aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Expand)AuthorAgeFilesLines
* Add all the missing pieces for sni_policyLaurent Bercot2021-06-0119-122/+326
* Start work on bearssl server-side sniLaurent Bercot2021-05-3010-0/+372
* Server-side SNI, libtls versionLaurent Bercot2021-05-287-32/+84
* All good, remove debug instructionsLaurent Bercot2021-05-273-20/+1
* Remove backtraces; add verification impls to server enginesLaurent Bercot2021-05-272-9/+2
* Add backtrace invocation to debug spurious get_pkey callLaurent Bercot2021-05-271-1/+10
* More debug commandsLaurent Bercot2021-05-252-4/+11
* bugfix: tcpserver should unignore SIGPIPELaurent Bercot2021-05-222-2/+4
* Trivial syscall number optimizationLaurent Bercot2021-05-212-2/+2
* Debugging iterationLaurent Bercot2021-05-202-2/+1
* Add an x509 engine wrapping minimal. NOT FUNCTIONAL, FOR TESTING.Laurent Bercot2021-05-2012-66/+310
* Prepare for 2.4.2.0; implement client certificates with bearsslLaurent Bercot2021-05-189-83/+199
* sbearssl cosmetic fixesLaurent Bercot2021-05-082-3/+5
* Remove SSL_TLS_SNI_SERVERNAME (instead of defined but empty) if no SNILaurent Bercot2021-01-282-8/+20
* Prepare for 2.4.1.0; add SSL_TLS_SNI_SERVERNAMELaurent Bercot2021-01-282-2/+9
* Tiny code and doc fixesLaurent Bercot2021-01-182-0/+2
* Implement handshake timeout for libtls backendLaurent Bercot2021-01-139-14/+53
* Get rid of webipc.hLaurent Bercot2020-12-094-10/+10
* Change -K semantics: timeout *during handshake*, not afterwardsLaurent Bercot2020-12-075-13/+14
* Fix build with skalibs 2.10.0.0; document dependenciesLaurent Bercot2020-11-301-1/+1
* Convert to new exec.h syntaxLaurent Bercot2020-11-2616-83/+106
* That exit condition is really hard to get right >.>Laurent Bercot2020-11-261-1/+1
* Fix engine exit condition for sbearsslLaurent Bercot2020-11-261-4/+5
* minidentd QoL fixLaurent Bercot2020-11-231-1/+3
* stls client: prefer CAFILE, warn on CADIR use, because libtls is brokenLaurent Bercot2020-11-231-6/+7
* Fix more bugs; disable renegociation in bearssl clientLaurent Bercot2020-11-234-44/+44
* Fix a few bugs. sbearssl appears to be working.Laurent Bercot2020-11-227-24/+26
* Add SSL_PROTOCOL and SSL_CIPHER support, fix some bugsLaurent Bercot2020-11-2213-45/+376
* Add documentation, fix tiny privdrop bugLaurent Bercot2020-11-222-4/+4
* Move all tls stuff into its own subdirLaurent Bercot2020-11-2122-0/+0
* Add s6-ucspitlscLaurent Bercot2020-11-219-78/+201
* Prepare for 2.4.0.0Laurent Bercot2020-11-211-1/+12
* Privs can only be dropped after reading key files.Laurent Bercot2020-11-2115-11/+38
* Refactor tls code to support ucspi-tlsLaurent Bercot2020-11-2029-432/+804
* Add -e option to s6-tlsserverLaurent Bercot2020-05-061-4/+12
* Remove tainnow.lib dependencyLaurent Bercot2019-09-218-8/+8
* Adapt to new stopwatch APILaurent Bercot2019-09-066-10/+6
* Use stopwatches and wallclocks where appropriateLaurent Bercot2019-09-047-1/+7
* Different code style for the maxconn spurious warning avoidanceLaurent Bercot2019-05-142-9/+6
* Adapt to skalibs/posixishard.hLaurent Bercot2019-02-206-7/+18
* bugfix: have s6-tcpserver?d write localport to stdout on notifLaurent Bercot2018-10-062-2/+24
* Add nsss supportLaurent Bercot2018-08-011-0/+2
* Adapt to skalibs-2.7.0.0, prepare for 2.3.0.3Laurent Bercot2018-07-212-11/+8
* change localip is6 flag based on destination ipJohn Regan2018-04-111-2/+6
* Add -B (blocking) option to s6-tcpserver?-socketbinderLaurent Bercot2018-04-112-6/+12
* bugfix: spurious error message in s6-tcpserver?d when maxed connectionsLaurent Bercot2017-09-133-6/+8
* Moderately big hammer: force kill on s6-tlsd when it has nothing to write to...Laurent Bercot2017-08-282-2/+10
* Revert big hammer. Data still needs to be flushed to the network even when t...Laurent Bercot2017-08-282-10/+2
* Optimize to xpathexec ; prepare for 2.3.0.2Laurent Bercot2017-08-2210-21/+11
* Fix error messages in stls_s6tls?.c when setting key fileLaurent Bercot2017-06-292-2/+2