aboutsummaryrefslogtreecommitdiffstats
path: root/src/tls
Commit message (Collapse)AuthorAgeFilesLines
* Prepare for 2.7.0.0. Better s6-tlsc-io interface.Laurent Bercot2023-11-1012-96/+96
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* s6-tlsserver bugfix, doc updatesLaurent Bercot2023-09-301-17/+6
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Remove extra warning when s6-tcpserver-access has no rulesetLaurent Bercot2023-09-201-1/+1
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Fix s6-tlsd fd fuxLaurent Bercot2023-09-093-5/+4
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Use cspawn (skalibs-2.14)Laurent Bercot2023-09-091-95/+10
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Fully defork s6-tlsc and s6-tlsdLaurent Bercot2023-09-0810-85/+153
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Refactor s6-tls[cd] so they're ready to port to posix_spawnLaurent Bercot2023-09-0810-122/+134
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Fix s6-tcpserver verbosity invocationLaurent Bercot2023-08-091-1/+0
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Fix s6-tlsserver tcpaccess invocation conditionLaurent Bercot2023-08-092-26/+35
| | | | | | Also fix s6-tlsclient storage reservation Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Prepare for 2.5.1.4; fix s6-tlsserver -Y|-yLaurent Bercot2023-08-081-2/+5
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Prepare for 2.5.1.2Laurent Bercot2022-11-299-9/+9
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* s6-tls[cd]: don't leak useless fd to the appLaurent Bercot2022-08-301-0/+1
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Prepare for 2.5.1.1; adapt to skalibs-2.12.0.0Laurent Bercot2022-04-092-6/+0
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Log client decision on s6-ucspitls[cd] -v2Laurent Bercot2021-09-242-8/+42
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Adapt to skalibs-2.11.0.0Laurent Bercot2021-08-108-20/+20
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Correctly clean up the environment for -zLaurent Bercot2021-06-025-29/+54
|
* bugfix: -l option in s6-tlsserver takes an argLaurent Bercot2021-05-301-1/+1
|
* Server-side SNI, libtls versionLaurent Bercot2021-05-286-22/+46
| | | | Implementation for bearssl coming soon.
* Add an x509 engine wrapping minimal. NOT FUNCTIONAL, FOR TESTING.Laurent Bercot2021-05-202-6/+10
|
* Tiny code and doc fixesLaurent Bercot2021-01-182-0/+2
|
* Implement handshake timeout for libtls backendLaurent Bercot2021-01-132-4/+2
|
* Get rid of webipc.hLaurent Bercot2020-12-092-2/+2
|
* Change -K semantics: timeout *during handshake*, not afterwardsLaurent Bercot2020-12-072-2/+4
| | | | | | | | | | | | | | - the TLS tunnel itself should be transparent so it has no business shutting down the connection no matter how long the app takes - there's still an undetectable situation on some kernels where EOF doesn't get transmitted from the network, and the engine is in the handshake, and it can't do anything but wait forever. A timeout is useful here: dawg, your peer is never going to send any more data, you should just give up. - if the situation happens after the handshake, the *app* should have a timeout and die. The tunnel will follow suit. - libtls has a blocking tls_handshake() blackbox, we cannot give it a timeout. Too bad, use bearssl.
* Fix build with skalibs 2.10.0.0; document dependenciesLaurent Bercot2020-11-301-1/+1
|
* Convert to new exec.h syntaxLaurent Bercot2020-11-266-20/+21
|
* Fix a few bugs. sbearssl appears to be working.Laurent Bercot2020-11-223-9/+1
|
* Add SSL_PROTOCOL and SSL_CIPHER support, fix some bugsLaurent Bercot2020-11-223-43/+24
|
* Move all tls stuff into its own subdirLaurent Bercot2020-11-2122-0/+1299
generated by cgit v1.3.1 (git 2.54.0) at 2026-07-16 23:00:52 +0000