Ubuntu
tlswrapper package

tlswrapper 0~20230101-2 source package in Ubuntu

Changelog

tlswrapper (0~20230101-2) unstable; urgency=medium

  * d/p/0001-add-support-for-lib25519.patch backport lib25519 support
  * d/p/0002-man-tlswrapper.1-instruct-man-1-to-run-the-tbl-prepr.patch backport
    manpage fix
  * d/copyright: bump copyright years
  * d/gbp.conf: add [pull] track-missing = True
  * d/gbp.conf: debian-branch = main

 -- Jan Mojžíš <email address hidden>  Sat, 20 Apr 2024 08:27:02 +0200

Upload details

Uploaded by:
Jan Mojžíš
Uploaded to:
Sid
Original maintainer:
Jan Mojžíš
Architectures:
any
Section:
misc
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Oracular release universe misc

Downloads

File Size SHA-256 Checksum
tlswrapper_0~20230101-2.dsc 2.3 KiB 7a2162b03f4156dd225579364b725957e3cda84422eda7685f1cc7de2c0d0814
tlswrapper_0~20230101.orig.tar.gz 243.5 KiB fde2fa8194137ae62e4bc3c3ed0c5f59984d471501fecd9b15c707141c9d3fb1
tlswrapper_0~20230101.orig.tar.gz.asc 833 bytes bfb4142d427ef7046f042579f15cd34850eb570cf4ce12789c554f4b409df556
tlswrapper_0~20230101-2.debian.tar.xz 11.8 KiB 9e843c72dec490aeac11387692530f0867e3e654901ccc04a439ce61c14f6cc8

Available diffs

No changes file available.

Binary packages built by this source

tlswrapper: TLS encryption wrapper

 The tlswrapper is an TLS encryption wrapper between remote client and
 local program prog.
 .
 Internet <--> tcpserver/inetd/systemd.socket/... <--> tlswrapper <--> prog
 .
 Separate process for every connection
 .
 The tlswrapper is executed from systemd.socket/inetd/tcpserver/... which
 runs separate instance of tlswrapper for each TLS connection.
 It ensures that a vulnerability in the code (e.g. bug in the TLS library)
 can't be used to compromise the memory of another connection.
 .
 Separate process for network connection and for secret-key operation
 .
 To protect against secret-information leaks to the network connection
 (such Heartbleed) tlswrapper runs two independent processes for every
 TLS connection. One process holds secret-keys and runs secret-keys operations
 and second talks to the network. Processes communicate with each other through
 unix pipes.
 .
 Privilege separation, filesystem isolation, limits
 .
 The tlswrapper processes run under dedicated non-zero uid to prohibit kill,
 ptrace, etc. Is chrooted into an empty, unwritable directory to prohibit
 filesystem access. Sets ulimits to prohibit new files, sockets, etc.
 Sets ulimits to prohibit forks.
 .
 TLS library
 .
 The tlswrapper is using BearSSL library which implements only secure
 versions of TLS protocol (TLS1.0 - TLS1.2). And implements safe and
 constant-time algorithms.

tlswrapper-dbgsym: debug symbols for tlswrapper