s6-networking/package, branch v2.4.1.1 UCSPI TCP implementation and other networking utilities http://git.skarnet.org/cgit/s6-networking/atom/package?h=v2.4.1.1 2021-04-13T22:52:51Z Prepare for 2.4.1.1 2021-04-13T22:52:51Z Laurent Bercot ska-skaware@skarnet.org 2021-04-13T22:52:51Z urn:sha1:1f560b55faa30a4ea7a21a1a3d18a0454e7f7536 Prepare for 2.4.1.0; add SSL_TLS_SNI_SERVERNAME 2021-01-28T13:17:25Z Laurent Bercot ska-skaware@skarnet.org 2021-01-28T13:17:25Z urn:sha1:a027959a7fe49483acf86bd65d4266e3cbc4d0b0 Implement handshake timeout for libtls backend 2021-01-13T11:36:16Z Laurent Bercot ska-skaware@skarnet.org 2021-01-13T11:36:16Z urn:sha1:cc7dccb1858e73176814c3a8457ff6f94ff45662 Add SSL_PROTOCOL and SSL_CIPHER support, fix some bugs 2020-11-22T15:46:34Z Laurent Bercot ska-skaware@skarnet.org 2020-11-22T15:46:34Z urn:sha1:4fb917263ac30373cb3e5dfe3e207369eb238def Move all tls stuff into its own subdir 2020-11-21T11:58:44Z Laurent Bercot ska-skaware@skarnet.org 2020-11-21T11:58:44Z urn:sha1:fb76faf56aca9b79648d776896a4a4fae7c978cf Add s6-ucspitlsc 2020-11-21T11:51:08Z Laurent Bercot ska-skaware@skarnet.org 2020-11-21T11:51:08Z urn:sha1:7f2cd05720e721c7e8131d4a4762d97a29fbf7b4 Prepare for 2.4.0.0 2020-11-21T10:56:01Z Laurent Bercot ska-skaware@skarnet.org 2020-11-21T10:56:01Z urn:sha1:2269af1457817b7a3b9b51cc0512d5f29e1fc7a5 Privs can only be dropped after reading key files. 2020-11-21T02:22:09Z Laurent Bercot ska-skaware@skarnet.org 2020-11-21T02:22:09Z urn:sha1:5c2880becc94141b8035b3488b6bd60696011308 Refactor tls code to support ucspi-tls 2020-11-20T23:24:29Z Laurent Bercot ska-skaware@skarnet.org 2020-11-20T23:24:29Z urn:sha1:5715c21a077ee1c2fe8957cb4adcea14fd2eda6b That includes: - new architecture: the tls binary is now a child of the app instead of the other way around - the sbearssl_run engine now takes a post-handshake callback. This allows s6-tlsc and s6-tlsd to only exec into the app when the handshake succeeds (which was already the case with libressl). - new binaries s6-tlsc-io and s6-tlsd-io encapsulate the crypto code; they init and run the engine, connecting to 4 already open fds (stdin/stdout = network, argv[1] and argv[2] = local) - s6-tlsc is now a simple wrapper around s6-tlsc-io - s6-tlsd is now a simple wrapper around s6-tlsd-io - new binary: s6-ucspitlsd, which is also a wrapper around s6-tlsd-io, but differently: the parent execs the app which should be ucspi-tls-aware, the child waits for a command from the parent and execs into s6-tlsd-io if it receives it. LibreSSL needs -lpthread 2020-08-21T11:55:47Z Laurent Bercot ska-skaware@skarnet.org 2020-08-21T11:55:47Z urn:sha1:16f9beee812dcad50f6f8ccd8da3283d8273bb3b