TrustedFirmware Git Browser
Code Review
Sign In
review.trustedfirmware.org
/
mirror
/
mbed-tls.git
/
3ad3aa3bc0762ff9eb0314b337b718c0c8512a1f
/
library
/
ssl_srv.c
4f42c11
Remove arbitrary maximum length for cipher_list and content length
by Paul Bakker
· 11 years ago
d893aef
Force default value to curve parameter
by Paul Bakker
· 11 years ago
7f2a07d
Check keyUsage in SSL client and server
by Manuel Pégourié-Gonnard
· 11 years ago
f6521de
Add ALPN tests to ssl-opt.sh
by Manuel Pégourié-Gonnard
· 11 years ago
89e3579
Implement ALPN server-side
by Manuel Pégourié-Gonnard
· 11 years ago
969ccc6
Fix length checking of various ClientKeyExchange's
by Manuel Pégourié-Gonnard
· 11 years ago
b2bf5a1
Fix possible buffer overflow with PSK
by Manuel Pégourié-Gonnard
· 11 years ago
d701c9a
Fix memory leak in server with expired tickets
by Manuel Pégourié-Gonnard
· 11 years ago
145dfcb
Fix bug with NewSessionTicket and non-blocking I/O
by Manuel Pégourié-Gonnard
· 11 years ago
96ea2f2
Add tests for SNI
by Manuel Pégourié-Gonnard
· 11 years ago
8520dac
Add tests for auth_mode
by Manuel Pégourié-Gonnard
· 11 years ago
f7c5201
Add basic tests for session resumption
by Manuel Pégourié-Gonnard
· 11 years ago
6b1e207
Fix verion-major intolerance
by Manuel Pégourié-Gonnard
· 11 years ago
7dc4c44
Library files moved to use platform layer
by Paul Bakker
· 11 years ago
f6dc5e1
Remove temporary debug code
by Manuel Pégourié-Gonnard
· 11 years ago
c3f6b62c
Print curve name instead of size in debugging
by Manuel Pégourié-Gonnard
· 11 years ago
de05390
Rename ecdh_curve_list to curve_list
by Manuel Pégourié-Gonnard
· 11 years ago
5de2580
Make ssl_set_ecdh_curves() a compile-time option
by Manuel Pégourié-Gonnard
· 11 years ago
987bfb5
Added the possibility to define the allowed curves for ECDHE handshake. It also defines the preference of the curves.
by Gergely Budai
· 12 years ago
5538970
Add server support for ECDH key exchanges
by Manuel Pégourié-Gonnard
· 12 years ago
1a9f2c7
Add option to respect client ciphersuite order
by Manuel Pégourié-Gonnard
· 12 years ago
011a8db
Complete refactoring of ciphersuite choosing
by Manuel Pégourié-Gonnard
· 12 years ago
3252560
Move some functions up
by Manuel Pégourié-Gonnard
· 12 years ago
59b81d7
Refactor ciphersuite selection for version > 2
by Manuel Pégourié-Gonnard
· 12 years ago
da1ff38
Don't accept CertificateRequest with PSK suites
by Manuel Pégourié-Gonnard
· 12 years ago
dc953e8
Add missing defines/cases for RSA_PSK key exchange
by Manuel Pégourié-Gonnard
· 12 years ago
a9a028e
SSL now gracefully handles missing RNG
by Paul Bakker
· 12 years ago
31ff1d2
Safer buffer comparisons in the SSL modules
by Manuel Pégourié-Gonnard
· 12 years ago
21ef42f
Don't select a PSK ciphersuite if no key available
by Manuel Pégourié-Gonnard
· 12 years ago
45a2c8d
Prevent possible alignment warnings on casting from char * to 'aligned *'
by Paul Bakker
· 12 years ago
677377f
Server does not send out extensions not advertised by client
by Paul Bakker
· 12 years ago
f34673e
Merged RSA-PSK key-exchange and ciphersuites
by Paul Bakker
· 12 years ago
376e815
Merged ECDHE-PSK ciphersuites
by Paul Bakker
· 12 years ago
bac0e3b
Dependency fixes
by Manuel Pégourié-Gonnard
· 12 years ago
09258b9
Refactor parse_server_key_exchange a bit
by Manuel Pégourié-Gonnard
· 12 years ago
8a3c64d
Fix and simplify *-PSK ifdef's
by Manuel Pégourié-Gonnard
· 12 years ago
0fae60b
Implement RSA-PSK key exchange
by Manuel Pégourié-Gonnard
· 12 years ago
b9cfaa0
Explicit conversions and minor changes to prevent MSVC compiler warnings
by Paul Bakker
· 12 years ago
1b62c7f
Fix dependencies and related issues
by Manuel Pégourié-Gonnard
· 12 years ago
bd1ae24
Factor PSK pms computation to ssl_tls.c
by Manuel Pégourié-Gonnard
· 12 years ago
b59d699
Fix bugs in ECDHE_PSK key exchange
by Manuel Pégourié-Gonnard
· 12 years ago
3ce3bbd
Add support for ECDHE_PSK key exchange
by Manuel Pégourié-Gonnard
· 12 years ago
beccd9f
Explicit void pointer cast for buggy MS compiler
by Paul Bakker
· 12 years ago
caa3af4
Handle missing curve extension correctly in ssl_parse_client_hello()
by Paul Bakker
· 12 years ago
8372454
Rework SNI to fix memory issues
by Manuel Pégourié-Gonnard
· 12 years ago
705fcca
Adapt support for SNI to recent changes
by Manuel Pégourié-Gonnard
· 12 years ago
d09453c
Check our ECDSA cert(s) against supported curves
by Manuel Pégourié-Gonnard
· 12 years ago
f24b4a7
Interface change in ECP info functions
by Manuel Pégourié-Gonnard
· 12 years ago
3ebb2cd
Add support for multiple server certificates
by Manuel Pégourié-Gonnard
· 12 years ago
834ea85
Change internal structs for multi-cert support
by Manuel Pégourié-Gonnard
· 12 years ago
164d894
Fix: session start time wasn't set server side
by Manuel Pégourié-Gonnard
· 12 years ago
1a48383
SSL_TLS doesn't depend on PK any more
by Manuel Pégourié-Gonnard
· 12 years ago
34ced2d
Fix mis-sized buffer
by Manuel Pégourié-Gonnard
· 12 years ago
a7496f0
Fix a few more warnings in small configurations
by Manuel Pégourié-Gonnard
· 12 years ago
6db455e
PSK callback added to SSL server
by Paul Bakker
· 12 years ago
a310459
Fix a few things that broke with RSA compiled out
by Manuel Pégourié-Gonnard
· 12 years ago
51451f8
Replace EC flag with ssl_ciphersuite_uses_ec()
by Manuel Pégourié-Gonnard
· 12 years ago
15d5de1
Simplify usage of DHM blinding
by Manuel Pégourié-Gonnard
· 12 years ago
568c9cf
Add ecp_supported_curves and simplify some code
by Manuel Pégourié-Gonnard
· 12 years ago
7038039
Dissociate TLS and internal EC curve identifiers
by Manuel Pégourié-Gonnard
· 12 years ago
a97c015
Rm useless/wrong DHM lenght test
by Manuel Pégourié-Gonnard
· 12 years ago
b6b0956
Rm of memset instead of x509_crt_init()
by Paul Bakker
· 12 years ago
c559c7a
Renamed x509_cert structure to x509_crt for consistency
by Paul Bakker
· 12 years ago
ddf26b4
Renamed x509parse_* functions to new form
by Paul Bakker
· 12 years ago
7c6b2c3
Split up X509 files into smaller modules
by Paul Bakker
· 12 years ago
2292d1f
Fixed warnings in case POLARSSL_X509_PARSE_C is not defined
by Paul Bakker
· 12 years ago
c0dcf0c
Merged blinding additions for EC, RSA and DHM into development
by Paul Bakker
· 12 years ago
9f5a3c4
Fix possible memory error.
by Manuel Pégourié-Gonnard
· 12 years ago
032c34e
Don't use DH blinding for ephemeral DH
by Manuel Pégourié-Gonnard
· 12 years ago
2d62764
Change dhm_calc_secret() prototype
by Manuel Pégourié-Gonnard
· 12 years ago
e09d2f8
Change ecp_mul() prototype to allow randomization
by Manuel Pégourié-Gonnard
· 12 years ago
9659dae
Some extra code defined out
by Paul Bakker
· 12 years ago
577e006
Merged ECDSA-based key-exchange and ciphersuites into development
by Paul Bakker
· 12 years ago
9cc6f5c
Fix some hash debugging
by Manuel Pégourié-Gonnard
· 12 years ago
4bd1284
Fix ECDSA hash selection bug with TLS 1.0 and 1.1
by Manuel Pégourié-Gonnard
· 12 years ago
e511ffc
Allow compiling without RSA or DH
by Manuel Pégourié-Gonnard
· 12 years ago
f484282
Rm a few unneeded tests
by Manuel Pégourié-Gonnard
· 12 years ago
d11eb7c
Fix sig_alg extension on client.
by Manuel Pégourié-Gonnard
· 12 years ago
bfe32ef
pk_{sign,verify}() now accept hash_len = 0
by Manuel Pégourié-Gonnard
· 12 years ago
a20c58c
Use convert functions for SSL_SIG_* and SSL_HASH_*
by Manuel Pégourié-Gonnard
· 12 years ago
0d42049
Merge code for RSA and ECDSA in SSL
by Manuel Pégourié-Gonnard
· 12 years ago
070cc7f
Use the new PK RSA-alt interface
by Manuel Pégourié-Gonnard
· 12 years ago
a2d3f22
Add and use pk_encrypt(), pk_decrypt()
by Manuel Pégourié-Gonnard
· 12 years ago
8df2769
Introduce pk_sign() and use it in ssl
by Manuel Pégourié-Gonnard
· 12 years ago
583b608
Fix some return values
by Manuel Pégourié-Gonnard
· 12 years ago
abae74c
Add server support for ECDHE_ECDSA key exchange
by Manuel Pégourié-Gonnard
· 12 years ago
32ea60a
Declare ECDSA key exchange and ciphersuites
by Manuel Pégourié-Gonnard
· 12 years ago
0b03200
Add server-side support for ECDSA client auth
by Manuel Pégourié-Gonnard
· 12 years ago
0be444a
Ability to disable server_name extension (RFC 6066)
by Paul Bakker
· 12 years ago
d2f068e
Ability to enable / disable SSL v3 / TLS 1.0 / TLS 1.1 / TLS 1.2 individually
by Paul Bakker
· 12 years ago
0a20171
Fix compiler warning from gcc -Os
by Manuel Pégourié-Gonnard
· 12 years ago
c6554aa
Check length of session tickets we write
by Manuel Pégourié-Gonnard
· 12 years ago
b3d9187
PK: add nice interface functions
by Manuel Pégourié-Gonnard
· 12 years ago
5fd4917
Add missing ifdefs in ssl modules
by Paul Bakker
· 12 years ago
0b27267
Fix ifdef conditions for EC-related extensions.
by Manuel Pégourié-Gonnard
· 12 years ago
5734b2d
Actually use the point format selected for ECDH
by Manuel Pégourié-Gonnard
· 12 years ago
7b19c16
Handle suported_point_formats in ServerHello
by Manuel Pégourié-Gonnard
· 12 years ago
1f2bc62
Made support for the truncated_hmac extension configurable
by Paul Bakker
· 12 years ago
05decb2
Made support for the max_fragment_length extension configurable
by Paul Bakker
· 12 years ago
606b4ba
Session ticket expiration checked on server
by Paul Bakker
· 12 years ago
Next »