aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* Update documentation; make s6-tlsd-io more conservative by defaultLaurent Bercot2023-11-201-0/+1
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* version: 2.7.0.0v2.7.0.0Laurent Bercot2023-11-202-0/+3
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Small bugfixes, update deps, update docLaurent Bercot2023-11-192-10/+7
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* /etc/hosts support for s6-tcpclient and s6-tcpserver-accessLaurent Bercot2023-11-184-51/+136
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Small sbearssl_run pass, should work nowLaurent Bercot2023-11-172-56/+82
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Fix stls_run; sbearssl_run needs a rewriteLaurent Bercot2023-11-176-101/+104
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Add -J and -j to the TLS tools to check for peer close_notify.Laurent Bercot2023-11-1614-207/+232
| | | | | | | | Also, and more importantly, significantly rewrite stls_run() for better full-duplex support. This implementation isn't fully tested yet. Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Fix sbearssl_run even moreLaurent Bercot2023-11-123-14/+40
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* s6-tcpserverd: change terminology: allow -> accept, deny -> rejectLaurent Bercot2023-11-121-4/+4
| | | | | | Also change ip:port to ip_port in logs Signed-off-by: Laurent Bercot <ska@appnovation.com>
* New and fixed version of sbearssl_runLaurent Bercot2023-11-117-148/+148
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Prepare for 2.7.0.0. Better s6-tlsc-io interface.Laurent Bercot2023-11-1012-96/+96
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* s6-tcpserver-access: don't use errno in deny messagesLaurent Bercot2023-11-061-5/+5
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Fix tls_error invocationLaurent Bercot2023-11-051-1/+1
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Fix missing null terminatorLaurent Bercot2023-10-161-8/+9
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Better iteration when sending signals in s6-tcpserverdLaurent Bercot2023-10-011-28/+33
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Avoid stupid buffer overflows tyvmLaurent Bercot2023-10-011-1/+1
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Refactor s6-tcpserverd loggingLaurent Bercot2023-10-011-51/+43
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* s6-tlsserver bugfix, doc updatesLaurent Bercot2023-09-301-17/+6
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Great Tcpserver Unification. Prepare for 2.6.0.0.Laurent Bercot2023-09-3014-826/+121
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Remove extra warning when s6-tcpserver-access has no rulesetLaurent Bercot2023-09-202-2/+1
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Remove s6-tcpserver?d dependency on libs6Laurent Bercot2023-09-114-8/+22
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Fix s6-tlsd fd fuxLaurent Bercot2023-09-093-5/+4
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Use cspawn (skalibs-2.14)Laurent Bercot2023-09-091-95/+10
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Fully defork s6-tlsc and s6-tlsdLaurent Bercot2023-09-0810-85/+153
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Refactor s6-tls[cd] so they're ready to port to posix_spawnLaurent Bercot2023-09-0810-122/+134
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* New versions of s6-tcpserver4d and s6-tcpserver6dLaurent Bercot2023-09-084-153/+163
| | | | | | | | | | | - both now use posix_spawn when available - s6-tcpserver4d uses avltree for logarithmic lookups - s6-tcpserver6d still has the linear lookup - the point was to benchmark linear vs logarithmic, but the fork() overhead overshadowed everything - now with fork() out of the way, I'm going back to benchmarks Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Fix s6-tcpserver verbosity invocationLaurent Bercot2023-08-091-1/+0
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Fix s6-tlsserver tcpaccess invocation conditionLaurent Bercot2023-08-092-26/+35
| | | | | | Also fix s6-tlsclient storage reservation Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Prepare for 2.5.1.4; fix s6-tlsserver -Y|-yLaurent Bercot2023-08-081-2/+5
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Autoset INTERNAL_LIBSLaurent Bercot2023-02-152-2/+2
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* bugfix: s6net_ident_reply_get uninitialized variableLaurent Bercot2023-01-231-1/+1
| | | | | | Thanks hurufu. Signed-off-by: Laurent Bercot <ska@appnovation.com>
* QoL: more client warnings / earlier exit when taiclock or ntp exchange failsLaurent Bercot2023-01-182-0/+37
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Prepare for 2.5.1.2Laurent Bercot2022-11-2936-36/+36
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Bring libsbearssl doc up to date.Laurent Bercot2022-10-141-1/+1
| | | | | | Also fix a typo in sbearssl.h Signed-off-by: Laurent Bercot <ska@appnovation.com>
* bugfix: sbearssl_run adapted to new allread() APILaurent Bercot2022-10-071-2/+6
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Add workaround to bearssl regression with BR_FEATURE_X509_TIME_CALLBACKLaurent Bercot2022-10-077-8/+65
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* s6-tls[cd]: don't leak useless fd to the appLaurent Bercot2022-08-301-0/+1
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* sbearssl_sni_policy_vtable: use the COPY macro for ec as wellLaurent Bercot2022-08-121-3/+3
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Fix allread errno managementLaurent Bercot2022-07-183-0/+7
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Prepare for 2.5.1.1; adapt to skalibs-2.12.0.0Laurent Bercot2022-04-095-12/+3
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Add sbearssl_*_set_tain(n)_g convenience macrosLaurent Bercot2021-11-193-2/+6
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Allow SNI wildcarding for *.example.comLaurent Bercot2021-11-181-5/+27
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* SNI matches are case-insensitiveLaurent Bercot2021-11-181-2/+2
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Fix error path in add_keypair_file for sbearssl SNI policyLaurent Bercot2021-11-091-1/+1
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Fix error message in sbearssl server initLaurent Bercot2021-11-091-1/+1
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* No need for twice the workaround ^^'Laurent Bercot2021-11-081-1/+0
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Workaround for a bearssl bug in do_signLaurent Bercot2021-10-191-0/+1
| | | | | | Credit to Erico Nogueira for reporting and helping find the bug. Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Fix error case in readbigpemLaurent Bercot2021-10-181-5/+6
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Fix sbearssl send_environment protocolLaurent Bercot2021-09-242-2/+1
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
* Log client decision on s6-ucspitls[cd] -v2Laurent Bercot2021-09-242-8/+42
| | | | Signed-off-by: Laurent Bercot <ska@appnovation.com>
generated by cgit v1.3.1 (git 2.54.0) at 2026-07-16 19:14:30 +0000