>Debian 13
>Command line: s6-tlsserver -1 -v -c 255 0.0.0.0 443 ...
>What do you generally recommend--BearSSL, LibreSSL, or OpenSSL?
Thanks. I heartily recommend BearSSL, as long as TLS 1.2 isn't broken.
I see that your S6_NETWORKING_BINPREFIX is empty, though you have
a slashpackage-like installation. That means the s6-networking binaries
will use PATH to find their internal dependencies (i.e. s6-tlsserver
will rely on PATH to find s6-tlsd, which in turn will rely on PATH to
find s6-tlsd-io). Is there a reason why you're not using
--enable-slashpackage, or at least --enable-absolute-paths with
--bindir and --libexecdir if you want finer control? Also your --prefix
looks suspicious.
That's the trail I would follow: you may not be calling the binaries
you think you are, and old binaries may be broken or incompatible or
something. To check this: "strace -f -e execve -- s6-tlsserver..."
You really should be able to install skaware as native slashpackage,
without going through foreign. I don't know the details of how spf
works,
but I'm sure it can accommodate the 3 packages in the world that support
native slashpackage 🙂
--
Laurent
Received on Thu Sep 11 2025 - 12:54:44 CEST