[new release] tls, tls-mirage, tls-eio and tls-async (0.15.4)

[hannesm]

Transport Layer Security purely in OCaml

• Project page: https://github.com/mirleft/ocaml-tls
• Documentation: https://mirleft.github.io/ocaml-tls/doc

CHANGES:

• New package tls-eio (Add tls-eio mirleft/ocaml-tls#451 @talex5)
• Tls_async: expose tls_handler (Expose async tls_handler mirleft/ocaml-tls#448 @mbacarella, reviewed by @torinnd)

[hannesm]

CI looks good to me to be merged, apart from //cc @talex5

#=== ERROR while compiling tls-eio.0.15.4 =====================================#
# context              2.1.2 | macos/x86_64 | ocaml.5.0.0 | pinned(https://github.com/mirleft/ocaml-tls/releases/download/v0.15.4/tls-0.15.4.tbz)
# path                 ~/.opam/default/.opam-switch/build/tls-eio.0.15.4
# command              ~/.opam/opam-init/hooks/sandbox.sh build dune runtest -p tls-eio -j 11
# exit-code            1
# env-file             ~/.opam/log/tls-eio-66074-df0c8c.env
# output-file          ~/.opam/log/tls-eio-66074-df0c8c.out
### output ###
# File "eio/tests/tls_eio.md", line 1, characters 0-0:
# /usr/bin/git --no-pager diff --no-index --color=always -u _build/default/eio/tests/tls_eio.md _build/default/eio/tests/.mdx/tls_eio.md.corrected
# diff --git a/_build/default/eio/tests/tls_eio.md b/_build/default/eio/tests/.mdx/tls_eio.md.corrected
# index dace2d7..0e7fbb9 100644
# --- a/_build/default/eio/tests/tls_eio.md
# +++ b/_build/default/eio/tests/.mdx/tls_eio.md.corrected
# @@ -106,11 +106,5 @@ let serve_ssl ~config server_s callback =
#         test_client ~net ("127.0.0.1", "4433")
#      )
#    ;;
# -+server -> start @ tcp:127.0.0.1:4433
# -+server -> connect
# -+handler accepted
# -+handler + GET / HTTP/1.1
# -+client <- GET
# -+client done.
# -- : unit = ()
# +Exception: Eio_luv.Luv_error(EPERM) (* operation not permitted *)
# 

but that may be another instance of ocaml/opam#4389

[talex5]

Yes, it's the mac sandbox again. Should be fine to ignore it.

Eio does come with a mock network that can be used for tests. We could switch to that for the next release, since we only care about testing TLS, not the OS's network support.

[mseri]

Thanks