Commit Briefs

Tobias Heider

Move pkt-len parsing to a separate got_pkt_readlen() function

so we can reuse it in other places like got-fetch-http later. ok op@ stsp@


Omar Polo

got-notify-http: fix I/O with TLS

tls_write() may return TLS_WANT_READ. In that case, we're stuck trying to read while we have the request still in the buffer. So, we have to retry bufio_write() regardless of the POLLIN/POLLOUT state. We'd need this only in the TLS case, but in practice it doesn't harm for the plaintext case too. In fact, we're either waiting to flush the request or we're only reading the server reply. ok stsp



Stefan Sperling

send got-http-notify error output to syslog

ok op@



Stefan Sperling

make it harder to leak notification credentials over plaintext HTTP

ok op@





Stefan Sperling

remove dead code under DEBUG_HTTP; ok op@


Stefan Sperling

use unveil to restrict filesystem access of got-fetch-http

With HTTPS we only need to be able to read /etc/ssl/cert.pem. With plaintext HTTP no filesystem access is needed at all.




Stefan Sperling

fix test dir name




Stefan Sperling

drop git+ssh protocol name from documentation; Git has done the same

We can keep accepting git+ssh for backwards compatibility with existing configs.


Stefan Sperling

doc tweaks regarding HTTP protocol support





Omar Polo

fmt



Omar Polo

http-server: error on unknown method

just for robustness; neither git nor got-fetch-http are expected to use other methods except for GET and POST.


Omar Polo

add http-server; will be used to test got-fetch-http

based on a draft by stsp; git(1) manages to clone from it.