Age | Commit message (Collapse) | Author | |
---|---|---|---|
2023-11-20 | version: 2.7.0.0v2.7.0.0 | Laurent Bercot | |
Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2023-11-19 | Small bugfixes, update deps, update doc | Laurent Bercot | |
Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2023-11-18 | /etc/hosts support for s6-tcpclient and s6-tcpserver-access | Laurent Bercot | |
Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2023-11-12 | s6-tcpserverd: change terminology: allow -> accept, deny -> reject | Laurent Bercot | |
Also change ip:port to ip_port in logs Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2023-11-06 | s6-tcpserver-access: don't use errno in deny messages | Laurent Bercot | |
Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2023-10-16 | Fix missing null terminator | Laurent Bercot | |
Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2023-10-01 | Better iteration when sending signals in s6-tcpserverd | Laurent Bercot | |
Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2023-10-01 | Avoid stupid buffer overflows tyvm | Laurent Bercot | |
Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2023-10-01 | Refactor s6-tcpserverd logging | Laurent Bercot | |
Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2023-09-30 | Great Tcpserver Unification. Prepare for 2.6.0.0. | Laurent Bercot | |
Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2023-09-20 | Remove extra warning when s6-tcpserver-access has no ruleset | Laurent Bercot | |
Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2023-09-11 | Remove s6-tcpserver?d dependency on libs6 | Laurent Bercot | |
Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2023-09-08 | New versions of s6-tcpserver4d and s6-tcpserver6d | Laurent Bercot | |
- both now use posix_spawn when available - s6-tcpserver4d uses avltree for logarithmic lookups - s6-tcpserver6d still has the linear lookup - the point was to benchmark linear vs logarithmic, but the fork() overhead overshadowed everything - now with fork() out of the way, I'm going back to benchmarks Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2022-11-29 | Prepare for 2.5.1.2 | Laurent Bercot | |
Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2021-08-10 | Adapt to skalibs-2.11.0.0 | Laurent Bercot | |
Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2021-05-22 | bugfix: tcpserver should unignore SIGPIPE | Laurent Bercot | |
2021-05-21 | Trivial syscall number optimization | Laurent Bercot | |
2020-12-09 | Get rid of webipc.h | Laurent Bercot | |
2020-11-26 | Convert to new exec.h syntax | Laurent Bercot | |
2020-11-21 | Move all tls stuff into its own subdir | Laurent Bercot | |
2020-11-21 | Add s6-ucspitlsc | Laurent Bercot | |
2020-11-21 | Prepare for 2.4.0.0 | Laurent Bercot | |
2020-11-21 | Privs can only be dropped after reading key files. | Laurent Bercot | |
2020-11-20 | Refactor tls code to support ucspi-tls | Laurent Bercot | |
That includes: - new architecture: the tls binary is now a child of the app instead of the other way around - the sbearssl_run engine now takes a post-handshake callback. This allows s6-tlsc and s6-tlsd to only exec into the app when the handshake succeeds (which was already the case with libressl). - new binaries s6-tlsc-io and s6-tlsd-io encapsulate the crypto code; they init and run the engine, connecting to 4 already open fds (stdin/stdout = network, argv[1] and argv[2] = local) - s6-tlsc is now a simple wrapper around s6-tlsc-io - s6-tlsd is now a simple wrapper around s6-tlsd-io - new binary: s6-ucspitlsd, which is also a wrapper around s6-tlsd-io, but differently: the parent execs the app which should be ucspi-tls-aware, the child waits for a command from the parent and execs into s6-tlsd-io if it receives it. | |||
2020-05-06 | Add -e option to s6-tlsserver | Laurent Bercot | |
2019-09-21 | Remove tainnow.lib dependency | Laurent Bercot | |
2019-09-06 | Adapt to new stopwatch API | Laurent Bercot | |
2019-09-04 | Use stopwatches and wallclocks where appropriate | Laurent Bercot | |
2019-05-14 | Different code style for the maxconn spurious warning avoidance | Laurent Bercot | |
2018-10-06 | bugfix: have s6-tcpserver?d write localport to stdout on notif | Laurent Bercot | |
and not just a newline. | |||
2018-04-11 | change localip is6 flag based on destination ip | John Regan | |
By default, the localip flag is initialized with the is6 flag set to 0. The only time the flag is changed to 1 is when a user specifies a local IPv6 address to use. Because of this, socket_tcp46 always creates an IPv4 socket. This patch corrects that - if the user hasn't specified a local address, then the local 'is6' flag is updated to match the destination 'is6' flag. Signed-off-by: Laurent Bercot <ska-skaware@skarnet.org> | |||
2018-04-11 | Add -B (blocking) option to s6-tcpserver?-socketbinder | Laurent Bercot | |
2017-09-13 | bugfix: spurious error message in s6-tcpserver?d when maxed connections | Laurent Bercot | |
2017-08-22 | Optimize to xpathexec ; prepare for 2.3.0.2 | Laurent Bercot | |
2017-03-15 | Fix memcpy size in s6-tcpserver6d | Laurent Bercot | |
2017-03-14 | Cleanup superfluous includes | Laurent Bercot | |
2017-03-12 | Adapt to skalibs-2.5.0.0 | Laurent Bercot | |
2017-01-10 | Types fix, first pass | Laurent Bercot | |
XXX marks what must change when skalibs changes. Also started writing functions for client certificate support in sbearssl, but it's not working yet (need more high-level support from BearSSL before it can work) | |||
2016-12-04 | Remove s6-tls* dependency to libs6net. Improve gen-deps to make dynlinking ↵ | Laurent Bercot | |
easier. | |||
2016-12-03 | s6-tls*: small bugfixes. Add documentation. | Laurent Bercot | |
2016-12-01 | Fix several bugs in stls, make the engine work | Laurent Bercot | |
2016-11-28 | Small sbearssl bugfixes and usability messages | Laurent Bercot | |
2016-11-27 | use S6_EXTBINPREFIX for s6-applyuidgid invocation in s6-tlsserver | Laurent Bercot | |
2016-11-26 | Add -z option to s6-tlsc/s6-tlsd to clean TLS env vars before spawning ↵ | Laurent Bercot | |
(default) | |||
2016-11-26 | Usability fixes for TLS | Laurent Bercot | |
2016-11-25 | Fix build bugs. It builds! | Laurent Bercot | |
Two things remain to do: - how to pass SNI information to libtls - how to detect cert issuer key type for ECC in bearssl | |||
2016-11-25 | Alpha version of the SSL work. | Laurent Bercot | |
Doesn't build yet, but I'm scared of losing it, so using git as storage. Will fix the stupid bugs now, the tricky bugs later. | |||
2016-09-10 | Add options to s6-tcpserver4-socketbinder and s6-tcpserver6-socketbinder to ↵ | Laurent Bercot | |
create UDP sockets; also to not listen(). (Suggested by Daniel Kahn Gillmor.) | |||
2015-03-30 | - Bugfix: s6-tcpclient and s6-tcpserver-access didn't s6dns_init() | Laurent Bercot | |
- Version: rc for 2.1.0.1 | |||
2015-01-15 | Move Unix domain socket and access control stuff to s6. | Laurent Bercot | |
Move seekablepipe to s6-portable-utils. Version: 2.0.1.0, release candidate |