s6-networking/src/stls, branch 2.5.0.0

Adapt to skalibs-2.11.0.0

2021-08-10T00:26:41Z

Signed-off-by: Laurent Bercot

Work around incredible libtls stupidity

2021-06-02T09:26:41Z

Make stuff build

2021-06-01T20:35:49Z

Still not working: we need to add servername to the storage

Server-side SNI, libtls version

2021-05-28T01:05:56Z

Implementation for bearssl coming soon.

Prepare for 2.4.2.0; implement client certificates with bearssl

2021-05-18T11:19:19Z

Also send a bit more environment with libtls

Remove SSL_TLS_SNI_SERVERNAME (instead of defined but empty) if no SNI

2021-01-28T14:31:38Z

Prepare for 2.4.1.0; add SSL_TLS_SNI_SERVERNAME

2021-01-28T13:17:25Z

Implement handshake timeout for libtls backend

2021-01-13T11:36:16Z

Change -K semantics: timeout during handshake, not afterwards

2020-12-07T12:53:54Z

- the TLS tunnel itself should be transparent so it has no business shutting down the connection no matter how long the app takes - there's still an undetectable situation on some kernels where EOF doesn't get transmitted from the network, and the engine is in the handshake, and it can't do anything but wait forever. A timeout is useful here: dawg, your peer is never going to send any more data, you should just give up. - if the situation happens after the handshake, the *app* should have a timeout and die. The tunnel will follow suit. - libtls has a blocking tls_handshake() blackbox, we cannot give it a timeout. Too bad, use bearssl.

stls client: prefer CAFILE, warn on CADIR use, because libtls is broken

2020-11-23T15:39:17Z