28695711593
96%

Ran 04 Jul 2026 05:07AM UTC

Jobs 1

Files 25

Run time 1min

Badge

Embed ▾

Committed 04 Jul 2026 04:21AM UTC coverage: 96.789% (+0.002%) from 96.787%

Build # 28695711593

Build Type

push

github

Committed by

floatdrop

Commit Message

tls: verifying upstream client contexts + cluster tls config (re-encrypt U1)

Clusters grow an optional tls block that must pick a verification
posture explicitly: a CA bundle path plus the hostname to require
(offered as SNI, enforced via SSL_set1_host), or a spelled-out
insecure — never a silent unverified default, and mixing the two is
refused. Context.init_client now takes the posture: authority mode
loads the PEM bundle into the context's X509_STORE in memory
(store_add_pem_bundle, bounded walk) and sets SSL_VERIFY_PEER; every
channel from a verifying context pins the hostname and sends SNI.
main builds one client context per TLS cluster at startup (bad CA
file or bundle fails boot) and the FFI heap now installs when ANY hop
is TLS, sized by hop count. ProxyServer carries the per-cluster
context slots; the data path consumes them in U2.

Tests: the self-signed fixture as its own authority verifies and
carries data end to end; wrong hostname and wrong authority (the
second fixture cert) both fail the handshake; an invalid bundle
refuses at context build; config accepts both postures and rejects
absent/half/contradictory ones.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Coverage Stats

5667 of 5855 relevant lines covered (96.79%)

0.97 hits per line

Coverage Regressions

Lines	Coverage	∆	File
19	98.25	0.0%	net/proxy.zig
14	96.72	0.49%	tls/terminator.zig
4	96.46	0.5%	tls/openssl.zig
3	92.11	-7.89%	mem/futex_mutex.zig

Jobs

ID	Job ID	Ran	Files	Coverage
1	28695711593.1	04 Jul 2026 05:07AM UTC	25	96.79	GitHub Action Run

floatdrop / zoxy / 28695711593
96%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 28695711593

floatdrop / zoxy / 28695711593 96%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 28695711593

floatdrop / zoxy / 28695711593
96%

README BADGES
x