Age | Commit message (Collapse) | Author | |
---|---|---|---|
2023-09-20 | Remove extra warning when s6-tcpserver-access has no ruleset | Laurent Bercot | |
Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2023-09-09 | Fix s6-tlsd fd fux | Laurent Bercot | |
Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2023-09-09 | Use cspawn (skalibs-2.14) | Laurent Bercot | |
Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2023-09-08 | Fully defork s6-tlsc and s6-tlsd | Laurent Bercot | |
Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2023-09-08 | Refactor s6-tls[cd] so they're ready to port to posix_spawn | Laurent Bercot | |
Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2023-08-09 | Fix s6-tcpserver verbosity invocation | Laurent Bercot | |
Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2023-08-09 | Fix s6-tlsserver tcpaccess invocation condition | Laurent Bercot | |
Also fix s6-tlsclient storage reservation Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2023-08-08 | Prepare for 2.5.1.4; fix s6-tlsserver -Y|-y | Laurent Bercot | |
Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2022-11-29 | Prepare for 2.5.1.2 | Laurent Bercot | |
Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2022-08-30 | s6-tls[cd]: don't leak useless fd to the app | Laurent Bercot | |
Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2022-04-09 | Prepare for 2.5.1.1; adapt to skalibs-2.12.0.0 | Laurent Bercot | |
Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2021-09-24 | Log client decision on s6-ucspitls[cd] -v2 | Laurent Bercot | |
Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2021-08-10 | Adapt to skalibs-2.11.0.0 | Laurent Bercot | |
Signed-off-by: Laurent Bercot <ska@appnovation.com> | |||
2021-06-02 | Correctly clean up the environment for -z | Laurent Bercot | |
2021-05-30 | bugfix: -l option in s6-tlsserver takes an arg | Laurent Bercot | |
2021-05-28 | Server-side SNI, libtls version | Laurent Bercot | |
Implementation for bearssl coming soon. | |||
2021-05-20 | Add an x509 engine wrapping minimal. NOT FUNCTIONAL, FOR TESTING. | Laurent Bercot | |
2021-01-18 | Tiny code and doc fixes | Laurent Bercot | |
2021-01-13 | Implement handshake timeout for libtls backend | Laurent Bercot | |
2020-12-09 | Get rid of webipc.h | Laurent Bercot | |
2020-12-07 | Change -K semantics: timeout *during handshake*, not afterwards | Laurent Bercot | |
- the TLS tunnel itself should be transparent so it has no business shutting down the connection no matter how long the app takes - there's still an undetectable situation on some kernels where EOF doesn't get transmitted from the network, and the engine is in the handshake, and it can't do anything but wait forever. A timeout is useful here: dawg, your peer is never going to send any more data, you should just give up. - if the situation happens after the handshake, the *app* should have a timeout and die. The tunnel will follow suit. - libtls has a blocking tls_handshake() blackbox, we cannot give it a timeout. Too bad, use bearssl. | |||
2020-11-30 | Fix build with skalibs 2.10.0.0; document dependencies | Laurent Bercot | |
2020-11-26 | Convert to new exec.h syntax | Laurent Bercot | |
2020-11-22 | Fix a few bugs. sbearssl appears to be working. | Laurent Bercot | |
2020-11-22 | Add SSL_PROTOCOL and SSL_CIPHER support, fix some bugs | Laurent Bercot | |
2020-11-21 | Move all tls stuff into its own subdir | Laurent Bercot | |