Paket: tlswrapper (0~20241101-1 ve diğerleri)
tlswrapper için bağlantılar
Debian Kaynakları:
- Hata Raporları
- Developer Information
- Debian Değişim Günlüğü
- Telif Hakkı Dosyası
- Debian Yama Takipçisi
tlswrapper Kaynak Paketini İndir:
- [tlswrapper_0~20241101-1.dsc]
- [tlswrapper_0~20241101.orig.tar.gz]
- [tlswrapper_0~20241101.orig.tar.gz.asc]
- [tlswrapper_0~20241101-1.debian.tar.xz]
Geliştirici:
Dış Kaynaklar:
- Ana Sayfa [github.com]
Benzer paketler:
TLS encryption wrapper
The tlswrapper is an TLS encryption wrapper between remote client and local program prog.
Internet <--> tcpserver/inetd/systemd.socket/... <--> tlswrapper <--> prog
Separate process for every connection
The tlswrapper is executed from systemd.socket/inetd/tcpserver/... which runs separate instance of tlswrapper for each TLS connection. It ensures that a vulnerability in the code (e.g. bug in the TLS library) can't be used to compromise the memory of another connection.
Separate process for network connection and for secret-key operation
To protect against secret-information leaks to the network connection (such Heartbleed) tlswrapper runs two independent processes for every TLS connection. One process holds secret-keys and runs secret-keys operations and second talks to the network. Processes communicate with each other through unix pipes.
Privilege separation, filesystem isolation, limits
The tlswrapper processes run under dedicated non-zero uid to prohibit kill, ptrace, etc. Is chrooted into an empty, unwritable directory to prohibit filesystem access. Sets ulimits to prohibit new files, sockets, etc. Sets ulimits to prohibit forks.
TLS library
The tlswrapper is using BearSSL library which implements only secure versions of TLS protocol (TLS1.0 - TLS1.2). And implements safe and constant-time algorithms.
tlswrapper ile İlgili Diğer Paketler
|
|
|
|
-
- dep: lib25519-1 (>= 0~20230630)
- microlibrary X25519/Ed25519 - shared library
-
- dep: libbearssl0 (>= 0.6) [amd64]
- BearSSL - shared libraries
- dep: libbearssl0 (>= 0.6+dfsg.1) [amd64 değil]
-
- dep: libc6 (>= 2.34) [alpha, ia64, sh4 değil]
- GNU C Library: Shared libraries
ayrıca şunun tarafından sağlanan bir sanal paket libc6-udeb
- dep: libc6 (>= 2.40) [sh4]
-
- dep: libc6.1 (>= 2.34) [alpha]
- GNU C Library: Shared libraries
ayrıca şunun tarafından sağlanan bir sanal paket libc6.1-udeb
- dep: libc6.1 (>= 2.37) [ia64]
-
- dep: librandombytes1 (>= 0~20230919) [ia64 değil]
- Library generating fresh randomness - shared library
tlswrapper indir
| Mimari | Sürüm | Paket Boyutu | Kurulu Boyut | Dosyalar |
|---|---|---|---|---|
| alpha (resmi olmayan port) | 0~20241101-1 | 49,6 kB | 204,0 kB | [dosya listesi] |
| amd64 | 0~20241101-1 | 50,6 kB | 195,0 kB | [dosya listesi] |
| arm64 | 0~20241101-1 | 47,3 kB | 202,0 kB | [dosya listesi] |
| armel | 0~20241101-1 | 50,3 kB | 191,0 kB | [dosya listesi] |
| armhf | 0~20241101-1 | 49,7 kB | 159,0 kB | [dosya listesi] |
| hppa (resmi olmayan port) | 0~20241101-1 | 57,7 kB | 217,0 kB | [dosya listesi] |
| i386 | 0~20241101-1 | 52,2 kB | 183,0 kB | [dosya listesi] |
| ia64 (resmi olmayan port) | 0~20230101-2 | 59,4 kB | 274,0 kB | [dosya listesi] |
| m68k (resmi olmayan port) | 0~20241101-1 | 48,6 kB | 183,0 kB | [dosya listesi] |
| mips64el | 0~20241101-1 | 49,7 kB | 212,0 kB | [dosya listesi] |
| ppc64 (resmi olmayan port) | 0~20241101-1 | 48,8 kB | 266,0 kB | [dosya listesi] |
| ppc64el | 0~20241101-1 | 48,4 kB | 202,0 kB | [dosya listesi] |
| riscv64 | 0~20241101-1 | 49,9 kB | 174,0 kB | [dosya listesi] |
| s390x | 0~20241101-1 | 47,5 kB | 202,0 kB | [dosya listesi] |
| sh4 (resmi olmayan port) | 0~20241101-1 | 62,1 kB | 200,0 kB | [dosya listesi] |
| sparc64 (resmi olmayan port) | 0~20241101-1 | 43,3 kB | 1.102,0 kB | [dosya listesi] |
| x32 (resmi olmayan port) | 0~20241101-1 | 51,2 kB | 188,0 kB | [dosya listesi] |