TrustedFirmware Git Browser
Code Review
Sign In
review.trustedfirmware.org
/
mirror
/
mbed-tls.git
/
4087c47043cb7b8b51e69f1de47ab6a2bccead3d
/
programs
/
ssl
e0225e4
Fixed const correctness issues in programs and tests
by Paul Bakker
· 12 years ago
91ebfb5
Made auth_mode as an command line option
by Paul Bakker
· 13 years ago
1f9d02d
Added more notes / comments on own_cert, trust_ca purposes
by Paul Bakker
· 13 years ago
75242c3
Added checking of CA peer cert to ssl_client1 as sane default
by Paul Bakker
· 13 years ago
645ce3a
- Moved ciphersuite naming scheme to IANA reserved names
by Paul Bakker
· 13 years ago
b0550d9
- Added ssl_get_peer_cert() to SSL API
by Paul Bakker
· 13 years ago
1d29fb5
- Added option to add minimum accepted SSL/TLS protocol version
by Paul Bakker
· 13 years ago
5d19f86
- Added comment
by Paul Bakker
· 13 years ago
cbbd999
- SSL/TLS now has default group
by Paul Bakker
· 13 years ago
915275b
- Revamped x509_verify() and the SSL f_vrfy callback implementations
by Paul Bakker
· 13 years ago
819370c
- Removed lowercasing of parameters
by Paul Bakker
· 13 years ago
d432410
- Removed clutter from my_dhm values
by Paul Bakker
· 13 years ago
0a59707
- Added simple SSL session cache implementation
by Paul Bakker
· 13 years ago
29b6476
- Added predefined DHM groups from RFC 5114
by Paul Bakker
· 13 years ago
b60b95f
- Added first version of ssl_server2 example application
by Paul Bakker
· 13 years ago
d0f6fa7
- Sending of handshake_failures during renegotiation added
by Paul Bakker
· 13 years ago
48916f9
- Added Secure Renegotiation (RFC 5746)
by Paul Bakker
· 13 years ago
835b29e
- Should not be debug_level 5 in repo (reset to 0)
by Paul Bakker
· 13 years ago
92eeea4
- Modified CMakeLists to support zlib
by Paul Bakker
· 13 years ago
2770fbd
- Added DEFLATE compression support as per RFC3749 (requires zlib)
by Paul Bakker
· 13 years ago
8d91458
- Added X509 CA Path support
by Paul Bakker
· 13 years ago
4248823
- Updated to handle x509parse_crtfile() positive return values
by Paul Bakker
· 13 years ago
4d2c124
- Changed certificate verify behaviour to comply with RFC 6125 section 6.3 to not match CN if subjectAltName extension is present.
by Paul Bakker
· 13 years ago
ca4ab49
- Added GCM ciphersuites to TLS implementation
by Paul Bakker
· 13 years ago
0b22e3e
- Print return codes properly
by Paul Bakker
· 13 years ago
6f3578c
- Report proper error number
by Paul Bakker
· 13 years ago
10cd225
- Added support for the SHA256 ciphersuites of AES and Camellia
by Paul Bakker
· 13 years ago
570267f
- print error string in useful format
by Paul Bakker
· 13 years ago
92101f2
- Keep requests for future use
by Paul Bakker
· 13 years ago
57b1298
- Multi-domain certificates support wildcards as well
by Paul Bakker
· 13 years ago
a8cd239
- Added support for wildcard certificates
by Paul Bakker
· 13 years ago
fab5c82
- Added support for NULL cipher (POLARSSL_CIPHER_NULL_CIPHER) and weak ciphersuites (POLARSSL_ENABLE_WEAK_CIPHERSUITES). They are disabled by default!
by Paul Bakker
· 13 years ago
13eb9f0
- Added error exit code
by Paul Bakker
· 13 years ago
b1dee1c
- Changed commands to lowercase where it was not the case
by Paul Bakker
· 14 years ago
69e095c
- Changed the behaviour of x509parse_parse_crt for permissive parsing. Now returns the number of 'failed certificates' instead of having a switch to enable it.
by Paul Bakker
· 14 years ago
508ad5a
- Moved all examples programs to use the new entropy and CTR_DRBG
by Paul Bakker
· 14 years ago
4dc6457
- Added public key of server1.key
by Paul Bakker
· 14 years ago
6c0ceb3
- Added permissive certificate parsing to x509parse_crt() and x509parse_crtfile(). With permissive parsing the parsing does not stop on encountering a parse-error
by Paul Bakker
· 14 years ago
a3d195c
- Changed the used random function pointer to more flexible format. Renamed havege_rand() to havege_random() to prevent mistakes. Lots of changes as a consequence in library code and programs
by Paul Bakker
· 14 years ago
cce9d77
- Lots of minimal changes to better support WINCE as a build target
by Paul Bakker
· 14 years ago
61da752
- Changed read from server loop to read more than a single read.
by Paul Bakker
· 14 years ago
436e4c5
- Removed redundant "ok" printing
by Paul Bakker
· 14 years ago
b892b13
- Prevented compiler warning
by Paul Bakker
· 14 years ago
5a83522
- Added Windows dependent header code
by Paul Bakker
· 14 years ago
7eb013f
- Added ssl_session_reset() to allow re-use of already set non-connection specific context information
by Paul Bakker
· 14 years ago
b81b3ab
- Added safeguard not to build in WIN32 environment.
by Paul Bakker
· 14 years ago
5690efc
- Fixed a whole bunch of dependencies on defines between files, examples and tests
by Paul Bakker
· 14 years ago
e22d703
- Fixed warnings with cast
by Paul Bakker
· 14 years ago
1496d38
- Added the ssl_mail_client example application
by Paul Bakker
· 14 years ago
cb79ae0b
- Fixed description in header
by Paul Bakker
· 14 years ago
896ac22
- Added ssl_fork_server example program
by Paul Bakker
· 14 years ago
f357131
- Gather data until server gives EOF
by Paul Bakker
· 14 years ago
831a755
- Changed behaviour of net_recv(), ssl_fetch_input() and ssl_read(). net_recv() now returns 0 on EOF instead of POLARSSL_ERR_NET_CONN_RESET. ssl_fetch_input() returns POLARSSL_ERR_SSL_CONN_EOF on an EOF from its f_recv() function. ssl_read() returns 0 if a POLARSSL_ERR_SSL_CONN_EOF is received after the handshake.
by Paul Bakker
· 14 years ago
91b4159
- Added missing rsa_init() statement
by Paul Bakker
· 14 years ago
23986e5
- Major type rewrite of int to size_t for most variables and arguments used for buffer lengths and loops
by Paul Bakker
· 14 years ago
5193688
- Added force_ciphersuite option to ssl_client2 application
by Paul Bakker
· 14 years ago
400ff6f
- Corrected parsing of UTCTime dates before 1990 and after 1950
by Paul Bakker
· 14 years ago
1a207ec
- Set sane start values for structures that are closed or freed.
by Paul Bakker
· 14 years ago
e3166ce
- Renamed ciphers member of ssl_context and cipher member of ssl_session to ciphersuites and ciphersuite respectively. This clarifies the difference with the generic cipher layer and is better naming altogether
by Paul Bakker
· 15 years ago
b06819b
- Adapted CMake files for the PKCS#11 support
by Paul Bakker
· 15 years ago
547f73d
- Added install targets to the CMake files
by Paul Bakker
· 15 years ago
eaca51d
- Minor text/debug fixes for release
by Paul Bakker
· 15 years ago
b96f154
- Fixed copyright message
by Paul Bakker
· 15 years ago
84f12b7
- Updated Copyright to correct entity
by Paul Bakker
· 15 years ago
6796839
by Paul Bakker
· 15 years ago
77a4358
- Added support for the SSL_EDH_RSA_AES_128_SHA and SSL_EDH_RSA_CAMELLIA_128_SHA ciphersuites
by Paul Bakker
· 15 years ago
fc8c436
- Updated copyright line to 2010
by Paul Bakker
· 15 years ago
1f3c39c
- Removed copyright line for Christophe Devine for clarity
by Paul Bakker
· 15 years ago
43f7ff6
- Removed debug print
by Paul Bakker
· 15 years ago
f80d453
- Small fix to initialize value
by Paul Bakker
· 15 years ago
ff60ee6
- Added const-correctness to main codebase
by Paul Bakker
· 15 years ago
9caf2d2
- Added option parsing for ssl_client2 to select host and port
by Paul Bakker
· 15 years ago
757e250
- Fixed port number to ssl_server's
by Paul Bakker
· 15 years ago
361e638
- Test SSL information
by Paul Bakker
· 15 years ago
77b385e
- Updated copyright messages on all relevant files
by Paul Bakker
· 16 years ago
5d4a193
- Also generate CRL's with all the digests
by Paul Bakker
· 16 years ago
9cdc87c
- Longer valid CRL
by Paul Bakker
· 16 years ago
e23166f
- Added generation of all digest certificates from a single key
by Paul Bakker
· 16 years ago
367dae4
- Added CMake makefiles as alternative to regular Makefiles.
by Paul Bakker
· 16 years ago
40ea7de
- Added CRL revocation support to x509parse_verify()
by Paul Bakker
· 16 years ago
d98030e
- Added prelimenary CRL parsing and info support
by Paul Bakker
· 16 years ago
0e6975b
- Fixed use of correct ca certificate (test_ca_cert) instead of xyssl_ca_cert
by Paul Bakker
· 16 years ago
c03d925
- Fixed server2 certificate to CN=localhost
by Paul Bakker
· 16 years ago
92f880b
- Second server should be called localhost
by Paul Bakker
· 16 years ago
4593aea
- Added support for RFC4055 SHA2 and SHA4 signature algorithms for
by Paul Bakker
· 16 years ago
b29e23c
- Enhanced generation CA script and config to further automate different actions
by Paul Bakker
· 16 years ago
785a9ee
- Added email address to header license information
by Paul Bakker
· 17 years ago
3375b21
- Fixed last mistake
by Paul Bakker
· 17 years ago
222aa4b
- New PolarSSL test CA, servers and clients
by Paul Bakker
· 17 years ago
b159ed2
- Added test-ca generation script
by Paul Bakker
· 17 years ago
b5ef0ba
- Added SSL_RSA_CAMELLIA_128_SHA, SSL_RSA_CAMELLIA_256_SHA, SSL_EDH_RSA_CAMELLIA_256_SHA ciphersuites to SSL
by Paul Bakker
· 17 years ago
e0ccd0a
- Updated Copyright notices
by Paul Bakker
· 17 years ago
b749d68
- Updates to PolarSSL - Added ignores
by Paul Bakker
· 17 years ago
40e4694
- First replacement of xyssl by polarssl where needed
by Paul Bakker
· 17 years ago
5121ce5
- Renamed include directory to polarssl
by Paul Bakker
· 17 years ago