certifix, branch HEAD

update luaossl patch hash after rebasing

2026-02-21T19:14:18Z

commit d195586f5ad794c75e7de6576ac439dc113ddf45 parent 93d2978be7a88ed1762c8b38e0b0957ae4ca939b Author: Daniel Barlow Date: Sat, 21 Feb 2026 19:14:18 +0000 update luaossl patch hash after rebasing

send close_notify

2025-10-21T09:18:41Z

commit 93d2978be7a88ed1762c8b38e0b0957ae4ca939b parent efce179f9b0a3309ec22d17629b019eede15af49 Author: Daniel Barlow Date: Tue, 21 Oct 2025 10:18:41 +0100 send close_notify

add extendedKeyUsage=clientAuth only if not set in CSR

2025-10-21T09:01:35Z

commit efce179f9b0a3309ec22d17629b019eede15af49 parent e0e0e0f7cc64d24a9c2e21754172df64490c3d10 Author: Daniel Barlow Date: Tue, 21 Oct 2025 10:01:35 +0100 add extendedKeyUsage=clientAuth only if not set in CSR this is so that a client can request serverAuth

expand the insecurities section

2024-10-04T22:27:41Z

commit e0e0e0f7cc64d24a9c2e21754172df64490c3d10 parent b1e869e12515c6d1b91634ebda6ee214b345f714 Author: Daniel Barlow Date: Fri, 4 Oct 2024 23:27:41 +0100 expand the insecurities section

add key usage/extended key usage extensions

2024-10-04T22:20:20Z

commit b1e869e12515c6d1b91634ebda6ee214b345f714 parent 4942285f6d0a2add7e511be6f5b8a86bc081074a Author: Daniel Barlow Date: Fri, 4 Oct 2024 23:20:20 +0100 add key usage/extended key usage extensions

x509 cert version 3

2024-10-04T22:08:19Z

commit 4942285f6d0a2add7e511be6f5b8a86bc081074a parent c4ea32ab1ee9f807a2076d912a224cdf7ef36f8b Author: Daniel Barlow Date: Fri, 4 Oct 2024 23:08:19 +0100 x509 cert version 3

--sign-file signs a single CSR from command line then exits

2024-10-04T22:07:48Z

commit c4ea32ab1ee9f807a2076d912a224cdf7ef36f8b parent f3960c6b76f5d97b4a2388fd4791b573c4faeb79 Author: Daniel Barlow Date: Fri, 4 Oct 2024 23:07:48 +0100 --sign-file signs a single CSR from command line then exits

add basicConstraints

2024-10-04T22:05:48Z

commit f3960c6b76f5d97b4a2388fd4791b573c4faeb79 parent cb84c20e734f8992d769380f12af33647d186e66 Author: Daniel Barlow Date: Fri, 4 Oct 2024 23:05:48 +0100 add basicConstraints

fix pathnames in README

2024-10-04T17:20:03Z

commit cb84c20e734f8992d769380f12af33647d186e66 parent b52bdfc813c66c86210be856ead6d996cac349ff Author: Daniel Barlow Date: Fri, 4 Oct 2024 18:20:03 +0100 fix pathnames in README

copy requested extensions to certificate

2024-10-04T17:14:48Z

commit b52bdfc813c66c86210be856ead6d996cac349ff parent c70eefbf567914fe5529d82e21d6d3a331dde3b5 Author: Daniel Barlow Date: Fri, 4 Oct 2024 18:14:48 +0100 copy requested extensions to certificate

polish the README and remove my local config from it

2024-10-02T17:04:42Z

commit c70eefbf567914fe5529d82e21d6d3a331dde3b5 parent 7fb8e1142ca6bcb9bf6be532396dac7f701965bb Author: Daniel Barlow Date: Wed, 2 Oct 2024 18:04:42 +0100 polish the README and remove my local config from it

curl with our custom ca cert

2024-10-01T23:28:12Z

commit 7fb8e1142ca6bcb9bf6be532396dac7f701965bb parent 3aa3bacae92b7beb9caf679479860a2d940e1c92 Author: Daniel Barlow Date: Wed, 2 Oct 2024 00:28:12 +0100 curl with our custom ca cert

fiddle with ca cert gen options

2024-10-01T23:26:44Z

commit 3aa3bacae92b7beb9caf679479860a2d940e1c92 parent cc3e695174480301ce78eff148dbde2ce085d132 Author: Daniel Barlow Date: Wed, 2 Oct 2024 00:26:44 +0100 fiddle with ca cert gen options this is because s6-tlsclient refused to connect with Not a CA, or path length constraint violation. (BR_ERR_X509_NOT_CA) error

upate lusossl patch

2024-10-01T23:26:21Z

commit cc3e695174480301ce78eff148dbde2ce085d132 parent 0844177d5170739f294561ab76ef261e3d0d8368 Author: Daniel Barlow Date: Wed, 2 Oct 2024 00:26:21 +0100 upate lusossl patch

more text, inclding actual reasons you shouldn't use it

2024-09-29T09:20:10Z

commit 0844177d5170739f294561ab76ef261e3d0d8368 parent a56a9ba01373fae6da23d50e1aa6ed9a284363ea Author: Daniel Barlow Date: Sun, 29 Sep 2024 10:20:10 +0100 more text, inclding actual reasons you shouldn't use it

handle CSRs with no attributes

2024-09-29T09:19:07Z

commit a56a9ba01373fae6da23d50e1aa6ed9a284363ea parent e4410323cf593f4873543e4fb85000980879583e Author: Daniel Barlow Date: Sun, 29 Sep 2024 10:19:07 +0100 handle CSRs with no attributes

add error handler

2024-09-27T18:47:31Z

commit e4410323cf593f4873543e4fb85000980879583e parent d98f78db85564e858ab7ffaa663101e00a5d668a Author: Daniel Barlow Date: Fri, 27 Sep 2024 19:47:31 +0100 add error handler

use https

2024-09-27T18:47:11Z

commit d98f78db85564e858ab7ffaa663101e00a5d668a parent 42aa1d8f0a1d30207329f17582026a8b469587d2 Author: Daniel Barlow Date: Fri, 27 Sep 2024 19:47:11 +0100 use https

improve method name, use ncall for server.listen

2024-09-26T21:14:45Z

commit 42aa1d8f0a1d30207329f17582026a8b469587d2 parent 9ef19472118411cac802253fa2284e3fb800511d Author: Daniel Barlow Date: Thu, 26 Sep 2024 22:14:45 +0100 improve method name, use ncall for server.listen

check io.open return

2024-09-26T21:11:37Z

commit 9ef19472118411cac802253fa2284e3fb800511d parent ba3795e3f2052e15a9c639c3557576677644030b Author: Daniel Barlow Date: Thu, 26 Sep 2024 22:11:37 +0100 check io.open return

bind to address provided on command line

2024-09-26T21:06:06Z

commit ba3795e3f2052e15a9c639c3557576677644030b parent 32099b75419b201bd1f7cef06fc849ad62294dbd Author: Daniel Barlow Date: Thu, 26 Sep 2024 22:06:06 +0100 bind to address provided on command line bonus: and print an error if we couldn't

parse command-line for options instead of hardcoding

2024-09-26T21:05:13Z

commit 32099b75419b201bd1f7cef06fc849ad62294dbd parent e410cef1f4adfc8cd2fcb286d3c51c01d3494aa3 Author: Daniel Barlow Date: Thu, 26 Sep 2024 22:05:13 +0100 parse command-line for options instead of hardcoding note port is still hardcoded

inline not-found function

2024-09-26T20:34:37Z

commit e410cef1f4adfc8cd2fcb286d3c51c01d3494aa3 parent afd3088cee1b3beee0745686d2a51483bb22a4ac Author: Daniel Barlow Date: Thu, 26 Sep 2024 21:34:37 +0100 inline not-found function

matchng psk in example between client and expected

2024-09-25T20:40:01Z

commit afd3088cee1b3beee0745686d2a51483bb22a4ac parent 1a3e7918b24ff4ca1ade6f580fe2f696e667118d Author: Daniel Barlow Date: Wed, 25 Sep 2024 21:40:01 +0100 matchng psk in example between client and expected

add title

2024-09-25T20:34:27Z

commit 1a3e7918b24ff4ca1ade6f580fe2f696e667118d parent 27f2718ec5dfd99a091f0b38c9f588d433dd4c4c Author: Daniel Barlow Date: Wed, 25 Sep 2024 21:34:27 +0100 add title

remove newline

2024-09-25T20:31:04Z

commit 27f2718ec5dfd99a091f0b38c9f588d433dd4c4c parent db96baa96bf6a9367cb51411ffb252c7f9c47352 Author: Daniel Barlow Date: Wed, 25 Sep 2024 21:31:04 +0100 remove newline

improve README

2024-09-25T20:30:32Z

commit db96baa96bf6a9367cb51411ffb252c7f9c47352 parent 20fdd0aac69ec5f8de4a4effb4e856fd7402846f Author: Daniel Barlow Date: Wed, 25 Sep 2024 21:30:32 +0100 improve README

add openssl in shell environment

2024-09-25T20:17:42Z

commit 20fdd0aac69ec5f8de4a4effb4e856fd7402846f parent fe98a413eee92d72ee63d16db83d01fafe6f6b00 Author: Daniel Barlow Date: Wed, 25 Sep 2024 21:17:42 +0100 add openssl in shell environment

implement policy-based signing

2024-09-25T20:14:13Z

commit fe98a413eee92d72ee63d16db83d01fafe6f6b00 parent 911faaa0ef2a09e3d3f61be64dd405f7711b92ef Author: Daniel Barlow Date: Wed, 25 Sep 2024 21:14:13 +0100 implement policy-based signing the csr will be signed iff it has a challengePassword attribute containing a value matching the contents of the "psk" file yeah, UX could use a little work

extract method send-error

2024-09-25T11:26:34Z

commit 911faaa0ef2a09e3d3f61be64dd405f7711b92ef parent ad29d9e1004d1a37175211ec435b12e93f7b4115 Author: Daniel Barlow Date: Wed, 25 Sep 2024 12:26:34 +0100 extract method send-error

extract method make-headers

2024-09-25T11:23:49Z

commit ad29d9e1004d1a37175211ec435b12e93f7b4115 parent ed53c967d76195ba6115af1580cb621a6cae379e Author: Daniel Barlow Date: Wed, 25 Sep 2024 12:23:49 +0100 extract method make-headers

improve README

2024-09-25T11:01:21Z

commit ed53c967d76195ba6115af1580cb621a6cae379e parent 8a7287d5523741a7336251e71b1ac79e23106713 Author: Daniel Barlow Date: Wed, 25 Sep 2024 12:01:21 +0100 improve README

unhardcode the certificate serial number

2024-09-25T11:00:40Z

commit 8a7287d5523741a7336251e71b1ac79e23106713 parent 6ddae21727b23faa58f9ecb1a935785f612ac946 Author: Daniel Barlow Date: Wed, 25 Sep 2024 12:00:40 +0100 unhardcode the certificate serial number

initial commit

2024-09-25T09:20:14Z

commit 6ddae21727b23faa58f9ecb1a935785f612ac946 Author: Daniel Barlow Date: Wed, 25 Sep 2024 10:20:14 +0100 initial commit