diff options
| author | Laurent Bercot <ska-skaware@skarnet.org> | 2023-11-16 05:13:06 +0000 |
|---|---|---|
| committer | Laurent Bercot <ska@appnovation.com> | 2023-11-16 05:13:06 +0000 |
| commit | 26597a785ec2dd4e9ec9fb7d9765d2ee8779ee16 (patch) | |
| tree | c2c5602397e9381b1cb04472ed057edd4a00e520 /doc/s6-tlsserver.html | |
| parent | d8ca717da164c3e76ebb56c954d0a08544955601 (diff) | |
| download | s6-networking-26597a785ec2dd4e9ec9fb7d9765d2ee8779ee16.tar.xz | |
Add -J and -j to the TLS tools to check for peer close_notify.
Also, and more importantly, significantly rewrite stls_run()
for better full-duplex support. This implementation isn't fully
tested yet.
Signed-off-by: Laurent Bercot <ska@appnovation.com>
Diffstat (limited to 'doc/s6-tlsserver.html')
| -rw-r--r-- | doc/s6-tlsserver.html | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/doc/s6-tlsserver.html b/doc/s6-tlsserver.html index d1ca3e2..8713235 100644 --- a/doc/s6-tlsserver.html +++ b/doc/s6-tlsserver.html @@ -177,6 +177,7 @@ certificates, you probably still want TCP access rules. <li> <tt>-Z</tt>, <tt>-z</tt> : keep or remove the <a href="s6-tlsd-io.html">s6-tlsd-io</a>-specific variables from the application's environment </li> <li> <tt>-S</tt>, <tt>-s</tt> : use close_notify or EOF to signal the end of a TLS connection </li> + <li> <tt>-J</tt>, <tt>-j</tt> : exit nonzero with an error message when the peer fails to close_notify, or ignore it </li> <li> <tt>-Y</tt>, <tt>-y</tt> : request an optional or a mandatory client certificate </li> <li> <tt>-K <em>kimeout</em></tt> : set a timeout for the TLS handshake </li> <li> <tt>-k <em>snilevel</em></tt> : support SNI-based certificate chains </li> |