Software /
code /
prosody
Annotate
certs/localhost.cnf @ 11665:148075532021
net.server_epoll: Prevent stack overflow of opportunistic writes
net.http.files serving a big enough file on a fast enough connection
with opportunistic_writes enabled could trigger a stack overflow through
repeatedly serving more data that immediately gets sent, draining the
buffer and triggering more data to be sent. This also blocked the server
on a single task until completion or an error.
This change prevents nested opportunistic writes, which should prevent
the stack overflow, at the cost of reduced download speed, but this is
unlikely to be noticeable outside of Gbit networks. Speed at the cost of
blocking other processing is not worth it, especially with the risk of
stack overflow.
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Sun, 11 Jul 2021 09:39:21 +0200 |
parent | 7693:93c041d5bb0b |
rev | line source |
---|---|
5924
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
1 [v3_extensions] |
7692
90ddd53cbe08
certs/localhost.cnf: Make localhost.crt self-signed (thanks jonas)
Kim Alvefur <zash@zash.se>
parents:
5924
diff
changeset
|
2 basicConstraints = CA:TRUE |
5924
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
3 subjectAltName = @subject_alternative_name |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
4 |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
5 [subject_alternative_name] |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
6 DNS.0 = localhost |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
7 otherName.0 = 1.3.6.1.5.5.7.8.7;IA5STRING:_xmpp-client.localhost |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
8 otherName.1 = 1.3.6.1.5.5.7.8.7;IA5STRING:_xmpp-server.localhost |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
9 otherName.2 = 1.3.6.1.5.5.7.8.5;FORMAT:UTF8,UTF8:localhost |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
10 |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
11 [distinguished_name] |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
12 countryName = GB |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
13 organizationName = Prosody IM |
7359
a5a080c12c96
Update every link to the documentation to use HTTPS
Emmanuel Gil Peyrot <linkmauve@linkmauve.fr>
parents:
5924
diff
changeset
|
14 organizationalUnitName = https://prosody.im/doc/certificates |
5924
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
15 commonName = Example certificate |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
16 |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
17 [req] |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
18 prompt = no |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
19 x509_extensions = v3_extensions |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
20 req_extensions = v3_extensions |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
21 distinguished_name = distinguished_name |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
22 |