From e75d06de207e9afe4259d5e731cb77ae25faf003 Mon Sep 17 00:00:00 2001 From: Laurent Bercot Date: Thu, 28 Jan 2021 14:31:38 +0000 Subject: Remove SSL_TLS_SNI_SERVERNAME (instead of defined but empty) if no SNI --- doc/s6-tlsc-io.html | 8 +++----- doc/s6-tlsc.html | 5 +++-- doc/s6-tlsd-io.html | 8 +++----- doc/s6-tlsd.html | 3 ++- 4 files changed, 11 insertions(+), 13 deletions(-) (limited to 'doc') diff --git a/doc/s6-tlsc-io.html b/doc/s6-tlsc-io.html index 9999d4f..f432f1e 100644 --- a/doc/s6-tlsc-io.html +++ b/doc/s6-tlsc-io.html @@ -205,11 +205,9 @@ TLS handshake has completed, some data (terminated by two null characters) will be sent to file descriptor notif. The data contains information about the TLS parameters of the connection; its exact contents are left unspecified, but there's at least -a SSL_PROTOCOL=protocol string, -a SSL_CIPHER=cipher string, -and a SSL_TLS_SNI_SERVERNAME=servername string - all null-terminated. (servername is the empty string if -no SNI has been required.) +a SSL_PROTOCOL=protocol string and +a SSL_CIPHER=cipher string, both +null-terminated. Sending this data serves a dual purpose: telling the notif reader that the handshake has completed, and providing it with some basic information about the connection. If this option is not given, diff --git a/doc/s6-tlsc.html b/doc/s6-tlsc.html index 32070c0..6f644c4 100644 --- a/doc/s6-tlsc.html +++ b/doc/s6-tlsc.html @@ -95,8 +95,9 @@ environment variables: TLSv1, TLSv1.1, TLSv1.2...
  • SSL_CIPHER contains the name of the cipher used.
    • -
  • SSL_TLS_SNI_SERVERNAME contains the required SNI -server name, if any, or is empty otherwise.
    • +
  • SSL_TLS_SNI_SERVERNAME contains servername, +if the -k option has been given; otherwise it is removed +from the environment.
  • More similar environment variables containing information about the connection may be added in the future.
    • diff --git a/doc/s6-tlsd-io.html b/doc/s6-tlsd-io.html index 53b1282..7e38885 100644 --- a/doc/s6-tlsd-io.html +++ b/doc/s6-tlsd-io.html @@ -200,11 +200,9 @@ TLS handshake has completed, some data (terminated by two null characters) will be sent to file descriptor notif. The data contains information about the TLS parameters of the connection; its exact contents are left unspecified, but there's at least -a SSL_PROTOCOL=protocol string, -a SSL_CIPHER=cipher string, -and a SSL_TLS_SNI_SERVERNAME=servername string - all null-terminated. (servername is the empty string if -no SNI has been required.) +a SSL_PROTOCOL=protocol string and +a SSL_CIPHER=cipher string, both +null-terminated. Sending this data serves a dual purpose: telling the notif reader that the handshake has completed, and providing it with some basic information about the connection. If this option is not given, diff --git a/doc/s6-tlsd.html b/doc/s6-tlsd.html index 83b70c1..011a20f 100644 --- a/doc/s6-tlsd.html +++ b/doc/s6-tlsd.html @@ -105,7 +105,8 @@ TLSv1, TLSv1.1, TLSv1.2...
  • SSL_CIPHER contains the name of the cipher used.
  • SSL_TLS_SNI_SERVERNAME contains the required SNI -server name, if any, or is empty otherwise.
    • +server name, if any. It is removed from the environment if no SNI +has been sent by the client.
  • More similar environment variables containing information about the connection may be added in the future.
    • -- cgit v1.2.3