aboutsummaryrefslogtreecommitdiffstats
path: root/src/conn-tools/s6-tlsc.c
Commit message (Collapse)AuthorAgeFilesLines
* Move all tls stuff into its own subdirLaurent Bercot2020-11-211-94/+0
|
* Add s6-ucspitlscLaurent Bercot2020-11-211-21/+20
|
* Privs can only be dropped after reading key files.Laurent Bercot2020-11-211-1/+0
|
* Refactor tls code to support ucspi-tlsLaurent Bercot2020-11-201-45/+43
| | | | | | | | | | | | | | | | | | That includes: - new architecture: the tls binary is now a child of the app instead of the other way around - the sbearssl_run engine now takes a post-handshake callback. This allows s6-tlsc and s6-tlsd to only exec into the app when the handshake succeeds (which was already the case with libressl). - new binaries s6-tlsc-io and s6-tlsd-io encapsulate the crypto code; they init and run the engine, connecting to 4 already open fds (stdin/stdout = network, argv[1] and argv[2] = local) - s6-tlsc is now a simple wrapper around s6-tlsc-io - s6-tlsd is now a simple wrapper around s6-tlsd-io - new binary: s6-ucspitlsd, which is also a wrapper around s6-tlsd-io, but differently: the parent execs the app which should be ucspi-tls-aware, the child waits for a command from the parent and execs into s6-tlsd-io if it receives it.
* Adapt to new stopwatch APILaurent Bercot2019-09-061-1/+1
|
* Use stopwatches and wallclocks where appropriateLaurent Bercot2019-09-041-0/+1
|
* Cleanup superfluous includesLaurent Bercot2017-03-141-1/+1
|
* Adapt to skalibs-2.5.0.0Laurent Bercot2017-03-121-14/+4
|
* Types fix, first passLaurent Bercot2017-01-101-0/+1
| | | | | | | XXX marks what must change when skalibs changes. Also started writing functions for client certificate support in sbearssl, but it's not working yet (need more high-level support from BearSSL before it can work)
* Add -z option to s6-tlsc/s6-tlsd to clean TLS env vars before spawning ↵Laurent Bercot2016-11-261-3/+5
| | | | (default)
* Fix build bugs. It builds!Laurent Bercot2016-11-251-4/+6
| | | | | | Two things remain to do: - how to pass SNI information to libtls - how to detect cert issuer key type for ECC in bearssl
* Alpha version of the SSL work.Laurent Bercot2016-11-251-0/+102
Doesn't build yet, but I'm scared of losing it, so using git as storage. Will fix the stupid bugs now, the tricky bugs later.