From 334d807b924427434b42d4fbae745d3d1b38a218 Mon Sep 17 00:00:00 2001 From: Laurent Bercot Date: Tue, 10 Jan 2017 02:17:16 +0000 Subject: Types fix, first pass XXX marks what must change when skalibs changes. Also started writing functions for client certificate support in sbearssl, but it's not working yet (need more high-level support from BearSSL before it can work) --- doc/index.html | 12 ++++++------ doc/s6-tlsc.html | 8 ++------ doc/s6-tlsd.html | 14 ++++---------- doc/upgrade.html | 12 ++++++++++++ 4 files changed, 24 insertions(+), 22 deletions(-) (limited to 'doc') diff --git a/doc/index.html b/doc/index.html index e19457e..48fed00 100644 --- a/doc/index.html +++ b/doc/index.html @@ -44,22 +44,22 @@ compiled with IPv6 support, s6-networking is IPv6-ready.
  • A POSIX-compliant system with a standard C development environment
  • GNU make, version 3.81 or later
  • skalibs version -2.4.0.2 or later. It's a build-time requirement. It's also a run-time +2.5.0.0 or later. It's a build-time requirement. It's also a run-time requirement if you link against the shared version of the skalibs library.
  • execline version -2.2.0.0 or later. It's a build-time and run-time requirement.
    • +2.3.0.0 or later. It's a build-time and run-time requirement.
  • s6 version -2.4.0.0 or later. It's a build-time and run-time requirement.
    • +2.5.0.0 or later. It's a build-time and run-time requirement.
  • s6-dns version -2.1.0.0 or later. It's a build-time requirement. It's also a run-time +2.2.0.0 or later. It's a build-time requirement. It's also a run-time requirement if you link against the shared version of the s6-dns libraries.
  • If you want to build the secure communication tools: The chosen library is a build-time requirement, and also a run-time requirement if you link against its shared version.
    • @@ -76,7 +76,7 @@ run-time requirement if you link against its shared version. -

    -Please note that for now, support for client -certificates is experimental, and only works -with the LibreSSL -backend (BearSSL does not support client certificates yet). -

    -

    If s6-tlsd is run as root, it can also read two more environment variables, TLS_UID and TLS_GID, @@ -251,9 +244,10 @@ This is the default. and break the connection when prog sends EOF.

  • -s : transmit EOF by half-closing the TCP connection without using close_notify. This is the default.
    • -
  • -Y : Do not require a client certificate. This is the default.
    • -
  • -y : Require a client certificate. This is experimental and -for now unsupported by BearSSL.
    • +
  • -Y : Require an optional client certificate.
    • +
  • -y : Require a mandatory client certificate. +The default, with neither the -Y nor the -y option, +is not to require a client certificate at all.
  • -K kimeout : close the connection if kimeout milliseconds elapse without any data being received from either side. The default is 0, which means diff --git a/doc/upgrade.html b/doc/upgrade.html index dfd90f0..1cbd9b7 100644 --- a/doc/upgrade.html +++ b/doc/upgrade.html @@ -18,6 +18,18 @@

    What has changed in s6-networking

    +

    in 2.3.0.0

    + + +

    in 2.2.1.0