summaryrefslogtreecommitdiff
path: root/src/stransport_stream.c
Commit message (Collapse)AuthorAgeFilesLines
* stream: Gather streams to src/streamsEtienne Samson2017-10-231-296/+0
|
* Make sure to always include "common.h" firstPatrick Steinhardt2017-07-031-0/+2
| | | | | | | | | | | | | | | | | | | | | | Next to including several files, our "common.h" header also declares various macros which are then used throughout the project. As such, we have to make sure to always include this file first in all implementation files. Otherwise, we might encounter problems or even silent behavioural differences due to macros or defines not being defined as they should be. So in fact, our header and implementation files should make sure to always include "common.h" first. This commit does so by establishing a common include pattern. Header files inside of "src" will now always include "common.h" as its first other file, separated by a newline from all the other includes to make it stand out as special. There are two cases for the implementation files. If they do have a matching header file, they will always include this one first, leading to "common.h" being transitively included as first file. If they do not have a matching header file, they instead include "common.h" as first file themselves. This fixes the outlined problems and will become our standard practice for header and source files inside of the "src/" from now on.
* stransport: do not use `git_stream_free` on uninitialized stransportPatrick Steinhardt2016-08-091-1/+3
| | | | | | | | | | | When failing to initialize a new stransport stream, we try to release already allocated memory by calling out to `git_stream_free`, which in turn called out to the stream's `free` function pointer. As we only initialize the function pointer later on, this leads to a `NULL` pointer exception. Furthermore, plug another memory leak when failing to create the SSL context.
* Merge pull request #3890 from pks-t/pks/stransport-static-linkageEdward Thomson2016-08-081-8/+8
|\ | | | | stransport: make internal functions static
| * stransport: make internal functions staticPatrick Steinhardt2016-08-081-8/+8
| |
* | SecureTransport: handle NULL trust on successcmn/copypeertrust-nullCarlos Martín Nieto2016-08-051-0/+3
|/ | | | | | | | | The `SSLCopyPeerTrust` call can succeed but fail to return a trust object if it can't load the certificate chain and thus cannot check the validity of a certificate. This can lead to us calling `CFRelease` on a `NULL` trust object, causing a crash. Handle this by returning ECERTIFICATE.
* Fix unused variable 'message' warningLucas Derraugh2016-05-051-0/+1
|
* stransport: pass proxy opts instead of char*Edward Thomson2016-04-211-2/+4
|
* git_cert: child types use proper base typeEdward Thomson2015-07-101-1/+1
|
* Fixed build failure if GIT_CURL is not definedPierre-Olivier Latour2015-06-261-1/+1
|
* SecureTransport: use the curl stream if availablecmn/curl-streamCarlos Martín Nieto2015-06-241-1/+17
| | | | | | If the libcurl stream is available, use that as the underlying stream instead of the socket stream. This allows us to set a proxy for HTTPS connections.
* Fix in stransport_stream.c for usage of SecCopyErrorMessageString(), which ↵Logan Collins2015-06-151-0/+5
| | | | is unavailable to iOS targets.
* Fixed some Secure Transport issues on OS XPierre-Olivier Latour2015-06-111-20/+36
| | | | | | | | | The read and write callbacks passed to SSLSetIOFuncs() have been rewritten to match the implementation used on opensource.apple.com and other open source projects like VLC. This change also fixes a bug where the read callback could get into an infinite loop when 0 bytes were read.
* SecureTransport: handle graceful closescmn/secure-transportCarlos Martín Nieto2015-04-231-2/+3
| | | | | On close, we might get a return code which looks like an error but just means that the other side closed gracefully. Handle that.
* SecureTransport: require TLS v1.xCarlos Martín Nieto2015-04-231-0/+2
| | | | | Anything SSL is deprecated. Let's make sure we don't try to use SSL v3 when talking to the server.
* SecureTransport: allow overriding a bad certificateCarlos Martín Nieto2015-04-231-14/+41
| | | | | | Do not automatically fail on a bad certificate, but let the caller decide. This means we don't need our switch on errors anymore but can return a string representation from the security framework.
* Add a SecureTransport TLS channelCarlos Martín Nieto2015-04-231-0/+219
As an alternative to OpenSSL when we're on OS X. This one can actually take advantage of stacking the streams.