19 files changed, 29 insertions, 29 deletions
diff --git a/doc/index.html b/doc/index.html
index 216b046..747eb98 100644
--- a/doc/index.html
+++ b/doc/index.html
@@ -57,9 +57,9 @@ requirement if you link against the shared version of the s6-dns
 libraries. </li>
  <li> If you want to build the secure communication tools:
   <ul>
-   <li> Either <a href="http://libressl.org/">LibreSSL</a> version 3.1.4
+   <li> Either <a href="https://libressl.org/">LibreSSL</a> version 3.1.4
 or later </li>
-   <li> Or <a href="http://bearssl.org/">BearSSL</a> version 0.6
+   <li> Or <a href="https://bearssl.org/">BearSSL</a> version 0.6
 or later. <strong>This is a beta version.</strong> </li>
   </ul> The chosen library is a build-time requirement, and also a
 run-time requirement if you link against its shared version. </li>
@@ -69,7 +69,7 @@ run-time requirement if you link against its shared version. </li>
 
 <p>
  s6-networking is free software. It is available under the
-<a href="http://opensource.org/licenses/ISC">ISC license</a>.
+<a href="https://opensource.org/licenses/ISC">ISC license</a>.
 </p>
 
 <h3> Download </h3>
@@ -191,7 +191,7 @@ relevant page.
 <h3> Similar work </h3>
 
 <ul>
- <li> <a href="http://cr.yp.to/ucspi-tcp.html">ucspi-tcp</a> is the
+ <li> <a href="https://cr.yp.to/ucspi-tcp.html">ucspi-tcp</a> is the
 original inspiration for s6-networking.
 It works, but is unfortunately unmaintained by the author. s6-networking
 follows <a href="//skarnet.org/software/skalibs/djblegacy.html">the
diff --git a/doc/libstls/index.html b/doc/libstls/index.html
index ecd78d1..fcd839a 100644
--- a/doc/libstls/index.html
+++ b/doc/libstls/index.html
@@ -26,7 +26,7 @@
 <a href="../s6-tlsd.html">s6-tlsd</a> executables when they're built
 against the <a href="https://www.libressl.org/">LibreSSL</a>
 backend. You can use it in your own programs, but since
-<a href="http://man.openbsd.org/OpenBSD-current/man3/tls_init.3">libtls</a>
+<a href="https://man.openbsd.org/OpenBSD-current/man3/tls_init.3">libtls</a>
 is already relatively high-level, it's probably not very useful.
 </p>
 
diff --git a/doc/minidentd.html b/doc/minidentd.html
index ed501db..007326c 100644
--- a/doc/minidentd.html
+++ b/doc/minidentd.html
@@ -20,7 +20,7 @@
 
 <p>
 <tt>minidentd</tt> is a small
-<a href="http://cr.yp.to/proto/ucspi.txt">UCSPI</a> server application
+<a href="https://cr.yp.to/proto/ucspi.txt">UCSPI</a> server application
 that answers IDENT requests.
 </p>
 
diff --git a/doc/s6-getservbyname.html b/doc/s6-getservbyname.html
index 3572f1a..7f4d9c4 100644
--- a/doc/s6-getservbyname.html
+++ b/doc/s6-getservbyname.html
@@ -20,7 +20,7 @@
 
 <p>
 <tt>s6-getservbyname</tt> is a simple command-line interface to the
-<a href="http://pubs.opengroup.org/onlinepubs/9699919799/functions/getservbyname.html">getservbyname()</a>
+<a href="https://pubs.opengroup.org/onlinepubs/9699919799/functions/getservbyname.html">getservbyname()</a>
 function, converting a service name and protocol into a port number.
 </p>
 
diff --git a/doc/s6-sntpclock.html b/doc/s6-sntpclock.html
index 823557c..156dacc 100644
--- a/doc/s6-sntpclock.html
+++ b/doc/s6-sntpclock.html
@@ -86,7 +86,7 @@ server is more than 34 years away from the time given by the system clock,
 then NTP just cannot compute. This is a problem for CMOS-less systems,
 where the system clock is initialized to the Unix Epoch. The solution
 is to first manually initialize the system clock with a program such as
-<a href="http://pubs.opengroup.org/onlinepubs/9699919799/utilities/date.html">date</a> or
+<a href="https://pubs.opengroup.org/onlinepubs/9699919799/utilities/date.html">date</a> or
 <a href="//skarnet.org/software/s6-portable-utils/s6-clock.html">s6-clock</a>
 to a closer time (such as 2013-01-01, which will be good up to 2047), then
 contact the NTP server. </li>
@@ -106,9 +106,9 @@ do so. </li>
 
 <p>
  From a Unix software engineering standpoint, the well-known
-<a href="http://doc.ntp.org/4.1.0/ntpd.htm">ntpd</a> program is an
+<a href="https://doc.ntp.org/4.1.0/ntpd.htm">ntpd</a> program is an
 eldritch abomination. The main reason for it is that, just like its
-lovely cousin <a href="http://www.isc.org/downloads/bind/">BIND</a>,
+lovely cousin <a href="https://www.isc.org/downloads/bind/">BIND</a>,
 ntpd performs a lot of different tasks in a unique process, instead
 of separating what could, and should, be separated. This is confusing
 for both the programmer <em>and</em> the software user.
@@ -133,7 +133,7 @@ is the regular setting of the system clock, which can be done with
 a loop over a simple program such as <a href="s6-clockadd.html">s6-clockadd</a>.
 There is also control of the clock skew, which s6-networking does not
 provide because there is no portable interface for that; there is such a tool
-in the <a href="http://cr.yp.to/clockspeed.html">clockspeed</a> package. </li>
+in the <a href="https://cr.yp.to/clockspeed.html">clockspeed</a> package. </li>
  <li> ntpd includes a complete cryptographic key management system for the
 crypto part of NTP. NTP is not the only protocol that uses cryptography
 and asymmetric keys; managing keys in a separate tool, not in the NTP
diff --git a/doc/s6-taiclock.html b/doc/s6-taiclock.html
index 782adf9..ddbc660 100644
--- a/doc/s6-taiclock.html
+++ b/doc/s6-taiclock.html
@@ -20,7 +20,7 @@
 
 <p>
 <tt>s6-taiclock</tt> is a client for the
-<a href="http://cr.yp.to/proto/taiclock.txt">TAICLOCK</a> protocol.
+<a href="https://cr.yp.to/proto/taiclock.txt">TAICLOCK</a> protocol.
 It connects to a TAICLOCK server, computes an estimated discrepancy
 between the local clock time and the absolute time given by the server,
 and outputs it on stdout.
@@ -106,7 +106,7 @@ a project of their own. </li>
 <h3> Related work </h3>
 
 <ul>
- <li> The <a href="http://cr.yp.to/clockspeed.html">clockspeed</a> package
+ <li> The <a href="https://cr.yp.to/clockspeed.html">clockspeed</a> package
 is the original inspiration for the clock management part of s6-networking.
 Unfortunately, it is unmaintained. </li>
 </ul>
diff --git a/doc/s6-taiclockd.html b/doc/s6-taiclockd.html
index 6ceca06..af34423 100644
--- a/doc/s6-taiclockd.html
+++ b/doc/s6-taiclockd.html
@@ -20,7 +20,7 @@
 
 <p>
 <tt>s6-taiclockd</tt> is a server for the
-<a href="http://cr.yp.to/proto/taiclock.txt">TAICLOCK</a> protocol.
+<a href="https://cr.yp.to/proto/taiclock.txt">TAICLOCK</a> protocol.
 It's a long-lived program listening to the network and answering
 to TAICLOCK clients such as <a href="s6-taiclock.html">s6-taiclock</a>.
 </p>
diff --git a/doc/s6-tcpclient.html b/doc/s6-tcpclient.html
index 79b66c7..66fe415 100644
--- a/doc/s6-tcpclient.html
+++ b/doc/s6-tcpclient.html
@@ -20,7 +20,7 @@
 
 <p>
 <tt>s6-tcpclient</tt> is an
-<a href="http://cr.yp.to/proto/ucspi.txt">UCSPI client tool</a> for
+<a href="https://cr.yp.to/proto/ucspi.txt">UCSPI client tool</a> for
 INET domain sockets. It establishes a TCP connection to a server,
 then executes into a program.
 </p>
diff --git a/doc/s6-tcpserver-access.html b/doc/s6-tcpserver-access.html
index 0aa0cf6..16b16f9 100644
--- a/doc/s6-tcpserver-access.html
+++ b/doc/s6-tcpserver-access.html
@@ -136,7 +136,7 @@ The default is 0, meaning no such timeout. </li>
  <li> <tt>-i&nbsp;<em>rulesdir</em></tt>&nbsp;: check client credentials
 against a filesystem-based database in the <em>rulesdir</em> directory. </li>
  <li> <tt>-x&nbsp;<em>rulesfile</em></tt>&nbsp;: check client credentials
-against a <a href="http://en.wikipedia.org/wiki/Cdb_(software)">cdb</a>
+against a <a href="https://en.wikipedia.org/wiki/Cdb_(software)">cdb</a>
 database in the <em>rulesfile</em> file. <tt>-i</tt> and <tt>-x</tt> are
 mutually exclusive. If none of those options is given, no credential checking will be
 performed, and a warning will be emitted on every connection if
@@ -156,7 +156,7 @@ if the <tt>-i</tt> option has been given. This option is the most flexible
 one: the directory format is simple enough for scripts to understand and
 modify it, and the ruleset can be changed dynamically. This is practical,
 for instance, for roaming users. </li>
-<li> or in a <a href="http://en.wikipedia.org/wiki/Cdb_(software)">CDB
+<li> or in a <a href="https://en.wikipedia.org/wiki/Cdb_(software)">CDB
 file</a>, if the <tt>-x</tt> option has been given. This option is the most
 efficient one if the ruleset is static enough: a lot less system calls are
 needed to perform searches in a CDB than in the filesystem. </li>
diff --git a/doc/s6-tcpserver.html b/doc/s6-tcpserver.html
index aa209d0..28833ec 100644
--- a/doc/s6-tcpserver.html
+++ b/doc/s6-tcpserver.html
@@ -20,7 +20,7 @@
 
 <p>
 <tt>s6-tcpserver</tt> is an
-<a href="http://cr.yp.to/proto/ucspi.txt">UCSPI tool</a> for
+<a href="https://cr.yp.to/proto/ucspi.txt">UCSPI tool</a> for
 TCP connections, i.e. a super-server. It accepts connections from
 clients, and forks a program to handle each connection.
 </p>
diff --git a/doc/s6-tcpserver4-socketbinder.html b/doc/s6-tcpserver4-socketbinder.html
index 1e86e6d..18e9fd7 100644
--- a/doc/s6-tcpserver4-socketbinder.html
+++ b/doc/s6-tcpserver4-socketbinder.html
@@ -33,7 +33,7 @@ socket to an IPv4 address and port, then executes a program.
  <li> s6-tcpserver4-socketbinder creates an TCP socket
 and binds it to IPv4 address <em>ip</em>, port <em>port</em>.
 It prepares the socket to accept connections by calling
-<a href="http://pubs.opengroup.org/onlinepubs/9699919799/functions/listen.html">listen()</a>. </li>
+<a href="https://pubs.opengroup.org/onlinepubs/9699919799/functions/listen.html">listen()</a>. </li>
  <li> It then execs into <em>prog...</em> with the open socket
 as its standard input. </li>
 </ul>
@@ -43,7 +43,7 @@ as its standard input. </li>
 <ul>
  <li> <tt>-d</tt>&nbsp;: allow instant rebinding to the same IP and port
 even if it has been used not long ago - this is the SO_REUSEADDR flag to
-<a href="http://pubs.opengroup.org/onlinepubs/9699919799/functions/setsockopt.html">setsockopt()</a>
+<a href="https://pubs.opengroup.org/onlinepubs/9699919799/functions/setsockopt.html">setsockopt()</a>
 and is generally used with server programs. This is the default. </li>
  <li> <tt>-D</tt>&nbsp;: disallow instant rebinding to the same path. </li>
  <li> <tt>-b&nbsp;<em>backlog</em></tt>&nbsp;: set a maximum of
diff --git a/doc/s6-tcpserver4.html b/doc/s6-tcpserver4.html
index 9bb0969..1914ff0 100644
--- a/doc/s6-tcpserver4.html
+++ b/doc/s6-tcpserver4.html
@@ -114,7 +114,7 @@ then drops its privileges to those of a named non-root account. </li>
 
 <ul>
  <li> Unlike its ancestor
-<a href="http://cr.yp.to/ucspi-tcp/tcpserver.html">tcpserver</a>,
+<a href="https://cr.yp.to/ucspi-tcp/tcpserver.html">tcpserver</a>,
 s6-tcpserver4 performs just the bare minimum: the point is to have a
 very small and very fast process to serve connections with the least
 possible overhead. Features such as additional environment variables,
diff --git a/doc/s6-tcpserver4d.html b/doc/s6-tcpserver4d.html
index c1a509b..a11bae1 100644
--- a/doc/s6-tcpserver4d.html
+++ b/doc/s6-tcpserver4d.html
@@ -94,7 +94,7 @@ Default is 40. It is impossible to set it higher than <em>maxconn</em>. </li>
 
 <ul>
  <li> Unlike its ancestor
-<a href="http://cr.yp.to/ucspi-tcp/tcpserver.html">tcpserver</a>,
+<a href="https://cr.yp.to/ucspi-tcp/tcpserver.html">tcpserver</a>,
 s6-tcpserver4d performs just the bare minimum: the point is to have a
 very small and very fast process to serve connections with the least
 possible overhead. Features such as additional environment variables,
diff --git a/doc/s6-tcpserver6-socketbinder.html b/doc/s6-tcpserver6-socketbinder.html
index b72da33..5bb2ae5 100644
--- a/doc/s6-tcpserver6-socketbinder.html
+++ b/doc/s6-tcpserver6-socketbinder.html
@@ -33,7 +33,7 @@ socket to an IPv6 address and port, then executes a program.
  <li> s6-tcpserver6-socketbinder creates an TCP socket
 and binds it to IPv6 address <em>ip</em>, port <em>port</em>.
 It prepares the socket to accept connections by calling
-<a href="http://pubs.opengroup.org/onlinepubs/9699919799/functions/listen.html">listen()</a>. </li>
+<a href="https://pubs.opengroup.org/onlinepubs/9699919799/functions/listen.html">listen()</a>. </li>
  <li> It then execs into <em>prog...</em> with the open socket
 as its standard input. </li>
 </ul>
@@ -43,7 +43,7 @@ as its standard input. </li>
 <ul>
  <li> <tt>-d</tt>&nbsp;: allow instant rebinding to the same IP and port
 even if it has been used not long ago - this is the SO_REUSEADDR flag to
-<a href="http://pubs.opengroup.org/onlinepubs/9699919799/functions/setsockopt.html">setsockopt()</a>
+<a href="https://pubs.opengroup.org/onlinepubs/9699919799/functions/setsockopt.html">setsockopt()</a>
 and is generally used with server programs. This is the default. </li>
  <li> <tt>-D</tt>&nbsp;: disallow instant rebinding to the same path. </li>
  <li> <tt>-b&nbsp;<em>backlog</em></tt>&nbsp;: set a maximum of
diff --git a/doc/s6-tcpserver6d.html b/doc/s6-tcpserver6d.html
index d8665fd..585fa41 100644
--- a/doc/s6-tcpserver6d.html
+++ b/doc/s6-tcpserver6d.html
@@ -93,7 +93,7 @@ Default is 40. It is impossible to set it higher than <em>maxconn</em>. </li>
 
 <ul>
  <li> Unlike its ancestor
-<a href="http://cr.yp.to/ucspi-tcp/tcpserver.html">tcpserver</a>,
+<a href="https://cr.yp.to/ucspi-tcp/tcpserver.html">tcpserver</a>,
 s6-tcpserver6d performs just the bare minimum: the point is to have a
 very small and very fast process to serve connections with the least
 possible overhead. Features such as additional environment variables,
diff --git a/doc/s6-tlsc.html b/doc/s6-tlsc.html
index ad923b4..1237460 100644
--- a/doc/s6-tlsc.html
+++ b/doc/s6-tlsc.html
@@ -91,7 +91,7 @@ the server agree.
 function. The supported protocol versions are described
 <a href="https://bearssl.org/support.html#supported-versions">here</a>. </li>
  <li> For LibreSSL, this means use of the
-<a href="http://man.openbsd.org/OpenBSD-current/man3/tls_config_set_protocols.3">tls_config_set_protocols(TLS_PROTOCOLS_ALL)</a>
+<a href="https://man.openbsd.org/OpenBSD-current/man3/tls_config_set_protocols.3">tls_config_set_protocols(TLS_PROTOCOLS_ALL)</a>
 call. </li>
 </ul>
 
diff --git a/doc/s6-tlsclient.html b/doc/s6-tlsclient.html
index 700aea7..2553637 100644
--- a/doc/s6-tlsclient.html
+++ b/doc/s6-tlsclient.html
@@ -20,7 +20,7 @@
 
 <p>
 <tt>s6-tlsclient</tt> is an
-<a href="http://cr.yp.to/proto/ucspi.txt">UCSPI client tool</a> for
+<a href="https://cr.yp.to/proto/ucspi.txt">UCSPI client tool</a> for
 TLS/SSL connections over INET domain sockets. It establishes a TCP
 connection to a server and a TLS transport over it,
 then executes into a program.
diff --git a/doc/s6-tlsd.html b/doc/s6-tlsd.html
index 9c3a241..36125d2 100644
--- a/doc/s6-tlsd.html
+++ b/doc/s6-tlsd.html
@@ -98,7 +98,7 @@ the server agree.
 function. The supported protocol versions are described
 <a href="https://bearssl.org/support.html#supported-versions">here</a>. </li>
  <li> For LibreSSL, this means use of the
-<a href="http://man.openbsd.org/OpenBSD-current/man3/tls_config_set_protocols.3">tls_config_set_protocols(TLS_PROTOCOLS_DEFAULT)</a>
+<a href="https://man.openbsd.org/OpenBSD-current/man3/tls_config_set_protocols.3">tls_config_set_protocols(TLS_PROTOCOLS_DEFAULT)</a>
 call. </li>
 </ul>
 
diff --git a/doc/s6-tlsserver.html b/doc/s6-tlsserver.html
index 6c1395d..a87fbb7 100644
--- a/doc/s6-tlsserver.html
+++ b/doc/s6-tlsserver.html
@@ -20,7 +20,7 @@
 
 <p>
 <tt>s6-tlsserver</tt> is an
-<a href="http://cr.yp.to/proto/ucspi.txt">UCSPI server tool</a> for
+<a href="https://cr.yp.to/proto/ucspi.txt">UCSPI server tool</a> for
 TLS/SSL connections over INET domain sockets. It acts as a TCP superserver
 that listens to connections, accepts them, and for each connection,
 establishes a TLS transport over it, then executes into a program.