| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Correctly clean up the environment for -z | Laurent Bercot | 2021-06-02 | 1 | -3/+4 |
| | | |||||
| * | Debug session. Now works. | Laurent Bercot | 2021-06-02 | 1 | -3/+4 |
| | | | | | | The environment given to the application still needs to be cleaned up of SNI variables. | ||||
| * | Add all the missing pieces for sni_policy | Laurent Bercot | 2021-06-01 | 1 | -3/+13 |
| | | | | | | sbearssl_server_init_and_run is yet unchanged, the next step is to rewrite it using the new primitives. | ||||
| * | Add an x509 engine wrapping minimal. NOT FUNCTIONAL, FOR TESTING. | Laurent Bercot | 2021-05-20 | 1 | -4/+5 |
| | | |||||
| * | Prepare for 2.4.2.0; implement client certificates with bearssl | Laurent Bercot | 2021-05-18 | 1 | -3/+6 |
| | | | | | Also send a bit more environment with libtls | ||||
| * | Implement handshake timeout for libtls backend | Laurent Bercot | 2021-01-13 | 1 | -4/+5 |
| | | |||||
| * | Add SSL_PROTOCOL and SSL_CIPHER support, fix some bugs | Laurent Bercot | 2020-11-22 | 1 | -7/+12 |
| | | |||||
| * | Move all tls stuff into its own subdir | Laurent Bercot | 2020-11-21 | 1 | -35/+35 |
| | | |||||
| * | Add s6-ucspitlsc | Laurent Bercot | 2020-11-21 | 1 | -5/+9 |
| | | |||||
| * | Privs can only be dropped after reading key files. | Laurent Bercot | 2020-11-21 | 1 | -10/+11 |
| | | |||||
| * | Refactor tls code to support ucspi-tls | Laurent Bercot | 2020-11-20 | 1 | -20/+38 |
| | | | | | | | | | | | | | | | | | | | That includes: - new architecture: the tls binary is now a child of the app instead of the other way around - the sbearssl_run engine now takes a post-handshake callback. This allows s6-tlsc and s6-tlsd to only exec into the app when the handshake succeeds (which was already the case with libressl). - new binaries s6-tlsc-io and s6-tlsd-io encapsulate the crypto code; they init and run the engine, connecting to 4 already open fds (stdin/stdout = network, argv[1] and argv[2] = local) - s6-tlsc is now a simple wrapper around s6-tlsc-io - s6-tlsd is now a simple wrapper around s6-tlsd-io - new binary: s6-ucspitlsd, which is also a wrapper around s6-tlsd-io, but differently: the parent execs the app which should be ucspi-tls-aware, the child waits for a command from the parent and execs into s6-tlsd-io if it receives it. | ||||
| * | Fix gen-deps.sh for cross-builds | Laurent Bercot | 2019-10-21 | 1 | -42/+42 |
| | | |||||
| * | Remove tainnow.lib dependency | Laurent Bercot | 2019-09-21 | 1 | -8/+8 |
| | | |||||
| * | Add nsss support | Laurent Bercot | 2018-08-01 | 1 | -2/+2 |
| | | |||||
| * | Make all-pic a user option | Laurent Bercot | 2017-10-30 | 1 | -0/+12 |
| | | |||||
| * | Fix case where s6-tls[cd] would sometimes not detect an application and ↵ | Laurent Bercot | 2017-03-22 | 1 | -7/+6 |
| | | | | | remain there forever with its zombie, both condemned to err in limbo for all eternity, the living and the dead, hand in hand | ||||
| * | Update deps.mak | Laurent Bercot | 2017-01-10 | 1 | -4/+7 |
| | | |||||
| * | Remove s6-tls* dependency to libs6net. Improve gen-deps to make dynlinking ↵ | Laurent Bercot | 2016-12-04 | 1 | -18/+19 |
| | | | | | easier. | ||||
| * | sbearssl: allow DER-encoded certificates in TA directory | Laurent Bercot | 2016-11-30 | 1 | -5/+7 |
| | | |||||
| * | Add -z option to s6-tlsc/s6-tlsd to clean TLS env vars before spawning ↵ | Laurent Bercot | 2016-11-26 | 1 | -11/+12 |
| | | | | | (default) | ||||
| * | Add EC certificate issuer key type detection for sbearssl | Laurent Bercot | 2016-11-25 | 1 | -2/+3 |
| | | |||||
| * | Fix build bugs. It builds! | Laurent Bercot | 2016-11-25 | 1 | -3/+4 |
| | | | | | | | Two things remain to do: - how to pass SNI information to libtls - how to detect cert issuer key type for ECC in bearssl | ||||
| * | Alpha version of the SSL work. | Laurent Bercot | 2016-11-25 | 1 | -11/+52 |
| | | | | | | | Doesn't build yet, but I'm scared of losing it, so using git as storage. Will fix the stupid bugs now, the tricky bugs later. | ||||
| * | Revert wrong shared lib fix | Laurent Bercot | 2016-10-24 | 1 | -1/+1 |
| | | |||||
| * | Fix stupid shared lib dependencies | Laurent Bercot | 2016-10-24 | 1 | -1/+12 |
| | | |||||
| * | Push back GNU make dependency to 3.81 | Laurent Bercot | 2015-10-12 | 1 | -19/+18 |
| | | |||||
| * | Link shared libs against their -l deps, better libpath managementv2.1.0.2 | Laurent Bercot | 2015-08-12 | 1 | -2/+4 |
| | | |||||
| * | xyzzy fix (fixes https://bugs.gentoo.org/show_bug.cgi?id=541092) | Laurent Bercot | 2015-08-12 | 1 | -2/+2 |
| | | |||||
| * | Move Unix domain socket and access control stuff to s6. | Laurent Bercot | 2015-01-15 | 1 | -53/+5 |
| | | | | | | Move seekablepipe to s6-portable-utils. Version: 2.0.1.0, release candidate | ||||
| * | - Parallel build fixv2.0.1.0 | Laurent Bercot | 2015-01-14 | 1 | -7/+8 |
| | | | | | - Version updated to 2.0.1.0, release candidate | ||||
| * | Experimental decoupling of socketbinders and daemons in ucspi servers. | Laurent Bercot | 2015-01-07 | 1 | -2/+20 |
| | | | | | | Rewrite of s6-ipcserver as a small wrapper. s6-tcpserver4 and s6-tcpserver6 will follow. | ||||
| * | - deps.mak fixv2.0.0.1 | Laurent Bercot | 2015-01-06 | 1 | -0/+1 |
| | | | | | - version increase to 2.0.0.1 | ||||
| * | And s6-ioconnect, that pulls shutdown. </3 Solaris | Laurent Bercot | 2014-12-16 | 1 | -1/+1 |
| | | |||||
| * | And s6-getservbyname, because Solaris ! | Laurent Bercot | 2014-12-16 | 1 | -1/+1 |
| | | |||||
| * | Update dependencies to ${SOCKET_LIB}, because Solaris | Laurent Bercot | 2014-12-16 | 1 | -3/+3 |
| | | |||||
| * | Update gen-deps.sh and deps.mak | Laurent Bercot | 2014-12-16 | 1 | -17/+41 |
| | | |||||
| * | Initial commit | Laurent Bercot | 2014-12-15 | 1 | -0/+69 |
 |
index : s6-networking | |
| UCSPI TCP implementation and other networking utilities | ska-skaware@skarnet.org |
| aboutsummaryrefslogtreecommitdiffstats |