s6-networking - UCSPI TCP implementation and other networking utilities

	Commit message (Collapse)	Author	Age	Files	Lines
*	Refactor tls code to support ucspi-tls	Laurent Bercot	2020-11-20	1	-112/+0
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	That includes: - new architecture: the tls binary is now a child of the app instead of the other way around - the sbearssl_run engine now takes a post-handshake callback. This allows s6-tlsc and s6-tlsd to only exec into the app when the handshake succeeds (which was already the case with libressl). - new binaries s6-tlsc-io and s6-tlsd-io encapsulate the crypto code; they init and run the engine, connecting to 4 already open fds (stdin/stdout = network, argv[1] and argv[2] = local) - s6-tlsc is now a simple wrapper around s6-tlsc-io - s6-tlsd is now a simple wrapper around s6-tlsd-io - new binary: s6-ucspitlsd, which is also a wrapper around s6-tlsd-io, but differently: the parent execs the app which should be ucspi-tls-aware, the child waits for a command from the parent and execs into s6-tlsd-io if it receives it.
*	Fix case where s6-tls[cd] would sometimes not detect an application and ↵	Laurent Bercot	2017-03-22	1	-21/+13
\| \| \| \|	remain there forever with its zombie, both condemned to err in limbo for all eternity, the living and the dead, hand in hand
*	Cleanup superfluous includes	Laurent Bercot	2017-03-14	1	-2/+0
\|
*	Adapt to skalibs-2.5.0.0	Laurent Bercot	2017-03-12	1	-1/+1
\|
*	Delay client cert support, but make s6-networking build against bearssl-0.3	Laurent Bercot	2017-01-30	1	-34/+5
\|
*	Types fix, first pass	Laurent Bercot	2017-01-10	1	-3/+42
\| \| \| \| \| \| \|	XXX marks what must change when skalibs changes. Also started writing functions for client certificate support in sbearssl, but it's not working yet (need more high-level support from BearSSL before it can work)
*	Fix sbearssl build	Laurent Bercot	2016-12-04	1	-1/+2
\|
*	Remove s6-tls* dependency to libs6net. Improve gen-deps to make dynlinking ↵	Laurent Bercot	2016-12-04	1	-1/+0
\| \| \| \|	easier.
*	sbearssl: allow DER-encoded certificates in TA directory	Laurent Bercot	2016-11-30	1	-1/+2
\|
*	Small sbearssl bugfixes and usability messages	Laurent Bercot	2016-11-28	1	-1/+1
\|
*	Add -z option to s6-tlsc/s6-tlsd to clean TLS env vars before spawning ↵	Laurent Bercot	2016-11-26	1	-1/+2
\| \| \| \|	(default)
*	Add EC certificate issuer key type detection for sbearssl	Laurent Bercot	2016-11-25	1	-1/+12
\|
*	Fix build bugs. It builds!	Laurent Bercot	2016-11-25	1	-4/+4
\| \| \| \| \| \|	Two things remain to do: - how to pass SNI information to libtls - how to detect cert issuer key type for ECC in bearssl
*	Alpha version of the SSL work.	Laurent Bercot	2016-11-25	1	-0/+99
	Doesn't build yet, but I'm scared of losing it, so using git as storage. Will fix the stupid bugs now, the tricky bugs later.