s6-networking/src/tls, branch v2.4.0.0UCSPI TCP implementation and other networking utilitieshttp://git.skarnet.org/cgit/s6-networking/atom/src/tls?h=v2.4.0.02020-12-09T18:30:22Z Get rid of webipc.h2020-12-09T18:30:22ZLaurent Bercotska-skaware@skarnet.org2020-12-09T18:30:22Zurn:sha1:b6de172b3545a73f6f31500ee9c4d51898fbe2bc Change -K semantics: timeout *during handshake*, not afterwards2020-12-07T12:53:54ZLaurent Bercotska-skaware@skarnet.org2020-12-07T12:53:54Zurn:sha1:f7e676abdc799fcee5138807447b5e91ab05508f
- the TLS tunnel itself should be transparent so it has no business
shutting down the connection no matter how long the app takes
- there's still an undetectable situation on some kernels where
EOF doesn't get transmitted from the network, and the engine is in
the handshake, and it can't do anything but wait forever. A timeout
is useful here: dawg, your peer is never going to send any more data,
you should just give up.
- if the situation happens after the handshake, the *app* should
have a timeout and die. The tunnel will follow suit.
- libtls has a blocking tls_handshake() blackbox, we cannot give it
a timeout. Too bad, use bearssl.
Fix build with skalibs 2.10.0.0; document dependencies2020-11-30T12:55:39ZLaurent Bercotska-skaware@skarnet.org2020-11-30T12:55:39Zurn:sha1:0de4e6e0703f47be954f4cfa37648dd58665c819 Convert to new exec.h syntax2020-11-26T09:47:02ZLaurent Bercotska-skaware@skarnet.org2020-11-26T09:47:02Zurn:sha1:26cd94b2a8f6da396058b6c5d6446e237ec9d78f Fix a few bugs. sbearssl appears to be working.2020-11-22T21:49:58ZLaurent Bercotska-skaware@skarnet.org2020-11-22T21:49:58Zurn:sha1:bae11b88357db72b19413cd05c62ac9242b9b597 Add SSL_PROTOCOL and SSL_CIPHER support, fix some bugs2020-11-22T15:46:34ZLaurent Bercotska-skaware@skarnet.org2020-11-22T15:46:34Zurn:sha1:4fb917263ac30373cb3e5dfe3e207369eb238def Move all tls stuff into its own subdir2020-11-21T11:58:44ZLaurent Bercotska-skaware@skarnet.org2020-11-21T11:58:44Zurn:sha1:fb76faf56aca9b79648d776896a4a4fae7c978cf