minssl
Software
www.skarnet.org

The minsslserver program

minsslserver is a UCSPI server for the minssl protocol. It sets up a network service, listens to minsslclient connections, and for every connection runs a program with descriptors 0 and 1 communicating with the client over a secure channel.

Interface

     minsslserver [ -z timeout ] [ -k privkeyfile ] [ -K pubkeyfile ] [ tcpserver options ] host port prog...

• minsslserver waits for TCP connections on host:port. The client connections must be initiated with minsslclient.
• For every connection, it spawns a prog... child, with descriptor 0 reading from the client and descriptor 1 writing to the client. The channel between the client and the server is secure.

Options

• -z timeout : if there is no activity for timeout seconds, close the connection. By default, timeout is zero, which means infinite (no timeout).
• -k privkeyfile : privkeyfile contains the server host private key. By default, the key filename is used.
• -K pubkeyfile : pubkeyfile contains the server host public key. By default, the host public key is recomputed from the host private key for each connection.

minsslserver also accepts every option suitable for tcpserver. It will pass verbatim those options to the tcpserver program. Exception: the -B banner option is treated by minsslserver itself.
The tcpserver options modifying TCPx environment variables will have the same effect with minsslserver, except that the variables will be named MINSSLx.

Additional UCSPI variables

minsslserver sets the following additional environment variables to strings of 56 hexadecimal signs:

• MINSSLLOCALHOSTPUBKEY
• MINSSLLOCALSESSIONPUBKEY
• MINSSLREMOTESESSIONPUBKEY

Internals

minsslserver is actually a wrapper combining tcpserver and minssld.

• minsslserver sets the MINSSL_TIMEOUT environment variable to timeout, or to 0 if the -z option is not used.
• minsslserver sets the MINSSL_PRIVKEYFILE environment variable to privkeyfile, or to key if the -k option is not used.
• minsslserver sets the MINSSL_PUBKEYFILE environment variable to pubkeyfile, or unsets that variable if the -K option is not used.
• If the -B banner option is used, minsslserver replaces prog... with minssl-bannerprint banner prog....
• minsslserver executes the following command line:

    tcpserver [ tcpserver options ] -- host port /package/net/minssl/command/minssld /package/net/minssl/command/minssl-env prog...