certifix

commit 93d2978be7a88ed1762c8b38e0b0957ae4ca939b
parent efce179f9b0a3309ec22d17629b019eede15af49
Author: Daniel Barlow <dan@telent.net>
Date:   Tue, 21 Oct 2025 10:18:41 +0100

send close_notify

Diffstat:
M
README.md
 | 
3
---
M
main.fnl
 | 
3
++-

2 files changed, 2 insertions(+), 4 deletions(-)
diff --git a/README.md b/README.md
@@ -111,9 +111,6 @@ curl --cacert certs/ca.crt   -v -H 'content-type: application/x-pem-file' --data
 * I haven't checked that the protocols or the ciphers are restricted
   to modern and sensible defaults
 
-* doesn't call SSL shutdown at the end of the response, so you may get
-  "unexpected EOF" errors
-
 * it has _not_ been reviewed by anyone who knows about TLS best
   practices. If you are that person, please look at the new-crt
   function in [main.fnl](main.fnl) and let me know :-)
diff --git a/main.fnl b/main.fnl
@@ -129,7 +129,8 @@
       "/sign"
       (handle-sign-csr out)
       _
-      (send-error out 404 "not found"))))
+      (send-error out 404 "not found"))
+    (out:shutdown)))
 
 (fn ssl-context []
   (doto (htls.new_server_context)