coil-tls
Userland TLS for coil. rustls lives in a Rust cdylib (libtls.so / .dylib / .dll) loaded with dload("tls"), not in the interpreter.
Package name is tls, so use tls::{client, server} and use tls::alpn_protocol keep working after the virtual io::net::tls module is removed.
Layout#
| Path | Role |
|---|---|
src/tls/client.hy | enable(Stream, host, ClientOpts) via dload + Stream.attach |
src/tls/server.hy | enable(Stream, ServerOpts) / disable(Stream) |
src/tls.hy | alpn_protocol(Stream) |
src/tls/abi.hy | C ABI Session helpers (coil_tls_*); not the HTTP-facing API |
native/ | rustls 0.23 cdylib, leftover-shaped coil_tls_* plus attach hooks |
docs/ | API and consume notes |
Handshake stays non-blocking. One rustls step per call, then Stream.park on WouldBlock. Do not handshake on a blocking thread.
Needs coil-lang #204 (Stream.attach / Stream.park; leftover TLS deleted).
Build#
cargo test --manifest-path native/Cargo.toml
cargo build --release --manifest-path native/Cargo.toml
# copy native/target/release/libtls.so (or .dylib / tls.dll) to native/
# so --ffi-search-path ./native resolves dload("tls")Consume with spool add tls --git https://github.com/ardax-corp/coil-tls.git --rev <commit SHA> (no tags yet), or a sibling checkout plus --root, --ffi-search-path, --allow-dload tls, --dload-trusted tls (or --dload-pin) and --allow-attach. spool does not build libtls. See docs/consume.md.
License#
MIT — see LICENSE.