| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Implement handshake timeout for libtls backend | Laurent Bercot | 2021-01-13 | 1 | -0/+2 |
| | | |||||
| * | Add SSL_PROTOCOL and SSL_CIPHER support, fix some bugs | Laurent Bercot | 2020-11-22 | 1 | -0/+1 |
| | | |||||
| * | Privs can only be dropped after reading key files. | Laurent Bercot | 2020-11-21 | 1 | -0/+1 |
| | | |||||
| * | Refactor tls code to support ucspi-tls | Laurent Bercot | 2020-11-20 | 1 | -4/+3 |
| | | | | | | | | | | | | | | | | | | | That includes: - new architecture: the tls binary is now a child of the app instead of the other way around - the sbearssl_run engine now takes a post-handshake callback. This allows s6-tlsc and s6-tlsd to only exec into the app when the handshake succeeds (which was already the case with libressl). - new binaries s6-tlsc-io and s6-tlsd-io encapsulate the crypto code; they init and run the engine, connecting to 4 already open fds (stdin/stdout = network, argv[1] and argv[2] = local) - s6-tlsc is now a simple wrapper around s6-tlsc-io - s6-tlsd is now a simple wrapper around s6-tlsd-io - new binary: s6-ucspitlsd, which is also a wrapper around s6-tlsd-io, but differently: the parent execs the app which should be ucspi-tls-aware, the child waits for a command from the parent and execs into s6-tlsd-io if it receives it. | ||||
| * | Fix case where s6-tls[cd] would sometimes not detect an application and ↵ | Laurent Bercot | 2017-03-22 | 1 | -1/+1 |
| | | | | | remain there forever with its zombie, both condemned to err in limbo for all eternity, the living and the dead, hand in hand | ||||
| * | Remove s6-tls* dependency to libs6net. Improve gen-deps to make dynlinking ↵ | Laurent Bercot | 2016-12-04 | 1 | -1/+1 |
| | | | | | easier. | ||||
| * | Add -z option to s6-tlsc/s6-tlsd to clean TLS env vars before spawning ↵ | Laurent Bercot | 2016-11-26 | 1 | -0/+1 |
| | | | | | (default) | ||||
| * | Alpha version of the SSL work. | Laurent Bercot | 2016-11-25 | 1 | -0/+5 |
| Doesn't build yet, but I'm scared of losing it, so using git as storage. Will fix the stupid bugs now, the tricky bugs later. | |||||
 |
index : s6-networking | |
| UCSPI TCP implementation and other networking utilities | ska-skaware@skarnet.org |
| aboutsummaryrefslogtreecommitdiffstats |