From 4fb917263ac30373cb3e5dfe3e207369eb238def Mon Sep 17 00:00:00 2001 From: Laurent Bercot Date: Sun, 22 Nov 2020 15:46:34 +0000 Subject: Add SSL_PROTOCOL and SSL_CIPHER support, fix some bugs --- doc/libsbearssl/index.html | 12 ++++++++++++ doc/libstls/index.html | 18 ++++++++++++++---- 2 files changed, 26 insertions(+), 4 deletions(-) (limited to 'doc') diff --git a/doc/libsbearssl/index.html b/doc/libsbearssl/index.html index 656c724..0c53c14 100644 --- a/doc/libsbearssl/index.html +++ b/doc/libsbearssl/index.html @@ -482,6 +482,18 @@ contain something else than numerical uid/gids, the process exits 111 with an error message.

+

int sbearssl_send_environment (br_ssl_engine_context *ctx, int fd)

+ +

+ Writes a series of null-terminated strings of the form key=value +to file descriptor fd; the series is terminated with an additional +null character. The strings represent information about the TLS connection +represented by context ctx; it is only valid to call this function +after the handshake has completed. The exact keys used will change over time, +but at least SSL_PROTOCOL=value and SSL_CIPHER=value are +transmitted. The function returns 1 if it succeeds and 0 if it fails. +

+

Running the TLS/SSL engine (internal function for both clients and servers)

void sbearssl_run (br_ssl_engine_context *ctx, int *fds, tain_t const *tto, uint32_t options, unsigned int verbosity, sbearssl_handshake_cb_t_ref cb, sbearssl_handshake_cb_context_t *cbarg)

diff --git a/doc/libstls/index.html b/doc/libstls/index.html index f81396c..0983fef 100644 --- a/doc/libstls/index.html +++ b/doc/libstls/index.html @@ -66,6 +66,18 @@ contain something else than numerical uid/gids, the process exits 111 with an error message.

+

int stls_send_environment (struct tls *ctx, int fd)

+ +

+ Writes a series of null-terminated strings of the form key=value +to file descriptor fd; the series is terminated with an additional +null character. The strings represent information about the TLS connection +represented by context ctx; it is only valid to call this function +after the handshake has completed. The exact keys used will change over time, +but at least SSL_PROTOCOL=value and SSL_CIPHER=value are +transmitted. The function returns 1 if it succeeds and 0 if it fails. +

+

Initializing the TLS engine

struct tls *stls_client_init_and_handshake (int const *fds, uint32_t preoptions, char const *servername)

@@ -95,10 +107,8 @@ exits 100 with an error message.