• G
    s_client/s_server: support unix domain sockets · a9351320
    Geoff Thorpe 提交于
    The "-unix <path>" argument allows s_server and s_client to use a unix
    domain socket in the filesystem instead of IPv4 ("-connect", "-port",
    "-accept", etc). If s_server exits gracefully, such as when "-naccept"
    is used and the requested number of SSL/TLS connections have occurred,
    then the domain socket file is removed. On ctrl-C, it is likely that
    the stale socket file will be left over, such that s_server would
    normally fail to restart with the same arguments. For this reason,
    s_server also supports an "-unlink" option, which will clean up any
    stale socket file before starting.
    
    If you have any reason to want encrypted IPC within an O/S instance,
    this concept might come in handy. Otherwise it just demonstrates that
    there is nothing about SSL/TLS that limits it to TCP/IP in any way.
    
    (There might also be benchmarking and profiling use in this path, as
    unix domain sockets are much lower overhead than connecting over local
    IP addresses).
    Signed-off-by: NGeoff Thorpe <geoff@openssl.org>
    a9351320
s_apps.h 9.6 KB