| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Adapt to skalibs-2.11.0.0 | Laurent Bercot | 2021-08-10 | 1 | -6/+6 |
| | | | | | Signed-off-by: Laurent Bercot <ska@appnovation.com> | ||||
| * | Add an x509 engine wrapping minimal. NOT FUNCTIONAL, FOR TESTING. | Laurent Bercot | 2021-05-20 | 1 | -3/+5 |
| | | |||||
| * | Implement handshake timeout for libtls backend | Laurent Bercot | 2021-01-13 | 1 | -2/+1 |
| | | |||||
| * | Change -K semantics: timeout *during handshake*, not afterwards | Laurent Bercot | 2020-12-07 | 1 | -1/+2 |
| | | | | | | | | | | | | | | | - the TLS tunnel itself should be transparent so it has no business shutting down the connection no matter how long the app takes - there's still an undetectable situation on some kernels where EOF doesn't get transmitted from the network, and the engine is in the handshake, and it can't do anything but wait forever. A timeout is useful here: dawg, your peer is never going to send any more data, you should just give up. - if the situation happens after the handshake, the *app* should have a timeout and die. The tunnel will follow suit. - libtls has a blocking tls_handshake() blackbox, we cannot give it a timeout. Too bad, use bearssl. | ||||
| * | Fix a few bugs. sbearssl appears to be working. | Laurent Bercot | 2020-11-22 | 1 | -4/+0 |
| | | |||||
| * | Add SSL_PROTOCOL and SSL_CIPHER support, fix some bugs | Laurent Bercot | 2020-11-22 | 1 | -21/+12 |
| | | |||||
| * | Move all tls stuff into its own subdir | Laurent Bercot | 2020-11-21 | 1 | -0/+128 |
