Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-02-04 | Doc fixes, thanks flexibeast | Laurent Bercot | |
2021-01-28 | Remove SSL_TLS_SNI_SERVERNAME (instead of defined but empty) if no SNI | Laurent Bercot | |
2021-01-28 | Prepare for 2.4.1.0; add SSL_TLS_SNI_SERVERNAME | Laurent Bercot | |
2020-12-07 | Change -K semantics: timeout *during handshake*, not afterwards | Laurent Bercot | |
- the TLS tunnel itself should be transparent so it has no business shutting down the connection no matter how long the app takes - there's still an undetectable situation on some kernels where EOF doesn't get transmitted from the network, and the engine is in the handshake, and it can't do anything but wait forever. A timeout is useful here: dawg, your peer is never going to send any more data, you should just give up. - if the situation happens after the handshake, the *app* should have a timeout and die. The tunnel will follow suit. - libtls has a blocking tls_handshake() blackbox, we cannot give it a timeout. Too bad, use bearssl. | |||
2020-11-22 | Add documentation, fix tiny privdrop bug | Laurent Bercot | |
2020-10-04 | doc: fix URLs | Laurent Bercot | |
2020-03-30 | s6-networking: fix html errors | Colin Booth | |
Signed-off-by: Colin Booth <colin@heliocat.net> | |||
2017-05-23 | Switch doc to schemeless URLs | Laurent Bercot | |
2017-05-21 | version: 2.3.0.1v2.3.0.1 | Laurent Bercot | |
2017-01-10 | Types fix, first pass | Laurent Bercot | |
XXX marks what must change when skalibs changes. Also started writing functions for client certificate support in sbearssl, but it's not working yet (need more high-level support from BearSSL before it can work) | |||
2016-12-15 | Doc typo fixes | Laurent Bercot | |
2016-12-03 | Doc typo fix | Laurent Bercot | |
2016-12-03 | s6-tls*: small bugfixes. Add documentation. | Laurent Bercot | |