aboutsummaryrefslogtreecommitdiffstats
path: root/src/conn-tools
Commit message (Collapse)AuthorAgeFilesLines
* Prepare for 2.5.1.2Laurent Bercot2022-11-2911-11/+11
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Adapt to skalibs-2.11.0.0Laurent Bercot2021-08-1010-49/+36
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* bugfix: tcpserver should unignore SIGPIPELaurent Bercot2021-05-222-2/+4
|
* Trivial syscall number optimizationLaurent Bercot2021-05-212-2/+2
|
* Get rid of webipc.hLaurent Bercot2020-12-092-8/+8
|
* Convert to new exec.h syntaxLaurent Bercot2020-11-269-62/+84
|
* Move all tls stuff into its own subdirLaurent Bercot2020-11-2122-1299/+0
|
* Add s6-ucspitlscLaurent Bercot2020-11-219-78/+201
|
* Prepare for 2.4.0.0Laurent Bercot2020-11-211-1/+12
|
* Privs can only be dropped after reading key files.Laurent Bercot2020-11-216-29/+0
|
* Refactor tls code to support ucspi-tlsLaurent Bercot2020-11-2016-98/+654
| | | | | | | | | | | | | | | | | | That includes: - new architecture: the tls binary is now a child of the app instead of the other way around - the sbearssl_run engine now takes a post-handshake callback. This allows s6-tlsc and s6-tlsd to only exec into the app when the handshake succeeds (which was already the case with libressl). - new binaries s6-tlsc-io and s6-tlsd-io encapsulate the crypto code; they init and run the engine, connecting to 4 already open fds (stdin/stdout = network, argv[1] and argv[2] = local) - s6-tlsc is now a simple wrapper around s6-tlsc-io - s6-tlsd is now a simple wrapper around s6-tlsd-io - new binary: s6-ucspitlsd, which is also a wrapper around s6-tlsd-io, but differently: the parent execs the app which should be ucspi-tls-aware, the child waits for a command from the parent and execs into s6-tlsd-io if it receives it.
* Add -e option to s6-tlsserverLaurent Bercot2020-05-061-4/+12
|
* Remove tainnow.lib dependencyLaurent Bercot2019-09-215-5/+5
|
* Adapt to new stopwatch APILaurent Bercot2019-09-065-8/+5
|
* Use stopwatches and wallclocks where appropriateLaurent Bercot2019-09-045-0/+5
|
* Different code style for the maxconn spurious warning avoidanceLaurent Bercot2019-05-142-9/+6
|
* bugfix: have s6-tcpserver?d write localport to stdout on notifLaurent Bercot2018-10-062-2/+24
| | | | and not just a newline.
* change localip is6 flag based on destination ipJohn Regan2018-04-111-2/+6
| | | | | | | | | | | | | | | | By default, the localip flag is initialized with the is6 flag set to 0. The only time the flag is changed to 1 is when a user specifies a local IPv6 address to use. Because of this, socket_tcp46 always creates an IPv4 socket. This patch corrects that - if the user hasn't specified a local address, then the local 'is6' flag is updated to match the destination 'is6' flag. Signed-off-by: Laurent Bercot <ska-skaware@skarnet.org>
* Add -B (blocking) option to s6-tcpserver?-socketbinderLaurent Bercot2018-04-112-6/+12
|
* bugfix: spurious error message in s6-tcpserver?d when maxed connectionsLaurent Bercot2017-09-133-6/+8
|
* Optimize to xpathexec ; prepare for 2.3.0.2Laurent Bercot2017-08-229-20/+10
|
* Fix memcpy size in s6-tcpserver6dLaurent Bercot2017-03-151-1/+1
|
* Cleanup superfluous includesLaurent Bercot2017-03-142-2/+2
|
* Adapt to skalibs-2.5.0.0Laurent Bercot2017-03-1215-225/+197
|
* Types fix, first passLaurent Bercot2017-01-1014-60/+79
| | | | | | | XXX marks what must change when skalibs changes. Also started writing functions for client certificate support in sbearssl, but it's not working yet (need more high-level support from BearSSL before it can work)
* Remove s6-tls* dependency to libs6net. Improve gen-deps to make dynlinking ↵Laurent Bercot2016-12-042-2/+0
| | | | easier.
* s6-tls*: small bugfixes. Add documentation.Laurent Bercot2016-12-031-9/+3
|
* Fix several bugs in stls, make the engine workLaurent Bercot2016-12-012-0/+2
|
* Small sbearssl bugfixes and usability messagesLaurent Bercot2016-11-281-0/+2
|
* use S6_EXTBINPREFIX for s6-applyuidgid invocation in s6-tlsserverLaurent Bercot2016-11-271-1/+1
|
* Add -z option to s6-tlsc/s6-tlsd to clean TLS env vars before spawning ↵Laurent Bercot2016-11-266-12/+28
| | | | (default)
* Usability fixes for TLSLaurent Bercot2016-11-261-28/+38
|
* Fix build bugs. It builds!Laurent Bercot2016-11-254-16/+33
| | | | | | Two things remain to do: - how to pass SNI information to libtls - how to detect cert issuer key type for ECC in bearssl
* Alpha version of the SSL work.Laurent Bercot2016-11-258-0/+622
| | | | | | Doesn't build yet, but I'm scared of losing it, so using git as storage. Will fix the stupid bugs now, the tricky bugs later.
* Add options to s6-tcpserver4-socketbinder and s6-tcpserver6-socketbinder to ↵Laurent Bercot2016-09-104-10/+22
| | | | create UDP sockets; also to not listen(). (Suggested by Daniel Kahn Gillmor.)
* - Bugfix: s6-tcpclient and s6-tcpserver-access didn't s6dns_init()Laurent Bercot2015-03-302-1/+11
| | | | - Version: rc for 2.1.0.1
* Move Unix domain socket and access control stuff to s6.Laurent Bercot2015-01-1529-1964/+21
| | | | | Move seekablepipe to s6-portable-utils. Version: 2.0.1.0, release candidate
* - Parallel build fixv2.0.1.0Laurent Bercot2015-01-145-5/+5
| | | | - Version updated to 2.0.1.0, release candidate
* Bugfix: bad test in s6-ipcclient (for skalibs 2)Laurent Bercot2015-01-101-1/+1
|
* Complete conversion of s6-ipcserver and s6-tcpserver (4 and 6)Laurent Bercot2015-01-075-790/+277
| | | | to socketbinder + d model. With documentation (!)
* Experimental decoupling of socketbinders and daemons in ucspi servers.Laurent Bercot2015-01-0714-395/+1386
| | | | | Rewrite of s6-ipcserver as a small wrapper. s6-tcpserver4 and s6-tcpserver6 will follow.
* Prevent failure of -1 option in ucspi servers when stdout is closedLaurent Bercot2015-01-063-6/+24
|
* Remove the shutdown() in s6-sudoc: the MSG_DONTWAIT support in skalibsv2.0.0.0Laurent Bercot2014-12-211-3/+0
| | | | should fix the BSD problem in a better fashion.
* My instinctive attempt to fix s6-sudoc on the BSDs appears to be working...Laurent Bercot2014-12-201-1/+1
| | | | BSD is easy: when in doubt, shutdown() the socket. wtfbsdseriously.
* s6-sudo PATH fixLaurent Bercot2014-12-201-1/+1
|
* s6-ioconnect fixLaurent Bercot2014-12-201-2/+2
|
* Test a shutdown in s6-sudoc, see if it helps the BSDsLaurent Bercot2014-12-202-3/+4
|
* Real fix >.>Laurent Bercot2014-12-193-3/+3
|
* Safewrap around iopause in UCSPI servers!Laurent Bercot2014-12-193-3/+3
|
* Don't make UCSPI servers die if they can't write to stdoutLaurent Bercot2014-12-193-3/+3
|
generated by cgit v1.3.1 (git 2.54.0) at 2026-07-16 23:51:37 +0000