TrustedFirmware Git Browser
Code Review
Sign In
review.trustedfirmware.org
/
mirror
/
mbed-tls.git
/
210b458ddce00e43230e12342e306a09a1b51dc8
/
library
/
ssl_srv.c
f34673e
Merged RSA-PSK key-exchange and ciphersuites
by Paul Bakker
· 12 years ago
376e815
Merged ECDHE-PSK ciphersuites
by Paul Bakker
· 12 years ago
bac0e3b
Dependency fixes
by Manuel Pégourié-Gonnard
· 12 years ago
09258b9
Refactor parse_server_key_exchange a bit
by Manuel Pégourié-Gonnard
· 12 years ago
8a3c64d
Fix and simplify *-PSK ifdef's
by Manuel Pégourié-Gonnard
· 12 years ago
0fae60b
Implement RSA-PSK key exchange
by Manuel Pégourié-Gonnard
· 12 years ago
b9cfaa0
Explicit conversions and minor changes to prevent MSVC compiler warnings
by Paul Bakker
· 12 years ago
1b62c7f
Fix dependencies and related issues
by Manuel Pégourié-Gonnard
· 12 years ago
bd1ae24
Factor PSK pms computation to ssl_tls.c
by Manuel Pégourié-Gonnard
· 12 years ago
b59d699
Fix bugs in ECDHE_PSK key exchange
by Manuel Pégourié-Gonnard
· 12 years ago
3ce3bbd
Add support for ECDHE_PSK key exchange
by Manuel Pégourié-Gonnard
· 12 years ago
beccd9f
Explicit void pointer cast for buggy MS compiler
by Paul Bakker
· 12 years ago
caa3af4
Handle missing curve extension correctly in ssl_parse_client_hello()
by Paul Bakker
· 12 years ago
8372454
Rework SNI to fix memory issues
by Manuel Pégourié-Gonnard
· 12 years ago
705fcca
Adapt support for SNI to recent changes
by Manuel Pégourié-Gonnard
· 12 years ago
d09453c
Check our ECDSA cert(s) against supported curves
by Manuel Pégourié-Gonnard
· 12 years ago
f24b4a7
Interface change in ECP info functions
by Manuel Pégourié-Gonnard
· 12 years ago
3ebb2cd
Add support for multiple server certificates
by Manuel Pégourié-Gonnard
· 12 years ago
834ea85
Change internal structs for multi-cert support
by Manuel Pégourié-Gonnard
· 12 years ago
164d894
Fix: session start time wasn't set server side
by Manuel Pégourié-Gonnard
· 12 years ago
1a48383
SSL_TLS doesn't depend on PK any more
by Manuel Pégourié-Gonnard
· 12 years ago
34ced2d
Fix mis-sized buffer
by Manuel Pégourié-Gonnard
· 12 years ago
a7496f0
Fix a few more warnings in small configurations
by Manuel Pégourié-Gonnard
· 12 years ago
6db455e
PSK callback added to SSL server
by Paul Bakker
· 12 years ago
a310459
Fix a few things that broke with RSA compiled out
by Manuel Pégourié-Gonnard
· 12 years ago
51451f8
Replace EC flag with ssl_ciphersuite_uses_ec()
by Manuel Pégourié-Gonnard
· 12 years ago
15d5de1
Simplify usage of DHM blinding
by Manuel Pégourié-Gonnard
· 12 years ago
568c9cf
Add ecp_supported_curves and simplify some code
by Manuel Pégourié-Gonnard
· 12 years ago
7038039
Dissociate TLS and internal EC curve identifiers
by Manuel Pégourié-Gonnard
· 12 years ago
a97c015
Rm useless/wrong DHM lenght test
by Manuel Pégourié-Gonnard
· 12 years ago
b6b0956
Rm of memset instead of x509_crt_init()
by Paul Bakker
· 12 years ago
c559c7a
Renamed x509_cert structure to x509_crt for consistency
by Paul Bakker
· 12 years ago
ddf26b4
Renamed x509parse_* functions to new form
by Paul Bakker
· 12 years ago
7c6b2c3
Split up X509 files into smaller modules
by Paul Bakker
· 12 years ago
2292d1f
Fixed warnings in case POLARSSL_X509_PARSE_C is not defined
by Paul Bakker
· 12 years ago
c0dcf0c
Merged blinding additions for EC, RSA and DHM into development
by Paul Bakker
· 12 years ago
9f5a3c4
Fix possible memory error.
by Manuel Pégourié-Gonnard
· 12 years ago
032c34e
Don't use DH blinding for ephemeral DH
by Manuel Pégourié-Gonnard
· 12 years ago
2d62764
Change dhm_calc_secret() prototype
by Manuel Pégourié-Gonnard
· 12 years ago
e09d2f8
Change ecp_mul() prototype to allow randomization
by Manuel Pégourié-Gonnard
· 12 years ago
9659dae
Some extra code defined out
by Paul Bakker
· 12 years ago
577e006
Merged ECDSA-based key-exchange and ciphersuites into development
by Paul Bakker
· 12 years ago
9cc6f5c
Fix some hash debugging
by Manuel Pégourié-Gonnard
· 12 years ago
4bd1284
Fix ECDSA hash selection bug with TLS 1.0 and 1.1
by Manuel Pégourié-Gonnard
· 12 years ago
e511ffc
Allow compiling without RSA or DH
by Manuel Pégourié-Gonnard
· 12 years ago
f484282
Rm a few unneeded tests
by Manuel Pégourié-Gonnard
· 12 years ago
d11eb7c
Fix sig_alg extension on client.
by Manuel Pégourié-Gonnard
· 12 years ago
bfe32ef
pk_{sign,verify}() now accept hash_len = 0
by Manuel Pégourié-Gonnard
· 12 years ago
a20c58c
Use convert functions for SSL_SIG_* and SSL_HASH_*
by Manuel Pégourié-Gonnard
· 12 years ago
0d42049
Merge code for RSA and ECDSA in SSL
by Manuel Pégourié-Gonnard
· 12 years ago
070cc7f
Use the new PK RSA-alt interface
by Manuel Pégourié-Gonnard
· 12 years ago
a2d3f22
Add and use pk_encrypt(), pk_decrypt()
by Manuel Pégourié-Gonnard
· 12 years ago
8df2769
Introduce pk_sign() and use it in ssl
by Manuel Pégourié-Gonnard
· 12 years ago
583b608
Fix some return values
by Manuel Pégourié-Gonnard
· 12 years ago
abae74c
Add server support for ECDHE_ECDSA key exchange
by Manuel Pégourié-Gonnard
· 12 years ago
32ea60a
Declare ECDSA key exchange and ciphersuites
by Manuel Pégourié-Gonnard
· 12 years ago
0b03200
Add server-side support for ECDSA client auth
by Manuel Pégourié-Gonnard
· 12 years ago
0be444a
Ability to disable server_name extension (RFC 6066)
by Paul Bakker
· 12 years ago
d2f068e
Ability to enable / disable SSL v3 / TLS 1.0 / TLS 1.1 / TLS 1.2 individually
by Paul Bakker
· 12 years ago
0a20171
Fix compiler warning from gcc -Os
by Manuel Pégourié-Gonnard
· 12 years ago
c6554aa
Check length of session tickets we write
by Manuel Pégourié-Gonnard
· 12 years ago
b3d9187
PK: add nice interface functions
by Manuel Pégourié-Gonnard
· 12 years ago
5fd4917
Add missing ifdefs in ssl modules
by Paul Bakker
· 12 years ago
0b27267
Fix ifdef conditions for EC-related extensions.
by Manuel Pégourié-Gonnard
· 12 years ago
5734b2d
Actually use the point format selected for ECDH
by Manuel Pégourié-Gonnard
· 12 years ago
7b19c16
Handle suported_point_formats in ServerHello
by Manuel Pégourié-Gonnard
· 12 years ago
1f2bc62
Made support for the truncated_hmac extension configurable
by Paul Bakker
· 12 years ago
05decb2
Made support for the max_fragment_length extension configurable
by Paul Bakker
· 12 years ago
606b4ba
Session ticket expiration checked on server
by Paul Bakker
· 12 years ago
f0e39ac
Fixed unitialized n when resuming a session
by Paul Bakker
· 12 years ago
a503a63
Made session tickets support configurable from config.h
by Paul Bakker
· 12 years ago
56dc9e8
Authenticate session tickets.
by Manuel Pégourié-Gonnard
· 12 years ago
990c51a
Encrypt session tickets
by Manuel Pégourié-Gonnard
· 12 years ago
779e429
Start adding ticket keys (only key_name for now)
by Manuel Pégourié-Gonnard
· 12 years ago
aa0d4d1
Add ssl_set_session_tickets()
by Manuel Pégourié-Gonnard
· 12 years ago
306827e
Prepare ticket structure for securing
by Manuel Pégourié-Gonnard
· 12 years ago
593058e
Don't renew ticket when the current one is OK
by Manuel Pégourié-Gonnard
· 12 years ago
c086cce
Don't cache empty session ID nor resumed session
by Manuel Pégourié-Gonnard
· 12 years ago
7cd5924
Rework NewSessionTicket handling in state machine
by Manuel Pégourié-Gonnard
· 12 years ago
3ffa3db
Fix server session ID handling with ticket
by Manuel Pégourié-Gonnard
· 12 years ago
72882b2
Relax limit on ClientHello size
by Manuel Pégourié-Gonnard
· 12 years ago
609bc81
ssl_srv: read & write ticket, unsecure for now
by Manuel Pégourié-Gonnard
· 12 years ago
94f6a79
Auxiliary functions to (de)serialize ssl_session
by Manuel Pégourié-Gonnard
· 12 years ago
7a358b8
ssl_srv: write & parse session ticket ext & msg
by Manuel Pégourié-Gonnard
· 12 years ago
57c2852
Added truncated hmac negociation (without effect)
by Manuel Pégourié-Gonnard
· 12 years ago
e048b67
Misc minor fixes
by Manuel Pégourié-Gonnard
· 12 years ago
ed4af8b
Move negotiated max fragment length to session
by Manuel Pégourié-Gonnard
· 12 years ago
7bb7899
Send max_fragment_length extension (server)
by Manuel Pégourié-Gonnard
· 12 years ago
f11a6d7
Rework server extensions writing
by Manuel Pégourié-Gonnard
· 12 years ago
48f8d0d
Read max_fragment_length extension (server)
by Manuel Pégourié-Gonnard
· 12 years ago
ff56da3
Fix direct uses of x509_cert.rsa, now use pk_rsa()
by Manuel Pégourié-Gonnard
· 12 years ago
61d113b
Init and free new contexts in the right place for SSL to prevent memory leaks
by Paul Bakker
· 12 years ago
fa9b100
Also compiles / runs without time-based functions in OS
by Paul Bakker
· 12 years ago
9e36f04
SHA2 renamed to SHA256, SHA4 renamed to SHA512 and functions accordingly
by Paul Bakker
· 12 years ago
5dc6b5f
Made supported curves configurable
by Paul Bakker
· 12 years ago
2fbefde
Client and server now filter sent and accepted ciphersuites on minimum
by Paul Bakker
· 12 years ago
59c28a2
SSL v2 handshake should also handle dynamic ciphersuites
by Paul Bakker
· 12 years ago
b6c5d2e
Cleanup up non-prototyped functions (static) and const-correctness
by Paul Bakker
· 12 years ago
2013950
Secure renegotiation extension should only be sent in case client supports secure renegotiation
by Paul Bakker
· 12 years ago
48f7a5d
DHE-PSK based ciphersuite support added and cleaner key exchange based
by Paul Bakker
· 12 years ago
Next »