Lines Matching +full:openssl +full:- +full:no +full:- +full:proxy
2 ---------
7 - Add full CBOR stream parsing and writing support, with huge
9 See ./READMEs/README.cbor-lecp.md
10 - Add COSE key and signing / validation support with huge amount of
14 See ./READMEs/README.cbor-cose.md
15 - JIT Trust: for constrained devices, provides a way to determine the
19 See ./READMEs/README.jit-trust.md
20 - Add support for client Netscape cookie jar with caching
21 - Secure Streams: issue LWSSSCS_EVENT_WAIT_CANCELLED state() when
22 lws_cancel_service() called, so cross-thread events can be handled
24 - Actively assert() on attempt to destroy SS handles still active in
27 - Improved Client Connection Error report strings for tls errors
28 - SMP: Use a private fakewsi for PROTOCOL_INIT so pts cannot try to
30 - MbedTLS v3 support for all release changes, as well as retaining
32 - MQTT client: support QoS2
33 - Event lib ops can now be set at context creation time directly,
35 minimal-http-server-eventlib-custom
36 - Extra APIs to recover AKID and SKID from x.509 in mbedtls and openssl
37 - Improve http redirect to handle h2-> h2 cleanly
38 - IPv4+6 listen sockets on vhosts are now done with two separate
41 - Improved tls restriction handling
42 - Log contexts: allow objects to log into local logging contexts, by
45 - Upgrade compiler checking to default to -Werror -Wall -Wextra
46 - Fault injection apis now also support pseudo-random number binding
48 --fault-injection "f1(10%),f1_delay(123..456)"
49 - Remove LWS_WITH_DEPRECATED_THINGS, remove master branch
50 - Interface binding now uses ipv6 scoring to select bind address
55 - Sai coverage upgrades, 495 builds on 27 platforms, including OSX M1,
57 64-bit OS, and NetBSD, Solaris, FreeBSD, Windows, ESP32.
60 - RFC7231 date and time parsing and retry-after wired up to lws_retry
61 - `LWS_WITH_SUL_DEBUGGING` checks that no sul belonging to Secure Streams
63 - Netlink monitoring on Linux dynamically tracks interface address and
66 - RFC6724 DNS results sorting over ipv4 + ipv6 results, according to
68 - Support new event library, sdevent (systemd native loop), via
70 - Reduce .rodata cost of role structs by making them sparse
71 - Additional Secure Streams QA tests and runtime state transition
73 - SMD-over-ss-proxy documentation and helpers to simplify forwarding
74 - SSPC stream buffering at proxy and client set from policy by streamtype
75 - Trigger Captive Portal Detection if DNS resolution fails
76 - Switch all logs related to wsi and Secure Streams to use unique,
78 - Use NOITCE logging for Secure Streams and wsi lifecycle logging using
80 - Update SSPC serialization to include versioning on initial handshake,
81 and pass client pid to proxy so related objects are tagged with it
82 - Enable errors on -Wconversion pedantic type-related build issues
84 - Windows remove WSA event implementation and replace with WSAPoll, with
86 - `lws_strcmp_wildcard()` helper that understand "x*", "x*y", "x*y*" etc
87 - `LWS_WITH_PLUGINS_BUILTIN` cmake option just builds plugins into the main
89 - Secure Streams proxy supports policy for flow control between proxy and
91 - libressl also supported along with boringssl, wolfssl
92 - prepared for openssl v3 compatibility, for main function and GENCRYPTO
93 - Fault injection apis can confirm operation of 48 error paths and counting
94 - `LWS_WITH_SYS_METRICS` keeps stats and reports them to user-defined
96 - windows platform knows how to prepare openssl with system trust store certs
97 - `LWS_WITH_SYS_CONMON` allows selected client connections to make precise
99 - New native support for uloop event loop (OpenWRT loop)
100 - More options around JWT
101 - Support TLS session caching and reuse by default, on both OpenSSL and
103 - Many fixes and improvements...
108 - NEW: travis / appveyor / bintray are replaced by Sai
110 git push on 16 platforms, all self-hosted. The homebrew bash scripts used
113 aarch64/LLVM, esp-idf (on WROVER-KIT and HELTEC physical boards), Fedora/
116 Focal/aarch64-RPI4/GCC, iOS/aarch64/LLVM and OSX/AMD/LLVM.
118 - NEW: The single CMakeLists.txt has been refactored and modernized into smaller
123 - NEW: event lib support on Unix is now built into dynamically loaded plugins
126 dependencies. See ./READMEs/event-libs.md for details and how to force
129 - NEW: Captive Portal Detection. Lws can determine if the active default
134 - NEW: Secure streams: Support system trust store if it exists
139 - NEW: Windows: Support Unix Domain Sockets same as other platforms
141 - NEW: Windows: Build using native pthreads, async dns, ipv6 on MSVC
143 - NEW: lws_struct: BLOB support
145 - NEW: lws_sul: Now provides two sorted timer domains, a default one as
148 - NEW: System Message Distribution: lws_smd provides a very lightweight way
152 of message classes they care about; if no particpant cares about a particular message,
156 - NEW: lws_drivers: wrappers for SDK driver abstractions (or actual drivers)
158 minimal-examples/embedded/esp32/esp-wrover-kit
159 - generic gpio
160 - generic LED (by name) lib/drivers/led/README.md
161 - generic PWM, sophisticated interpolated table
163 - generic button (by name), with debounce and press classification
164 emitting rich SMD click, long-click, double-click,
167 - bitbang i2c on generic gpio (hw support can use same
169 - bitbang spi on generic gpio (hw support can use same
171 - generic display object, can be wired up to controller
175 - generic settings storage: get and set blobs by name
176 - generic network device: netdev abstract class with
184 esp32-factory. Unlike the old way, the new way has no
188 - NEW: Security-aware JWS JWT (JSON Web Tokens) apis are provided on top of the existing
190 high level apis like lws http cookie -> JWT struct -> lws http cookie.
192 - REMOVED: esp32-helper and friends used by esp32-factory now lws_drivers
195 - REMOVED: generic sessions and friends now JWT is provided
200 - NEW: Lws is now under the MIT license, see ./LICENSE for details
202 - NEW: GLIB native event loop support, lws + gtk example
204 - NEW: native lws MQTT client... supports client stream binding like h2 when
208 - NEW: "Secure Streams"... if you are making a device with client connections
215 - NEW: lws_system: New lightweight and efficient Asynchronous DNS resolver
218 scheme (from cache directly without per-consumer allocation). Able to
221 - NEW: lws_system: ntpclient implementation with interface for setting system
224 - NEW: lws_system: dhcpclient implementation
226 - NEW: Connection validity tracking, autoproduce PING/PONG for protocols that
230 - NEW: lws_retry: standardized exponential backoff and retry timing based
233 - NEW: there are official public helpers for unaligned de/serialization of all
234 common types, see eh, lws_ser_wu16be() in include/libwebsockets/lws-misc.h
236 - NEW: lws_tls_client_vhost_extra_cert_mem() api allows attaching extra certs
239 - NEW: lws_system: generic blobs support passing auth tokens, per-connection
242 - NEW: public helpers to consume and produce ipv4/6 addresses in a clean way,
243 along with lws_sockaddr46 type now public. See eg, lws_sockaddr46-based
245 in include/libwebsockets/lws-network-helper.h
247 - Improved client redirect handling, h2 compatibility
249 - NEW: lwsac: additional features for constant folding support (strings that
254 - NEW: lws_humanize: apis for reporting scalar quanties like 1234 as "1.234KB"
257 - NEW: freertos: support lws_cancel_service() by using UDP pair bound to lo,
260 - NEW: "esp32" plat, which implemented freertos plat compatibility on esp32, is
263 - NEW: base64 has an additional api supporting stateful decode, where the input
267 - NEW: lws ws proxy: support RFC8441
269 - NEW: lws_spawn_piped apis: generic support for vforking a process with child
273 - NEW: lws_fsmount apis: Linux-only overlayfs mount and unmount management for
274 aggregating read-only layers with disposable, changeable upper layer fs
276 - Improvements for RTOS / small build case bring the footprint of lws v4 below
279 - lws_tokenize: flag specifying # should mark rest of line as comment
281 - NEW: minimal example for integrating libasound / alsa via raw file
283 - lws_struct: sqlite and json / lejp translation now usable
289 - This is the last planned release under LGPLv2+SLE. It's not planned to be
291 stuff or continue to use v3.1-stable until the next release under the
294 - NEW: completely refactored scheduler with a unified, sorted us-resolution
295 linked-list implementation. All polled checks like timeout are migrated
297 Faster operation, us-resolution timeouts and generic scheduled callbacks
300 - NEW: lws_dsh specialized buffer memory allocator that can borrow space
303 - NEW: lws_sequencer allows managing multi-connection processes and
306 - NEW: memory buffer cert support
308 - NEW: LWS_WITH_NETWORK in CMake... can be configured without any network-
311 - NEW: builds on QNX 6.5 and SmartOS
313 - NEW: JOSE / JWK / JWS / JWE support, for all common ciphers and algs,
314 works on OpenSSL and mbedtls backends
316 - NEW: gencrypto now has genaes and genec in addition to genrsa, works
317 on OpenSSL and mbedtls backends
319 - NEW: raw_proxy role
321 - NEW: Basic Auth works on ws connections
323 - CHANGE: REMOVED: LWS_WITH_GENRSA, LWS_WITH_GENHASH, LWS_WITH_GENEC,
326 - CHANGE: REMOVED: LWS_WITH_JWS, LWS_WITH_JWE have been removed and combined
332 - CHANGE: REMOVED: lws_client_connect() and lws_client_connect_extended()
337 - CHANGE: CMAKE:
338 - LWS_WITH_HTTP2: now defaults ON
340 - CHANGE: Minimal examples updated to use Content Security Policy best
343 option flag and disabling of inline style and scripts. A side-effect of
349 - NEW: CMAKE
350 - LWS_FOR_GITOHASHI: sets various cmake options suitable for gitohashi
351 - LWS_WITH_ASAN: for Linux, enable build with ASAN
356 - NEW: lws threadpool - lightweight pool of pthreads integrated to lws wsi, with
359 …(https://libwebsockets.org/git/libwebsockets/tree/minimal-examples/ws-server/minimal-ws-server-thr…
360 Cmake config: `-DLWS_WITH_THREADPOOL=1`
362 - NEW: libdbus support integrated on lws event loop
364 …nt minimal examples](https://libwebsockets.org/git/libwebsockets/tree/minimal-examples/dbus-client)
365 …er minimal examples](https://libwebsockets.org/git/libwebsockets/tree/minimal-examples/dbus-server)
366 Cmake config: `-DLWS_ROLE_DBUS=1`
368 - NEW: lws allocated chunks (lwsac) - helpers for optimized mass allocation of small
370 inter-related structs for a limited time, this removes per-struct allocation
373 …xample](https://libwebsockets.org/git/libwebsockets/tree/minimal-examples/api-tests/api-test-lwsac)
374 Cmake Config: `-DLWS_WITH_LWSAC=1`
376 - NEW: lws tokenizer - helper api for robustly tokenizing your own strings without
378 sets and comma-separated-lists in the tokenizer. Detects and reports syntax
380 …[lws_tokenize docs](https://libwebsockets.org/git/libwebsockets/tree/include/libwebsockets/lws-tok…
381 …test](https://libwebsockets.org/git/libwebsockets/tree/minimal-examples/api-tests/api-test-lws_tok…
383 - NEW: lws full-text search - optimized trie generation, serialization,
385 to huge corpuses of UTF-8 text while remaining super lightweight on resources.
386 [full-text search docs](https://libwebsockets.org/git/libwebsockets/tree/lib/misc/fts)
387 …[full-text search minimal example / api test](https://libwebsockets.org/git/libwebsockets/tree/min…
390 Cmake config: `-DLWS_WITH_FTS=1 -DLWS_WITH_LWSAC=1`
392 - NEW: gzip + brotli http server-side compression - h1 and h2 automatic advertising
395 Cmake config: `-DLWS_WITH_HTTP_STREAM_COMPRESSION=1`, `-DLWS_WITH_HTTP_BROTLI=1`
397 - NEW: managed disk cache - API for managing a directory containing cached files
400 …[lws diskcache docs](https://libwebsockets.org/git/libwebsockets/tree/include/libwebsockets/lws-di…
401 Cmake config: `-DLWS_WITH_DISKCACHE=1`
403 - NEW: http reverse proxy - lws mounts support proxying h1 or h2 requests to
408 CMake config: `-DLWS_WITH_HTTP_PROXY=1`
410 - NEW: lws_buflist - internally several types of ad-hoc malloc'd buffer have
414 - NEW: In the case of h1 upgrade, the connection header is checked to contain
419 - NEW: If no 404 redirect for `lws_return_http_status()` is specified for the vhost,
427 - CHANGE: Clients used to call LWS_CALLBACK_CLOSED same as servers...
431 - CHANGE: LWS_CALLBACK_CLIENT_CONNECTION_ERROR used to only be directed at
437 - CHANGE: CMAKE: the following cmake defaults have changed with this version:
439 - LWS_WITH_ZIP_FOPS: now defaults OFF
440 - LWS_WITH_RANGES: now defaults OFF
441 - LWS_WITH_ZLIB: now defaults OFF
442 - LWS_WITHOUT_EXTENSIONS: now defaults ON
444 - CHANGE: REMOVED: lws_alloc_vfs_file() (read a file to malloc buffer)
446 - CHANGE: REMOVED: lws_read() (no longer useful outside of lws internals)
448 - CHANGE: REMOVED: ESP8266... ESP32 is now within the same price range and much
451 - CHANGE: soname bump... don't forget to `ldconfig`
453 - NEW: all event libraries support "foreign" loop integration where lws itself
456 See `minimal-http-server-eventlib-foreign` for example code demonstrating
460 `minimal-http-server-eventlib`.
462 - NEW: ws-over-h2 support. This is a new RFC-on-the-way supported by Chrome
467 - NEW: UDP socket adoption and related event callbacks
469 - NEW: Multi-client connection binding, queuing and pipelining support.
478 See minimal-http-client-multi for example code.
480 - NEW: High resolution timer API for wsi, get a callback on your wsi with
485 - NEW: Protocols can arrange vhost-protocol instance specific callbacks with
488 - NEW: ACME client plugin for self-service TLS certificates
490 - NEW: RFC7517 JSON Web Keys RFC7638 JWK thumbprint, and RFC7515 JSON Web
493 - NEW: lws_cancel_service() now provides a generic way to synchronize events
497 - NEW: support BSD poll() where changes to the poll wait while waiting are
500 - NEW: Introduce generic hash, hmac and RSA apis that operate the same
501 regardless of OpenSSL or mbedTLS tls backend
503 - NEW: Introduce X509 element query api that works the same regardless of
504 OpenSSL or mbedTLS tls backend
506 - NEW: Introduce over 30 "minimal examples" in ./minimal-examples... these
509 - test-echo -> minimal-ws-server-echo and minimal-ws-client-echo
511 - test-server-libuv / -libevent / -libev ->
512 minimal-https-server-eventlib / -eventlib-foreign / -eventlib-demos
514 - test-server-v2.0 -> folded into all the minimal servers
516 - test-server direct http serving -> minimal-http-server-dynamic
521 - NEW: lws now detects any back-to-back writes that did not go through the
525 - NEW: CMake has LWS_WITH_DISTRO_RECOMMENDED to select features that are
528 - NEW: Optional vhost URL `error_document_404` if given causes a redirect there
531 - NEW: lws_strncpy() wrapper guarantees NUL in copied string even if it was
534 - NEW: for client connections, local protocol binding name can be separated
537 - NEW: Automatic detection of time discontiguities
539 - NEW: Applies TCP_USER_TIMEOUT for Linux tcp keepalive where available
541 - QA: 1600 tests run on each commit in Travis CI, including almost all
545 - QA: fix small warnings introduced on gcc8.x (eg, Fedora 28)
547 - QA: Add most of -Wextra on gcc (-Wsign-compare, -Wignored-qualifiers,
548 -Wtype-limits, -Wuninitialized)
550 - QA: clean out warnings on windows
552 - QA: pass all 146 h2spec tests now on strict
554 - QA: introduce 35 selftests that operate different minimal examples against
557 - QA: LWS_WITH_MINIMAL_EXAMPLES allows mass build of all relevant minimal-
561 - REFACTOR: the lws source directory layout in ./lib has been radically
565 - REFACTOR: pipelined transactions return to the event loop before starting the
568 - REFACTOR: TLS: replace all TLS library constants with generic LWS ones and
571 Isolated all the tls-related private stuff in `./lib/tls/private.h`, and all
572 the mbedTLS stuff in `./lib/tls/mbedtls` + openSSL stuff in
573 `./lib/tls/openssl`
575 - REFACTOR: the various kinds of wsi possible with lws have been extracted
587 - REFACTOR: reduce four different kinds of buffer management in lws into a
588 generic scatter-gather struct lws_buflist.
590 - REFACTOR: close notifications go through event loop
596 - HTTP/2 server support is now mature and usable! LWS_WITH_HTTP2=1 enables it.
598 listen port seamlessly. (Requires ALPN-capable OpenSSL 1.1 or mbedTLS).
600 - LWS_WITH_MBEDTLS=1 at CMake now builds and works against mbedTLS instead of
601 OpenSSL. Most things work identically, although on common targets where
602 OpenSSL has acceleration, mbedTLS is many times slower in operation. However
605 - Generic hash apis introduced that work the same on mbedTLS or OpenSSL backend
607 - LWS_WITH_PEER_LIMITS tracks IPs across all vhosts and allows restrictions on
610 - lws_ring apis provide a generic single- or multi-tail ringbuffer... mirror
612 structs in the ringbuffer, callback when no tail any longer needs an element
616 - abstract ssh 2 server plugin included, with both plugin and standalone
617 demos provided. You can bind the plugin to a vhost and also serve full-
621 - Many fixes, cleanups, source refactors and other improvements.
627 - ESP32 OpenSSL support for client and server
629 - ESP32 4 x WLAN credential slots may be configured
631 - Libevent event loop support
633 - SOCKS5 proxy support
635 - lws_meta protocol for websocket connection multiplexing
637 - lws_vhost_destroy() added... allows dynamic removal of listening
641 - IPv6 on Windows
643 - Improved CGI handling suitable for general CGI scripting, eg, PHP
645 - Convert even the "old style" test servers to use statically included
648 - LWS_WITH_STATS cmake option dumps resource usage and timing information
652 - Large (> 2GB) files may be served
654 - LWS_WITH_HTTP_PROXY Cmake option adds proxying mounts
656 - Workaround for libev build by disabling -Werror on the test app
658 - HTTP2 support disabled since no way to serve websockets on it
666 - A mount can be protected by Basic Auth... in lwsws it looks like this
670 "mountpoint": "/basic-auth",
671 "origin": "file://_lws_ddir_/libwebsockets-test-server/private",
672 "basic-auth": "/var/www/balogins-private"
676 The text file named in `basic-auth` contains user:password information
681 - RFC7233 RANGES support in lws server... both single and multipart.
685 - On Linux, lwsws can reload configuration without dropping ongoing
693 - New `adopt` api allow adoption including SSL negotiation and
696 - Chunked transfer encoding supported for client and server
698 - Adaptations to allow operations inside OPTEE Secure World
700 - ESP32 initial port - able to do all test server functions. See
703 - Serving gzipped files from inside a ZIP file is supported... this
707 automatically decompresses and serves the content in memory-
711 - RAW file descriptors may now be adopted into the lws event loop,
715 - RAW server socket descriptors may now be enabled on the vhost if
718 vhost, and RAW-specific callbacks appear there for creation, rx,
719 writable and close. See libwebsockets-test-server-v2.0 for an example.
722 - RAW client connections are now possible using the method "RAW".
724 named in the client connection info and RAW-specific callbacks
726 See libwebsockets-test-client (with raw://) for an example.