aboutsummaryrefslogtreecommitdiffstats
path: root/doc/s6-tlsc-io.html
Commit message (Collapse)AuthorAgeFilesLines
* Doc fixes, thanks flexibeastLaurent Bercot2021-02-041-3/+3
|
* Remove SSL_TLS_SNI_SERVERNAME (instead of defined but empty) if no SNILaurent Bercot2021-01-281-5/+3
|
* Prepare for 2.4.1.0; add SSL_TLS_SNI_SERVERNAMELaurent Bercot2021-01-281-2/+5
|
* Implement handshake timeout for libtls backendLaurent Bercot2021-01-131-3/+1
|
* Change -K semantics: timeout *during handshake*, not afterwardsLaurent Bercot2020-12-071-4/+6
| | | | | | | | | | | | | | - the TLS tunnel itself should be transparent so it has no business shutting down the connection no matter how long the app takes - there's still an undetectable situation on some kernels where EOF doesn't get transmitted from the network, and the engine is in the handshake, and it can't do anything but wait forever. A timeout is useful here: dawg, your peer is never going to send any more data, you should just give up. - if the situation happens after the handshake, the *app* should have a timeout and die. The tunnel will follow suit. - libtls has a blocking tls_handshake() blackbox, we cannot give it a timeout. Too bad, use bearssl.
* Add documentation, fix tiny privdrop bugLaurent Bercot2020-11-221-0/+217