s6-networking - Mirror of git://git.skarnet.org/s6-networking

Age	Commit message (Collapse)	Author
2020-11-23	stls client: prefer CAFILE, warn on CADIR use, because libtls is broken	Laurent Bercot

2020-11-23	Fix more bugs; disable renegociation in bearssl client	Laurent Bercot

2020-11-22	Fix a few bugs. sbearssl appears to be working.	Laurent Bercot

2020-11-22	Add SSL_PROTOCOL and SSL_CIPHER support, fix some bugs	Laurent Bercot

2020-11-22	Add documentation, fix tiny privdrop bug	Laurent Bercot

2020-11-21	Privs can only be dropped after reading key files.	Laurent Bercot

2020-11-20	Refactor tls code to support ucspi-tls	Laurent Bercot
	That includes: - new architecture: the tls binary is now a child of the app instead of the other way around - the sbearssl_run engine now takes a post-handshake callback. This allows s6-tlsc and s6-tlsd to only exec into the app when the handshake succeeds (which was already the case with libressl). - new binaries s6-tlsc-io and s6-tlsd-io encapsulate the crypto code; they init and run the engine, connecting to 4 already open fds (stdin/stdout = network, argv[1] and argv[2] = local) - s6-tlsc is now a simple wrapper around s6-tlsc-io - s6-tlsd is now a simple wrapper around s6-tlsd-io - new binary: s6-ucspitlsd, which is also a wrapper around s6-tlsd-io, but differently: the parent execs the app which should be ucspi-tls-aware, the child waits for a command from the parent and execs into s6-tlsd-io if it receives it.
2017-08-28	Moderately big hammer: force kill on s6-tlsd when it has nothing to write ↵	Laurent Bercot
	to the network
2017-08-28	Revert big hammer. Data still needs to be flushed to the network even when ↵	Laurent Bercot
	the local app dies.
2017-06-29	Fix error messages in stls_s6tls?.c when setting key file	Laurent Bercot

2017-05-11	Explicitly make s6-tls[cd] die when the app dies	Laurent Bercot
	I have no explanation for the fact that they sometimes survive their app, and I'm fed up with it, so it's time to use the big hammer.
2017-03-22	Fix case where s6-tls[cd] would sometimes not detect an application and ↵	Laurent Bercot
	remain there forever with its zombie, both condemned to err in limbo for all eternity, the living and the dead, hand in hand
2017-03-14	Cleanup superfluous includes	Laurent Bercot

2017-03-12	Adapt to skalibs-2.5.0.0	Laurent Bercot

2017-01-10	Types fix, first pass	Laurent Bercot
	XXX marks what must change when skalibs changes. Also started writing functions for client certificate support in sbearssl, but it's not working yet (need more high-level support from BearSSL before it can work)
2016-12-04	Remove s6-tls* dependency to libs6net. Improve gen-deps to make dynlinking ↵	Laurent Bercot
	easier.
2016-12-03	s6-tls*: small bugfixes. Add documentation.	Laurent Bercot

2016-12-02	Fix closing bugs in sbearssl_run and tls_run	Laurent Bercot

2016-12-01	Fix several bugs in stls, make the engine work	Laurent Bercot

2016-11-28	Small sbearssl bugfixes and usability messages	Laurent Bercot

2016-11-26	Add -z option to s6-tlsc/s6-tlsd to clean TLS env vars before spawning ↵	Laurent Bercot
	(default)
2016-11-26	stls_run: fix "read from peer" error message	Laurent Bercot

2016-11-26	Fix warning messages in libtls engine	Laurent Bercot

2016-11-26	Usability fixes for TLS	Laurent Bercot

2016-11-25	SNI support for libtls	Laurent Bercot

2016-11-25	Fix build bugs. It builds!	Laurent Bercot
	Two things remain to do: - how to pass SNI information to libtls - how to detect cert issuer key type for ECC in bearssl
2016-11-25	Alpha version of the SSL work.	Laurent Bercot
	Doesn't build yet, but I'm scared of losing it, so using git as storage. Will fix the stupid bugs now, the tricky bugs later.