| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2021-07-23 | Prepare for 2.5.0.0; remove minidentd | Laurent Bercot | |
| Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
| 2021-06-03 | Cosmetics | Laurent Bercot | |
| 2021-06-03 | Inline functions | Laurent Bercot | |
| 2021-06-03 | Don't hardcode ecdsa signature implementation in sni_policy | Laurent Bercot | |
| 2021-06-02 | Work around incredible libtls stupidity | Laurent Bercot | |
| 2021-06-02 | Correctly clean up the environment for -z | Laurent Bercot | |
| 2021-06-02 | Debug session. Now works. | Laurent Bercot | |
| The environment given to the application still needs to be cleaned up of SNI variables. | |||
| 2021-06-01 | Merge branch 'dev' | Laurent Bercot | |
| This add full client certificate support, as well as tentative SNI functionality | |||
| 2021-06-01 | Add servername to storagedev | Laurent Bercot | |
| 2021-06-01 | Make stuff build | Laurent Bercot | |
| Still not working: we need to add servername to the storage | |||
| 2021-06-01 | Add all the missing pieces for sni_policy | Laurent Bercot | |
| sbearssl_server_init_and_run is yet unchanged, the next step is to rewrite it using the new primitives. | |||
| 2021-05-30 | bugfix: -l option in s6-tlsserver takes an arg | Laurent Bercot | |
| 2021-05-30 | Start work on bearssl server-side sni | Laurent Bercot | |
| 2021-05-28 | Server-side SNI, libtls version | Laurent Bercot | |
| Implementation for bearssl coming soon. | |||
| 2021-05-27 | All good, remove debug instructions | Laurent Bercot | |
| 2021-05-27 | Remove backtraces; add verification impls to server engines | Laurent Bercot | |
| 2021-05-27 | Add backtrace invocation to debug spurious get_pkey call | Laurent Bercot | |
| 2021-05-25 | More debug commands | Laurent Bercot | |
| 2021-05-22 | bugfix: tcpserver should unignore SIGPIPE | Laurent Bercot | |
| 2021-05-21 | Trivial syscall number optimization | Laurent Bercot | |
| 2021-05-20 | Debugging iteration | Laurent Bercot | |
| 2021-05-20 | Add an x509 engine wrapping minimal. NOT FUNCTIONAL, FOR TESTING. | Laurent Bercot | |
| 2021-05-18 | Prepare for 2.4.2.0; implement client certificates with bearssl | Laurent Bercot | |
| Also send a bit more environment with libtls | |||
| 2021-05-08 | sbearssl cosmetic fixes | Laurent Bercot | |
| 2021-04-15 | version: 2.4.1.1v2.4.1.1 | Laurent Bercot | |
| 2021-04-13 | Prepare for 2.4.1.1 | Laurent Bercot | |
| 2021-04-11 | Do not compile or link into /dev/null | Laurent Bercot | |
| 2021-04-09 | Real noexecstack fix: make strip less greedy | Laurent Bercot | |
| 2021-04-08 | noexecstack only works in LDFLAGS | Laurent Bercot | |
| 2021-02-16 | More doc fixes | Laurent Bercot | |
| 2021-02-15 | version: 2.4.1.0v2.4.1.0 | Laurent Bercot | |
| 2021-02-07 | Add link to s6-networking man pages | Laurent Bercot | |
| 2021-02-04 | More doc fixes | Laurent Bercot | |
| 2021-02-04 | Doc fixes, thanks flexibeast | Laurent Bercot | |
| 2021-01-28 | Remove SSL_TLS_SNI_SERVERNAME (instead of defined but empty) if no SNI | Laurent Bercot | |
| 2021-01-28 | Prepare for 2.4.1.0; add SSL_TLS_SNI_SERVERNAME | Laurent Bercot | |
| 2021-01-18 | Tiny code and doc fixes | Laurent Bercot | |
| 2021-01-13 | Implement handshake timeout for libtls backend | Laurent Bercot | |
| 2021-01-13 | Accept --enable-ssl=libtls -_- | Laurent Bercot | |
| 2021-01-10 | version: 2.4.0.0v2.4.0.0 | Laurent Bercot | |
| 2021-01-03 | Document optional execline | Laurent Bercot | |
| 2020-12-29 | configure should be executable >.> | Laurent Bercot | |
| 2020-12-28 | Don't put -fno-stack-protector in default CFLAGS | Laurent Bercot | |
| 2020-12-18 | configure fix | Laurent Bercot | |
| 2020-12-09 | Get rid of webipc.h | Laurent Bercot | |
| 2020-12-07 | Change -K semantics: timeout *during handshake*, not afterwards | Laurent Bercot | |
| - the TLS tunnel itself should be transparent so it has no business shutting down the connection no matter how long the app takes - there's still an undetectable situation on some kernels where EOF doesn't get transmitted from the network, and the engine is in the handshake, and it can't do anything but wait forever. A timeout is useful here: dawg, your peer is never going to send any more data, you should just give up. - if the situation happens after the handshake, the *app* should have a timeout and die. The tunnel will follow suit. - libtls has a blocking tls_handshake() blackbox, we cannot give it a timeout. Too bad, use bearssl. | |||
| 2020-11-30 | Fix build with skalibs 2.10.0.0; document dependencies | Laurent Bercot | |
| 2020-11-26 | Convert to new exec.h syntax | Laurent Bercot | |
| 2020-11-26 | That exit condition is really hard to get right >.> | Laurent Bercot | |
| 2020-11-26 | Fix engine exit condition for sbearssl | Laurent Bercot | |
 |
index : s6-networking | |
| Mirror of git://git.skarnet.org/s6-networking |
| summaryrefslogtreecommitdiff |