aboutsummaryrefslogtreecommitdiffstats
path: root/src/tls/s6-tlsd-io.c
Commit message (Collapse)AuthorAgeFilesLines
* Adapt to skalibs-2.11.0.0Laurent Bercot2021-08-101-6/+6
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Server-side SNI, libtls versionLaurent Bercot2021-05-281-3/+11
| | | | Implementation for bearssl coming soon.
* Add an x509 engine wrapping minimal. NOT FUNCTIONAL, FOR TESTING.Laurent Bercot2021-05-201-3/+5
|
* Implement handshake timeout for libtls backendLaurent Bercot2021-01-131-2/+1
|
* Change -K semantics: timeout *during handshake*, not afterwardsLaurent Bercot2020-12-071-1/+2
| | | | | | | | | | | | | | - the TLS tunnel itself should be transparent so it has no business shutting down the connection no matter how long the app takes - there's still an undetectable situation on some kernels where EOF doesn't get transmitted from the network, and the engine is in the handshake, and it can't do anything but wait forever. A timeout is useful here: dawg, your peer is never going to send any more data, you should just give up. - if the situation happens after the handshake, the *app* should have a timeout and die. The tunnel will follow suit. - libtls has a blocking tls_handshake() blackbox, we cannot give it a timeout. Too bad, use bearssl.
* Fix a few bugs. sbearssl appears to be working.Laurent Bercot2020-11-221-4/+0
|
* Add SSL_PROTOCOL and SSL_CIPHER support, fix some bugsLaurent Bercot2020-11-221-22/+11
|
* Move all tls stuff into its own subdirLaurent Bercot2020-11-211-0/+126