s6-networking/src/stls/deps-lib, branch 2.5.0.0 UCSPI TCP implementation and other networking utilities https://git.skarnet.org/cgit/s6-networking/atom/src/stls/deps-lib?h=2.5.0.0 2021-01-13T11:36:16Z Implement handshake timeout for libtls backend 2021-01-13T11:36:16Z Laurent Bercot ska-skaware@skarnet.org 2021-01-13T11:36:16Z urn:sha1:cc7dccb1858e73176814c3a8457ff6f94ff45662 Add SSL_PROTOCOL and SSL_CIPHER support, fix some bugs 2020-11-22T15:46:34Z Laurent Bercot ska-skaware@skarnet.org 2020-11-22T15:46:34Z urn:sha1:4fb917263ac30373cb3e5dfe3e207369eb238def Privs can only be dropped after reading key files. 2020-11-21T02:22:09Z Laurent Bercot ska-skaware@skarnet.org 2020-11-21T02:22:09Z urn:sha1:5c2880becc94141b8035b3488b6bd60696011308 Refactor tls code to support ucspi-tls 2020-11-20T23:24:29Z Laurent Bercot ska-skaware@skarnet.org 2020-11-20T23:24:29Z urn:sha1:5715c21a077ee1c2fe8957cb4adcea14fd2eda6b That includes: - new architecture: the tls binary is now a child of the app instead of the other way around - the sbearssl_run engine now takes a post-handshake callback. This allows s6-tlsc and s6-tlsd to only exec into the app when the handshake succeeds (which was already the case with libressl). - new binaries s6-tlsc-io and s6-tlsd-io encapsulate the crypto code; they init and run the engine, connecting to 4 already open fds (stdin/stdout = network, argv[1] and argv[2] = local) - s6-tlsc is now a simple wrapper around s6-tlsc-io - s6-tlsd is now a simple wrapper around s6-tlsd-io - new binary: s6-ucspitlsd, which is also a wrapper around s6-tlsd-io, but differently: the parent execs the app which should be ucspi-tls-aware, the child waits for a command from the parent and execs into s6-tlsd-io if it receives it. Fix case where s6-tls[cd] would sometimes not detect an application and remain there forever with its zombie, both condemned to err in limbo for all eternity, the living and the dead, hand in hand 2017-03-22T21:37:30Z Laurent Bercot ska-skaware@skarnet.org 2017-03-22T21:37:30Z urn:sha1:dddbfab568d42e443f102d35c84432824cc59fee Remove s6-tls* dependency to libs6net. Improve gen-deps to make dynlinking easier. 2016-12-04T13:44:23Z Laurent Bercot ska-skaware@skarnet.org 2016-12-04T13:44:23Z urn:sha1:5d38ea056c82221a0ddc206cd57dd7c1852a3159 Add -z option to s6-tlsc/s6-tlsd to clean TLS env vars before spawning (default) 2016-11-26T10:04:40Z Laurent Bercot ska-skaware@skarnet.org 2016-11-26T10:04:40Z urn:sha1:08e88c5efc65a6f49da40aa002bc5f4b0ebee49d Alpha version of the SSL work. 2016-11-25T18:16:05Z Laurent Bercot ska-skaware@skarnet.org 2016-11-25T18:16:05Z urn:sha1:018025f0f36a4847df265c9948dbaf7073ed3245 Doesn't build yet, but I'm scared of losing it, so using git as storage. Will fix the stupid bugs now, the tricky bugs later.