s6-networking/src/conn-tools/s6-tlsc.c, branch v2.8.0.1 UCSPI TCP implementation and other networking utilities https://git.skarnet.org/cgit/s6-networking/atom/src/conn-tools/s6-tlsc.c?h=v2.8.0.1 2020-11-21T11:58:44Z Move all tls stuff into its own subdir 2020-11-21T11:58:44Z Laurent Bercot ska-skaware@skarnet.org 2020-11-21T11:58:44Z urn:sha1:fb76faf56aca9b79648d776896a4a4fae7c978cf Add s6-ucspitlsc 2020-11-21T11:51:08Z Laurent Bercot ska-skaware@skarnet.org 2020-11-21T11:51:08Z urn:sha1:7f2cd05720e721c7e8131d4a4762d97a29fbf7b4 Privs can only be dropped after reading key files. 2020-11-21T02:22:09Z Laurent Bercot ska-skaware@skarnet.org 2020-11-21T02:22:09Z urn:sha1:5c2880becc94141b8035b3488b6bd60696011308 Refactor tls code to support ucspi-tls 2020-11-20T23:24:29Z Laurent Bercot ska-skaware@skarnet.org 2020-11-20T23:24:29Z urn:sha1:5715c21a077ee1c2fe8957cb4adcea14fd2eda6b That includes: - new architecture: the tls binary is now a child of the app instead of the other way around - the sbearssl_run engine now takes a post-handshake callback. This allows s6-tlsc and s6-tlsd to only exec into the app when the handshake succeeds (which was already the case with libressl). - new binaries s6-tlsc-io and s6-tlsd-io encapsulate the crypto code; they init and run the engine, connecting to 4 already open fds (stdin/stdout = network, argv[1] and argv[2] = local) - s6-tlsc is now a simple wrapper around s6-tlsc-io - s6-tlsd is now a simple wrapper around s6-tlsd-io - new binary: s6-ucspitlsd, which is also a wrapper around s6-tlsd-io, but differently: the parent execs the app which should be ucspi-tls-aware, the child waits for a command from the parent and execs into s6-tlsd-io if it receives it. Adapt to new stopwatch API 2019-09-06T12:31:32Z Laurent Bercot ska-skaware@skarnet.org 2019-09-06T12:31:32Z urn:sha1:fd151339c157d8df21f44fd12a42adc2700cce2a Use stopwatches and wallclocks where appropriate 2019-09-04T11:26:52Z Laurent Bercot ska-skaware@skarnet.org 2019-09-04T11:26:52Z urn:sha1:9c5b811d182f77b67a0bb5cd5f4a33774304e1d4 Cleanup superfluous includes 2017-03-14T09:07:27Z Laurent Bercot ska-skaware@skarnet.org 2017-03-14T09:07:27Z urn:sha1:6126e9c49f01b315c82cae340caaa1d8f588c0e7 Adapt to skalibs-2.5.0.0 2017-03-12T19:39:01Z Laurent Bercot ska-skaware@skarnet.org 2017-03-12T19:39:01Z urn:sha1:53091e3bce487ee82e2805a0231e780551561717 Types fix, first pass 2017-01-10T02:17:16Z Laurent Bercot ska-skaware@skarnet.org 2017-01-10T02:17:16Z urn:sha1:334d807b924427434b42d4fbae745d3d1b38a218 XXX marks what must change when skalibs changes. Also started writing functions for client certificate support in sbearssl, but it's not working yet (need more high-level support from BearSSL before it can work) Add -z option to s6-tlsc/s6-tlsd to clean TLS env vars before spawning (default) 2016-11-26T10:04:40Z Laurent Bercot ska-skaware@skarnet.org 2016-11-26T10:04:40Z urn:sha1:08e88c5efc65a6f49da40aa002bc5f4b0ebee49d