security/tlswrapper - The NetBSD Packages Collection

UCSPI/inetd-style TLS encryption wrapper

tlswrapper is an TLS encryption wrapper between remote client and local
program prog. Systemd.socket/inetd/tcpserver/... creates the server
connection, tlswrapper encrypts/decrypts data stream and reads/writes
data from/to the program prog as follows:

Internet <--> systemd.socket/inetd/tcpserver/... <--> tlswrapper <--> prog

By running separate instance of tlswrapper for each TLS connection, a
vulnerability in the code (e.g. bug in the TLS library) can't be used to
compromise the memory of another connection.

To protect against secret-information leaks to the network connection
(such Heartbleed) tlswrapper runs two independent processes for every
TLS connection. One process holds secret-keys and runs secret-keys
operations and second talks to the network. Processes communicate with
each other through UNIX pipes.

Build dependencies

pkgtools/mktools pkgtools/cwrappers

Runtime dependencies

security/bearssl

Binary packages

OSArchitectureVersion
NetBSD 10.0aarch64tlswrapper-20230101.tgz
NetBSD 10.0aarch64tlswrapper-20230101.tgz
NetBSD 10.0aarch64tlswrapper-20230101.tgz
NetBSD 10.0aarch64ebtlswrapper-20230101.tgz
NetBSD 10.0aarch64ebtlswrapper-20230101.tgz
NetBSD 10.0alphatlswrapper-20230101.tgz
NetBSD 10.0earmv4tlswrapper-20230101.tgz
NetBSD 10.0earmv6hftlswrapper-20230101.tgz
NetBSD 10.0earmv6hftlswrapper-20230101.tgz
NetBSD 10.0earmv6hftlswrapper-20230101.tgz
NetBSD 10.0earmv7hftlswrapper-20230101.tgz
NetBSD 10.0earmv7hftlswrapper-20230101.tgz
NetBSD 10.0earmv7hftlswrapper-20230101.tgz
NetBSD 10.0i386tlswrapper-20230101.tgz
NetBSD 10.0i386tlswrapper-20230101.tgz
NetBSD 10.0m68ktlswrapper-20230101.tgz
NetBSD 10.0powerpctlswrapper-20230101.tgz
NetBSD 10.0sparctlswrapper-20230101.tgz
NetBSD 10.0x86_64tlswrapper-20230101.tgz
NetBSD 10.0_BETAx86_64tlswrapper-20230101.tgz
NetBSD 8.0i386tlswrapper-20230101.tgz
NetBSD 8.0i386tlswrapper-20230101.tgz
NetBSD 8.0i386tlswrapper-20230101.tgz
NetBSD 8.0powerpctlswrapper-20230101.tgz
NetBSD 8.0powerpctlswrapper-20230101.tgz
NetBSD 8.0powerpctlswrapper-20230101.tgz
NetBSD 8.0powerpctlswrapper-20230101.tgz
NetBSD 8.0x86_64tlswrapper-20230101.tgz
NetBSD 8.0x86_64tlswrapper-20230101.tgz
NetBSD 8.0x86_64tlswrapper-20230101.tgz
NetBSD 9.0aarch64tlswrapper-20230101.tgz
NetBSD 9.0aarch64tlswrapper-20230101.tgz
NetBSD 9.0aarch64tlswrapper-20230101.tgz
NetBSD 9.0alphatlswrapper-20230101.tgz
NetBSD 9.0alphatlswrapper-20230101.tgz
NetBSD 9.0earmv6hftlswrapper-20230101.tgz
NetBSD 9.0earmv6hftlswrapper-20230101.tgz
NetBSD 9.0earmv6hftlswrapper-20230101.tgz
NetBSD 9.0earmv7hftlswrapper-20230101.tgz
NetBSD 9.0earmv7hftlswrapper-20230101.tgz
NetBSD 9.0earmv7hftlswrapper-20230101.tgz
NetBSD 9.0i386tlswrapper-20230101.tgz
NetBSD 9.0i386tlswrapper-20230101.tgz
NetBSD 9.0m68ktlswrapper-20230101.tgz
NetBSD 9.0m68ktlswrapper-20230101.tgz
NetBSD 9.0powerpctlswrapper-20230101.tgz
NetBSD 9.0powerpctlswrapper-20230101.tgz
NetBSD 9.0powerpctlswrapper-20230101.tgz
NetBSD 9.0sparc64tlswrapper-20230101.tgz
NetBSD 9.0sparctlswrapper-20230101.tgz
NetBSD 9.0sparctlswrapper-20230101.tgz
NetBSD 9.0x86_64tlswrapper-20230101.tgz
NetBSD 9.0x86_64tlswrapper-20230101.tgz
NetBSD 9.3x86_64tlswrapper-20230101.tgz
NetBSD 9.3x86_64tlswrapper-20230101.tgz

Binary packages can be installed with the high-level tool pkgin (which can be installed with pkg_add) or pkg_add(1) (installed by default). The NetBSD packages collection is also designed to permit easy installation from source.

Available build options

(none)

Known vulnerabilities

The pkg_admin audit command locates any installed package which has been mentioned in security advisories as having vulnerabilities.

Please note the vulnerabilities database might not be fully accurate, and not every bug is exploitable with every configuration.


Problem reports, updates or suggestions for this package should be reported with send-pr.