XOP-229: Stored in Stunnel.t if the connection is verified.

Signed-off-by: Jerome Maloberti <jerome.maloberti@citrix.com>
XOP-229: Change keep_alive=true and http version = 1.1.

Signed-off-by: Jerome Maloberti <jerome.maloberti@citrix.com>
XOP-229: The stunnel_cache key uses also the verify_cert bool.

Signed-off-by: Jerome Maloberti <jerome.maloberti@citrix.com>

Conflicts:
	http-svr/xmlrpc_client.ml

Signed-off-by: Jerome Maloberti <jerome.maloberti@citrix.com>
Merge pull request #125 from jeromemaloberti/XOP-229-clearwater

XOP-229: Stunnel_cache fixes.
CA-94829: Bindings to the TCP keepalive settings

Signed-off-by: Jon Ludlam <jonathan.ludlam@eu.citrix.com>
CP-3989/CP-3940: Add CPUID masking support for Intel Haswell DT and Ivy Bridge EN and EP

This adds CPU models 0x3c and 0x3e to the whitelist.

Signed-off-by: Rob Hoes <rob.hoes@citrix.com>
Merge pull request #128 from jonludlam/CA-94829-clearwater

CA-94829: Bindings to the TCP keepalive settings
CA-85761: Use unbuffered I/O to read from /dev/(u)random

Signed-off-by: Vincent Bernardoff <vincent.bernardoff@citrix.com>
Merge pull request #129 from robhoes/cpumasking-cw

CLEARWATER: CP-3989/CP-3940: Add CPUID masking support for Intel Haswell DT and Ivy ...
Merge pull request #133 from vbmithr/clearwater

CA-85761: Use unbuffered I/O to read from /dev/(u)random
XOP-229: stunnel cache improvements

Raise limits to 22 stunnels, idle 5min, age 3h.
Discard cache index entries for endpoints with no tunnels.
Better hashtable initial capacities.
Debug-logging to enable calculation of time saved by cache.

Signed-off-by: Thomas Sanders <thomas.sanders@citrix.com>

Conflicts:
	http-svr/xmlrpc_client.ml

Signed-off-by: Jerome Maloberti <jerome.maloberti@citrix.com>
Merge pull request #134 from jeromemaloberti/XOP-229-clr

XOP-229: stunnel cache improvements
CA-83270: fix incompatible changes with XOP-229.

Signed-off-by: Jerome Maloberti <jerome.maloberti@citrix.com>
CA-83270: Remove the default value to verify_cert.

It prevents Stunnel.connect of actually checking the certificate.
The line: assert (not (verify_cert && use_tunnel_cache));
must be removed since verify_cert=None is undefined.
However, stunnel_cache need to be able to differentiate verified and
unverified connections after this commit, therefore the changes for
XOP-229 are necessary.

Signed-off-by: Jerome Maloberti <jerome.maloberti@citrix.com>
Merge pull request #136 from jeromemaloberti/CA-83270-pre-clr

CA-83270: Remove the default value to verify_cert.
CP-4465 contribution: less stunnel-related logging.
Merge pull request #137 from jeromemaloberti/CA-83270-clr

CA-83270: fix incompatible changes with XOP-229.
Merge pull request #138 from jeromemaloberti/CP-4465-clr

CP-4465 contribution: less stunnel-related logging.
Debug: allow disabling specific log levels

Signed-off-by: Rob Hoes <rob.hoes@citrix.com>
Http-svr: remove http_critical logs

They aren't useful and are a source of lots of log spam.

Signed-off-by: Rob Hoes <rob.hoes@citrix.com>