:25:15 +02:00
Heikki Hannikainen badb11d00a tests: Create a client cert in Makefile 2022-11-01 20:25:15 +02:00
Heikki Hannikainen 1e594c0978 configure: Build with TLS enabled by default 2022-11-01 20:25:15 +02:00
Heikki Hannikainen d6da4cfc8d IS.pm: support TLS for testing 2022-11-01 20:25:06 +02:00
Heikki Hannikainen ebdc9b5ed5 workflow: Run when main changes (renamed from aster to main) 2022-11-01 09:09:58 +02:00
Heikki Hannikainen 431293d7e1 version: Use 'tls' in features string instead of 'ssl' 2022-11-01 08:49:52 +02:00
Heikki Hannikainen d10a3fb3ef build: Build for Ubuntu 22.04 (jammy) 2022-10-31 19:30:09 +02:00
Heikki Hannikainen 47b373b8df
Merge pull request #74 from hessu/optimize
Various CPU optimizations
2022-10-31 19:15:33 +02:00
Heikki Hannikainen 2b40f84b77 incoming: Remove a few unnecessary initializations 2022-10-31 19:05:43 +02:00
Heikki Hannikainen 43dd2bf16e dupecheck: Further optimize CPU use, skip some unnecessary scans
Only scan regular packets without DELs or low bytes once.
2022-10-31 19:05:08 +02:00
Heikki Hannikainen eb2c199a66 dupecheck: Optimize CPU use slightly 2022-10-31 19:04:31 +02:00
Heikki Hannikainen 46b6947f1e accounting: Optimize CPU use of tx/rx accounting counters
TX counters are updated much more often than RX counters. No need
to bump RX counters for every outgoing packet, and no need
to bump TX counters for every incoming packet. Split them out.
2022-10-31 19:04:01 +02:00
Heikki Hannikainen e9ad577e7f workflow: Update dependencies 2022-10-26 01:54:24 +03:00
Heikki Hannikainen a37a7c5c59 test: Ease up udp-load test some more 2022-10-25 08:33:43 +03:00
Heikki Hannikainen 91449335a2
Merge pull request #73 from hessu/feature/ssl
tls: fix warnings, rename from ssl to tls, prepare for testing
2022-10-25 02:10:51 +03:00
Heikki Hannikainen dc2f797c61 tls: Rename SSL to TLS in log messages 2022-10-25 02:03:24 +03:00
Heikki Hannikainen 310cdee20d tls: Adjust tls parameter names in tls1 test config 2022-10-25 02:03:24 +03:00
Heikki Hannikainen b10084b45d tls: Rename ssl.c to tls.c 2022-10-25 02:03:24 +03:00
Heikki Hannikainen 6fab86fd4c config: Start renaming ssl config options to tls
Rename sslkey, sslcert, sslca, sslcrl parameters of listen/uplink
directives to tlskey, tlscert, tlsca, tlscrl. The old parameter
names are still accepted for the time being.
2022-10-25 02:03:24 +03:00
Heikki Hannikainen a678efcce2 tests: Run aggregator tests in github workflow 2022-10-25 02:03:24 +03:00
Heikki Hannikainen ebaccb048f tests: Use different ports for aggrtest 2022-10-25 02:03:24 +03:00
Heikki Hannikainen fd8e964bd8 tests: Create test CA + server cert, add tls1 test server config 2022-10-25 01:48:06 +03:00
Heikki Hannikainen f6ce97c02f ssl: Fix compile-time warnings 2022-10-25 01:18:03 +03:00
Heikki Hannikainen f4d444c277
Merge pull request #71 from hessu/feature/sctp
sctp: Improve SCTP performance and logging, mark SCTP in status web
2022-10-24 01:18:39 +03:00
Heikki Hannikainen e49644924e sctp: Add a test for SCTP uplink between servers 2022-10-24 01:09:22 +03:00
Heikki Hannikainen 8a6c464cc0 sctp: Switch to buffered writes faster
On a very fast feed, writes may otherwise fail before the
switch happens.
2022-10-24 00:59:01 +03:00
Heikki Hannikainen 986c74545f README.sources: + sctp.c, ssl.c 2022-10-23 19:32:34 +03:00
Heikki Hannikainen d6cd044c3c sctp: Enable SCTP_NODELAY 2022-10-23 19:32:34 +03:00
Heikki Hannikainen df3efad7ad sctp: Remove dead code 2022-10-23 19:32:34 +03:00
Heikki Hannikainen 55a0106ba8 sctp: Improve logging 2022-10-23 19:32:34 +03:00
Heikki Hannikainen 0075014c40 sctp: Buffer outgoing data, similar to TCP
Instead of sending one APRS-IS line per SCTP message, combine multiple
messages in a single SCTP message. This reduces the amount of system
calls a lot and improves eventual DTLS performance.
2022-10-23 19:32:34 +03:00
Heikki Hannikainen ea9c80b5ea sctp: Increase logging level on address assignments a bit 2022-10-23 19:32:34 +03:00
Heikki Hannikainen 51effcfad5 status: Indicate SCTP connections and listeners in status web 2022-10-23 19:32:34 +03:00
Heikki Hannikainen 895e13eb39 debian: Add dependencies for libsctp 2022-10-23 19:32:34 +03:00
Heikki Hannikainen 49386f08ab
Merge pull request #72 from hessu/bugfix/resolv
uplink: Call res_init after resolv.conf changes
2022-10-23 16:49:05 +03:00
Heikki Hannikainen ee4e4a7387 uplink: Call res_init after resolv.conf changes
Older glibc versions have a bug where resolv.conf is not reloaded after it
changes.  Debian distributions have been shipped with a patch to work around
the bug, so this likely only affects other distributions.

Hopefully fixes #68.
2022-10-23 16:32:34 +03:00
Heikki Hannikainen b3b66b9d47
Merge pull request #70 from hessu/feature/uplink-nonblock
uplink: Less blocking of worker threads
2022-10-23 02:53:40 +03:00