UCSPI TCP implementation and other networking utilities http://git.skarnet.org/cgit/s6-networking/atom/doc/s6-tlsd-io.html?h=v2.4.0.0 2020-12-07T12:53:54Z 2020-12-07T12:53:54Z Laurent Bercot ska-skaware@skarnet.org 2020-12-07T12:53:54Z urn:sha1:f7e676abdc799fcee5138807447b5e91ab05508f - the TLS tunnel itself should be transparent so it has no business shutting down the connection no matter how long the app takes - there's still an undetectable situation on some kernels where EOF doesn't get transmitted from the network, and the engine is in the handshake, and it can't do anything but wait forever. A timeout is useful here: dawg, your peer is never going to send any more data, you should just give up. - if the situation happens after the handshake, the *app* should have a timeout and die. The tunnel will follow suit. - libtls has a blocking tls_handshake() blackbox, we cannot give it a timeout. Too bad, use bearssl. 2020-11-22T00:16:06Z Laurent Bercot ska-skaware@skarnet.org 2020-11-22T00:16:06Z urn:sha1:47cbbb1619ace4013856843ef8f7d68279c74faa