summaryrefslogtreecommitdiff
path: root/package
AgeCommit message (Collapse)Author
2021-01-13 Implement handshake timeout for libtls backendLaurent Bercot
2020-11-22 Add SSL_PROTOCOL and SSL_CIPHER support, fix some bugsLaurent Bercot
2020-11-21 Move all tls stuff into its own subdirLaurent Bercot
2020-11-21 Add s6-ucspitlscLaurent Bercot
2020-11-21 Prepare for 2.4.0.0Laurent Bercot
2020-11-21 Privs can only be dropped after reading key files.Laurent Bercot
2020-11-20 Refactor tls code to support ucspi-tlsLaurent Bercot
That includes: - new architecture: the tls binary is now a child of the app instead of the other way around - the sbearssl_run engine now takes a post-handshake callback. This allows s6-tlsc and s6-tlsd to only exec into the app when the handshake succeeds (which was already the case with libressl). - new binaries s6-tlsc-io and s6-tlsd-io encapsulate the crypto code; they init and run the engine, connecting to 4 already open fds (stdin/stdout = network, argv[1] and argv[2] = local) - s6-tlsc is now a simple wrapper around s6-tlsc-io - s6-tlsd is now a simple wrapper around s6-tlsd-io - new binary: s6-ucspitlsd, which is also a wrapper around s6-tlsd-io, but differently: the parent execs the app which should be ucspi-tls-aware, the child waits for a command from the parent and execs into s6-tlsd-io if it receives it.
2020-08-21 LibreSSL needs -lpthreadLaurent Bercot
2020-05-06 Prepare for 2.3.2.0Laurent Bercot
2020-01-27 Prepare for 2.3.1.2Laurent Bercot
2019-10-21 Fix gen-deps.sh for cross-buildsLaurent Bercot
2019-10-21 Prepare for 2.3.1.1Laurent Bercot
2019-09-21 Remove tainnow.lib dependencyLaurent Bercot
2019-08-09 Prepare for 2.3.1.0Laurent Bercot
2019-01-10 Prepare for 2.3.0.4Laurent Bercot
2018-08-20Support conditional slashpackage buildsLaurent Bercot
2018-08-01 Add nsss supportLaurent Bercot
2018-07-21 Adapt to skalibs-2.7.0.0, prepare for 2.3.0.3Laurent Bercot
2017-10-30 Make all-pic a user optionLaurent Bercot
2017-08-22 Optimize to xpathexec ; prepare for 2.3.0.2Laurent Bercot
2017-05-21 Prepare for version 2.3.0.1Laurent Bercot
2017-03-22 Fix case where s6-tls[cd] would sometimes not detect an application and ↵Laurent Bercot
remain there forever with its zombie, both condemned to err in limbo for all eternity, the living and the dead, hand in hand
2017-01-10 Update deps.makLaurent Bercot
2017-01-10 Types fix, first passLaurent Bercot
XXX marks what must change when skalibs changes. Also started writing functions for client certificate support in sbearssl, but it's not working yet (need more high-level support from BearSSL before it can work)
2016-12-04 Remove s6-tls* dependency to libs6net. Improve gen-deps to make dynlinking ↵Laurent Bercot
easier.
2016-11-30 sbearssl: allow DER-encoded certificates in TA directoryLaurent Bercot
2016-11-26 Add -z option to s6-tlsc/s6-tlsd to clean TLS env vars before spawning ↵Laurent Bercot
(default)
2016-11-25 Add EC certificate issuer key type detection for sbearsslLaurent Bercot
2016-11-25 Fix build bugs. It builds!Laurent Bercot
Two things remain to do: - how to pass SNI information to libtls - how to detect cert issuer key type for ECC in bearssl
2016-11-25 Alpha version of the SSL work.Laurent Bercot
Doesn't build yet, but I'm scared of losing it, so using git as storage. Will fix the stupid bugs now, the tricky bugs later.
2016-10-24 Revert wrong shared lib fixLaurent Bercot
2016-10-24Fix stupid shared lib dependenciesLaurent Bercot
2016-08-12 Add spawn_lib supportLaurent Bercot
2016-04-14 version: 2.1.1.0v2.1.1.0Laurent Bercot
2015-10-26 Separate sections for smaller static binaries (thanks Denys Vlasenko)Laurent Bercot
2015-10-15 - update depsv2.1.0.4Laurent Bercot
- version: 2.1.0.4
2015-10-12 Push back GNU make dependency to 3.81Laurent Bercot
2015-10-05 Remove fucking -Bsymbolicv2.1.0.3Laurent Bercot
version: 2.1.0.3
2015-08-12Link shared libs against their -l deps, better libpath managementv2.1.0.2Laurent Bercot
2015-08-12xyzzy fix (fixes https://bugs.gentoo.org/show_bug.cgi?id=541092)Laurent Bercot
2015-03-30 - Bugfix: s6-tcpclient and s6-tcpserver-access didn't s6dns_init()Laurent Bercot
- Version: rc for 2.1.0.1
2015-01-27 Doc update and version number fix.v2.1.0.0Laurent Bercot
Version: 2.1.0.0
2015-01-15 Move Unix domain socket and access control stuff to s6.Laurent Bercot
Move seekablepipe to s6-portable-utils. Version: 2.0.1.0, release candidate
2015-01-14 - Parallel build fixv2.0.1.0Laurent Bercot
- Version updated to 2.0.1.0, release candidate
2015-01-07 Experimental decoupling of socketbinders and daemons in ucspi servers.Laurent Bercot
Rewrite of s6-ipcserver as a small wrapper. s6-tcpserver4 and s6-tcpserver6 will follow.
2015-01-06 - deps.mak fixv2.0.0.1Laurent Bercot
- version increase to 2.0.0.1
2014-12-18 Clean up mgetuid.c target in targets.makLaurent Bercot
2014-12-18 Fix minidentd (wrong byte order in /proc/net/tcp*) and ident-client.Laurent Bercot
Add mgetuid.c to the list of cleaned targets.
2014-12-16 And s6-ioconnect, that pulls shutdown. </3 SolarisLaurent Bercot
2014-12-16 And s6-getservbyname, because Solaris !Laurent Bercot