summaryrefslogtreecommitdiff
path: root/src/conn-tools
AgeCommit message (Collapse)Author
2023-11-19 Small bugfixes, update deps, update docLaurent Bercot
Signed-off-by: Laurent Bercot <ska@appnovation.com>
2023-11-18 /etc/hosts support for s6-tcpclient and s6-tcpserver-accessLaurent Bercot
Signed-off-by: Laurent Bercot <ska@appnovation.com>
2023-11-12 s6-tcpserverd: change terminology: allow -> accept, deny -> rejectLaurent Bercot
Also change ip:port to ip_port in logs Signed-off-by: Laurent Bercot <ska@appnovation.com>
2023-11-06 s6-tcpserver-access: don't use errno in deny messagesLaurent Bercot
Signed-off-by: Laurent Bercot <ska@appnovation.com>
2023-10-16 Fix missing null terminatorLaurent Bercot
Signed-off-by: Laurent Bercot <ska@appnovation.com>
2023-10-01 Better iteration when sending signals in s6-tcpserverdLaurent Bercot
Signed-off-by: Laurent Bercot <ska@appnovation.com>
2023-10-01 Avoid stupid buffer overflows tyvmLaurent Bercot
Signed-off-by: Laurent Bercot <ska@appnovation.com>
2023-10-01 Refactor s6-tcpserverd loggingLaurent Bercot
Signed-off-by: Laurent Bercot <ska@appnovation.com>
2023-09-30 Great Tcpserver Unification. Prepare for 2.6.0.0.Laurent Bercot
Signed-off-by: Laurent Bercot <ska@appnovation.com>
2023-09-20 Remove extra warning when s6-tcpserver-access has no rulesetLaurent Bercot
Signed-off-by: Laurent Bercot <ska@appnovation.com>
2023-09-11 Remove s6-tcpserver?d dependency on libs6Laurent Bercot
Signed-off-by: Laurent Bercot <ska@appnovation.com>
2023-09-08 New versions of s6-tcpserver4d and s6-tcpserver6dLaurent Bercot
- both now use posix_spawn when available - s6-tcpserver4d uses avltree for logarithmic lookups - s6-tcpserver6d still has the linear lookup - the point was to benchmark linear vs logarithmic, but the fork() overhead overshadowed everything - now with fork() out of the way, I'm going back to benchmarks Signed-off-by: Laurent Bercot <ska@appnovation.com>
2022-11-29 Prepare for 2.5.1.2Laurent Bercot
Signed-off-by: Laurent Bercot <ska@appnovation.com>
2021-08-10 Adapt to skalibs-2.11.0.0Laurent Bercot
Signed-off-by: Laurent Bercot <ska@appnovation.com>
2021-05-22 bugfix: tcpserver should unignore SIGPIPELaurent Bercot
2021-05-21 Trivial syscall number optimizationLaurent Bercot
2020-12-09 Get rid of webipc.hLaurent Bercot
2020-11-26 Convert to new exec.h syntaxLaurent Bercot
2020-11-21 Move all tls stuff into its own subdirLaurent Bercot
2020-11-21 Add s6-ucspitlscLaurent Bercot
2020-11-21 Prepare for 2.4.0.0Laurent Bercot
2020-11-21 Privs can only be dropped after reading key files.Laurent Bercot
2020-11-20 Refactor tls code to support ucspi-tlsLaurent Bercot
That includes: - new architecture: the tls binary is now a child of the app instead of the other way around - the sbearssl_run engine now takes a post-handshake callback. This allows s6-tlsc and s6-tlsd to only exec into the app when the handshake succeeds (which was already the case with libressl). - new binaries s6-tlsc-io and s6-tlsd-io encapsulate the crypto code; they init and run the engine, connecting to 4 already open fds (stdin/stdout = network, argv[1] and argv[2] = local) - s6-tlsc is now a simple wrapper around s6-tlsc-io - s6-tlsd is now a simple wrapper around s6-tlsd-io - new binary: s6-ucspitlsd, which is also a wrapper around s6-tlsd-io, but differently: the parent execs the app which should be ucspi-tls-aware, the child waits for a command from the parent and execs into s6-tlsd-io if it receives it.
2020-05-06 Add -e option to s6-tlsserverLaurent Bercot
2019-09-21 Remove tainnow.lib dependencyLaurent Bercot
2019-09-06 Adapt to new stopwatch APILaurent Bercot
2019-09-04 Use stopwatches and wallclocks where appropriateLaurent Bercot
2019-05-14 Different code style for the maxconn spurious warning avoidanceLaurent Bercot
2018-10-06 bugfix: have s6-tcpserver?d write localport to stdout on notifLaurent Bercot
and not just a newline.
2018-04-11change localip is6 flag based on destination ipJohn Regan
By default, the localip flag is initialized with the is6 flag set to 0. The only time the flag is changed to 1 is when a user specifies a local IPv6 address to use. Because of this, socket_tcp46 always creates an IPv4 socket. This patch corrects that - if the user hasn't specified a local address, then the local 'is6' flag is updated to match the destination 'is6' flag. Signed-off-by: Laurent Bercot <ska-skaware@skarnet.org>
2018-04-11 Add -B (blocking) option to s6-tcpserver?-socketbinderLaurent Bercot
2017-09-13 bugfix: spurious error message in s6-tcpserver?d when maxed connectionsLaurent Bercot
2017-08-22 Optimize to xpathexec ; prepare for 2.3.0.2Laurent Bercot
2017-03-15 Fix memcpy size in s6-tcpserver6dLaurent Bercot
2017-03-14 Cleanup superfluous includesLaurent Bercot
2017-03-12 Adapt to skalibs-2.5.0.0Laurent Bercot
2017-01-10 Types fix, first passLaurent Bercot
XXX marks what must change when skalibs changes. Also started writing functions for client certificate support in sbearssl, but it's not working yet (need more high-level support from BearSSL before it can work)
2016-12-04 Remove s6-tls* dependency to libs6net. Improve gen-deps to make dynlinking ↵Laurent Bercot
easier.
2016-12-03 s6-tls*: small bugfixes. Add documentation.Laurent Bercot
2016-12-01 Fix several bugs in stls, make the engine workLaurent Bercot
2016-11-28 Small sbearssl bugfixes and usability messagesLaurent Bercot
2016-11-27 use S6_EXTBINPREFIX for s6-applyuidgid invocation in s6-tlsserverLaurent Bercot
2016-11-26 Add -z option to s6-tlsc/s6-tlsd to clean TLS env vars before spawning ↵Laurent Bercot
(default)
2016-11-26 Usability fixes for TLSLaurent Bercot
2016-11-25 Fix build bugs. It builds!Laurent Bercot
Two things remain to do: - how to pass SNI information to libtls - how to detect cert issuer key type for ECC in bearssl
2016-11-25 Alpha version of the SSL work.Laurent Bercot
Doesn't build yet, but I'm scared of losing it, so using git as storage. Will fix the stupid bugs now, the tricky bugs later.
2016-09-10 Add options to s6-tcpserver4-socketbinder and s6-tcpserver6-socketbinder to ↵Laurent Bercot
create UDP sockets; also to not listen(). (Suggested by Daniel Kahn Gillmor.)
2015-03-30 - Bugfix: s6-tcpclient and s6-tcpserver-access didn't s6dns_init()Laurent Bercot
- Version: rc for 2.1.0.1
2015-01-15 Move Unix domain socket and access control stuff to s6.Laurent Bercot
Move seekablepipe to s6-portable-utils. Version: 2.0.1.0, release candidate
2015-01-14 - Parallel build fixv2.0.1.0Laurent Bercot
- Version updated to 2.0.1.0, release candidate