- Now use vsprintf()/vsnprintf() instead of the buggy internal version which
crashed when recompiled for new systems
- Fixed various gcc warnings, and use socklen_t where appropriate/
- Made client reverse DNS optional, disabled by default, as there seemed to
be timeout issues with the resolver when rebuilt for new systems, delaying
connections until DNS timeout.
- Make SSL connections support forward secrecy using Diffie-Hellman
per-session keys loaded with strong parameters, favor strong ciphers, and
refuse to use the old insecure SSLv2 protocol.
- Only client SSL connections are supported, as before, but eventually it
should be used for inter-server links as well.
14 files changed: