s6-networking/package/deps.mak, branch dev UCSPI TCP implementation and other networking utilities https://git.skarnet.org/cgit/s6-networking/atom/package/deps.mak?h=dev 2021-06-01T11:27:05Z Add all the missing pieces for sni_policy 2021-06-01T11:27:05Z Laurent Bercot ska-skaware@skarnet.org 2021-06-01T11:27:05Z urn:sha1:a84b9b4e5d985a5d8a37268a76e1d35210fd31c5 sbearssl_server_init_and_run is yet unchanged, the next step is to rewrite it using the new primitives. Add an x509 engine wrapping minimal. NOT FUNCTIONAL, FOR TESTING. 2021-05-20T10:55:18Z Laurent Bercot ska-skaware@skarnet.org 2021-05-20T10:55:18Z urn:sha1:4aae040b1a8aecddcd0e1e959c77bb262fe6b850 Prepare for 2.4.2.0; implement client certificates with bearssl 2021-05-18T11:19:19Z Laurent Bercot ska-skaware@skarnet.org 2021-05-18T11:19:19Z urn:sha1:6780eee3e0dbe37640f72ed1e37a95c506e23f8c Also send a bit more environment with libtls Implement handshake timeout for libtls backend 2021-01-13T11:36:16Z Laurent Bercot ska-skaware@skarnet.org 2021-01-13T11:36:16Z urn:sha1:cc7dccb1858e73176814c3a8457ff6f94ff45662 Add SSL_PROTOCOL and SSL_CIPHER support, fix some bugs 2020-11-22T15:46:34Z Laurent Bercot ska-skaware@skarnet.org 2020-11-22T15:46:34Z urn:sha1:4fb917263ac30373cb3e5dfe3e207369eb238def Move all tls stuff into its own subdir 2020-11-21T11:58:44Z Laurent Bercot ska-skaware@skarnet.org 2020-11-21T11:58:44Z urn:sha1:fb76faf56aca9b79648d776896a4a4fae7c978cf Add s6-ucspitlsc 2020-11-21T11:51:08Z Laurent Bercot ska-skaware@skarnet.org 2020-11-21T11:51:08Z urn:sha1:7f2cd05720e721c7e8131d4a4762d97a29fbf7b4 Privs can only be dropped after reading key files. 2020-11-21T02:22:09Z Laurent Bercot ska-skaware@skarnet.org 2020-11-21T02:22:09Z urn:sha1:5c2880becc94141b8035b3488b6bd60696011308 Refactor tls code to support ucspi-tls 2020-11-20T23:24:29Z Laurent Bercot ska-skaware@skarnet.org 2020-11-20T23:24:29Z urn:sha1:5715c21a077ee1c2fe8957cb4adcea14fd2eda6b That includes: - new architecture: the tls binary is now a child of the app instead of the other way around - the sbearssl_run engine now takes a post-handshake callback. This allows s6-tlsc and s6-tlsd to only exec into the app when the handshake succeeds (which was already the case with libressl). - new binaries s6-tlsc-io and s6-tlsd-io encapsulate the crypto code; they init and run the engine, connecting to 4 already open fds (stdin/stdout = network, argv[1] and argv[2] = local) - s6-tlsc is now a simple wrapper around s6-tlsc-io - s6-tlsd is now a simple wrapper around s6-tlsd-io - new binary: s6-ucspitlsd, which is also a wrapper around s6-tlsd-io, but differently: the parent execs the app which should be ucspi-tls-aware, the child waits for a command from the parent and execs into s6-tlsd-io if it receives it. Fix gen-deps.sh for cross-builds 2019-10-21T17:22:27Z Laurent Bercot ska-skaware@skarnet.org 2019-10-21T17:22:27Z urn:sha1:99c95df8bc92adef1b1ce36c9d92210addd419ae