aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* configure should be executable >.>Laurent Bercot2020-12-291-0/+0
|
* Don't put -fno-stack-protector in default CFLAGSLaurent Bercot2020-12-281-1/+0
|
* configure fixLaurent Bercot2020-12-181-7/+7
|
* Get rid of webipc.hLaurent Bercot2020-12-094-10/+10
|
* Change -K semantics: timeout *during handshake*, not afterwardsLaurent Bercot2020-12-079-29/+38
| | | | | | | | | | | | | | - the TLS tunnel itself should be transparent so it has no business shutting down the connection no matter how long the app takes - there's still an undetectable situation on some kernels where EOF doesn't get transmitted from the network, and the engine is in the handshake, and it can't do anything but wait forever. A timeout is useful here: dawg, your peer is never going to send any more data, you should just give up. - if the situation happens after the handshake, the *app* should have a timeout and die. The tunnel will follow suit. - libtls has a blocking tls_handshake() blackbox, we cannot give it a timeout. Too bad, use bearssl.
* Fix build with skalibs 2.10.0.0; document dependenciesLaurent Bercot2020-11-306-42/+69
|
* Convert to new exec.h syntaxLaurent Bercot2020-11-2616-83/+106
|
* That exit condition is really hard to get right >.>Laurent Bercot2020-11-261-1/+1
|
* Fix engine exit condition for sbearsslLaurent Bercot2020-11-262-4/+6
|
* minidentd QoL fixLaurent Bercot2020-11-231-1/+3
|
* stls client: prefer CAFILE, warn on CADIR use, because libtls is brokenLaurent Bercot2020-11-231-6/+7
|
* Fix more bugs; disable renegociation in bearssl clientLaurent Bercot2020-11-234-44/+44
|
* Fix a few bugs. sbearssl appears to be working.Laurent Bercot2020-11-228-25/+27
|
* Add SSL_PROTOCOL and SSL_CIPHER support, fix some bugsLaurent Bercot2020-11-2217-56/+415
|
* Add documentation, fix tiny privdrop bugLaurent Bercot2020-11-2214-395/+1199
|
* Move all tls stuff into its own subdirLaurent Bercot2020-11-2123-35/+35
|
* Add s6-ucspitlscLaurent Bercot2020-11-2112-84/+212
|
* Prepare for 2.4.0.0Laurent Bercot2020-11-219-17/+74
|
* Privs can only be dropped after reading key files.Laurent Bercot2020-11-2116-21/+49
|
* Refactor tls code to support ucspi-tlsLaurent Bercot2020-11-2033-453/+851
| | | | | | | | | | | | | | | | | | That includes: - new architecture: the tls binary is now a child of the app instead of the other way around - the sbearssl_run engine now takes a post-handshake callback. This allows s6-tlsc and s6-tlsd to only exec into the app when the handshake succeeds (which was already the case with libressl). - new binaries s6-tlsc-io and s6-tlsd-io encapsulate the crypto code; they init and run the engine, connecting to 4 already open fds (stdin/stdout = network, argv[1] and argv[2] = local) - s6-tlsc is now a simple wrapper around s6-tlsc-io - s6-tlsd is now a simple wrapper around s6-tlsd-io - new binary: s6-ucspitlsd, which is also a wrapper around s6-tlsd-io, but differently: the parent execs the app which should be ucspi-tls-aware, the child waits for a command from the parent and execs into s6-tlsd-io if it receives it.
* version: 2.3.2.0v2.3.2.0Laurent Bercot2020-10-041-1/+1
|
* doc: fix URLsLaurent Bercot2020-10-0419-29/+29
|
* Bump dependenciesLaurent Bercot2020-10-023-13/+13
|
* LibreSSL needs -lpthreadLaurent Bercot2020-08-211-1/+1
|
* Add -e option to s6-tlsserverLaurent Bercot2020-05-064-8/+29
|
* Prepare for 2.3.2.0Laurent Bercot2020-05-066-8/+30
|
* s6-networking: fix html errorsColin Booth2020-03-303-3/+4
| | | | Signed-off-by: Colin Booth <colin@heliocat.net>
* Fix s6-dns version dependencyLaurent Bercot2020-03-162-2/+2
|
* version: 2.3.1.2v2.3.1.2Laurent Bercot2020-03-031-1/+0
|
* Prepare for 2.3.1.2Laurent Bercot2020-01-276-11/+30
|
* Fix shared libs installationLaurent Bercot2020-01-271-3/+2
|
* version: 2.3.1.1v2.3.1.1Laurent Bercot2019-10-211-0/+1
|
* Fix gen-deps.sh for cross-buildsLaurent Bercot2019-10-212-43/+43
|
* Prepare for 2.3.1.1Laurent Bercot2019-10-215-10/+29
|
* Fix generated CC for cross-buildsLaurent Bercot2019-10-211-1/+1
|
* version: 2.3.1.0v2.3.1.0Laurent Bercot2019-09-221-4/+1
|
* Fix configure permissionsLaurent Bercot2019-09-211-0/+0
|
* Remove tainnow dependency in configure tooLaurent Bercot2019-09-211-2/+0
|
* Update tainnow.lib mentions in docLaurent Bercot2019-09-213-3/+3
|
* Remove tainnow.lib dependencyLaurent Bercot2019-09-219-16/+16
|
* Adapt to new stopwatch APILaurent Bercot2019-09-066-10/+6
|
* Use stopwatches and wallclocks where appropriateLaurent Bercot2019-09-047-1/+7
|
* Prepare for 2.3.1.0Laurent Bercot2019-08-095-12/+35
|
* Makefile needs to be adjusted tooLaurent Bercot2019-07-221-5/+4
|
* Make configure CC-friendlierLaurent Bercot2019-07-221-8/+24
|
* Doc typo fixLaurent Bercot2019-06-101-1/+1
|
* Different code style for the maxconn spurious warning avoidanceLaurent Bercot2019-05-142-9/+6
|
* version: 2.3.0.4v2.3.0.4Laurent Bercot2019-03-042-1/+2
|
* Build everything as PIC by defaultLaurent Bercot2019-02-245-21/+19
|
* Adapt to skalibs/posixishard.hLaurent Bercot2019-02-206-7/+18
|
generated by cgit v1.3.1 (git 2.54.0) at 2026-07-16 20:25:16 +0000