TLSS(1)

NAME
tlss - UCSPI TLS Server

SYNOPSIS
tcpserver host port tlss [-C] [-c cert_file] [-k key_file] [-p ca_path] [-f ca_file] program [args...]

DESCRIPTION
The tlss utility is a TLS server to be used in an UCSPI exec-chain. tcpserver spawns tlss after a client connects. It initializes the server-side of a TLS tunnel and handles the TLS handshake. After the TLS connection is established tlss spawns program. The spawned program is now able to handle its network communication in plain text. tlss handle all the encryption and decryption of the communication. tlss is also able to check a client side TLS certificate. The certificate verification can be controlled by to following options. The system CA certificates are used to verify the current connection certificate by default. The options are as follows:

-h  Show usage text.

-C  this option activates the client-side certificate check. The connection is terminated if the client does not provide a valid certificate. The client certificate is verified against the given CA store.

-c cert_file
    sets the servers certificate that is used to verify the server to the client.

-k key_file
    sets the servers private key.

-p ca_path
    sets a directory path containing files with CA certificates which are used to verify the clients certificate.

-f ca_file
    sets a file with CA certificates which are used to verify the clients certificate.

ENVIRONMENT

PROTO
    is set by tlss to SSL to signal program that the connection is encrypted.

EXIT STATUS

SEE ALSO
httppc(1), sockc(1), tcpserver(1), tlsc(1)

AUTHORS
-nosplit The tlss program was written by Jan Klemkow <j.klemkow@wemelug.de>.