TrustedFirmware Git Browser
Code Review
Sign In
review.trustedfirmware.org
/
mirror
/
mbed-tls.git
/
75c1a6f97c9b25b71bcc95b158bc673f6db04400
/
programs
/
ssl
1f2bc62
Made support for the truncated_hmac extension configurable
by Paul Bakker
· 12 years ago
05decb2
Made support for the max_fragment_length extension configurable
by Paul Bakker
· 12 years ago
a503a63
Made session tickets support configurable from config.h
by Paul Bakker
· 12 years ago
aa0d4d1
Add ssl_set_session_tickets()
by Manuel Pégourié-Gonnard
· 12 years ago
06650f6
Fix reusing session more than once
by Manuel Pégourié-Gonnard
· 12 years ago
cf2e97e
ssl_client2: allow reconnecting twice
by Manuel Pégourié-Gonnard
· 12 years ago
aaa1eab
Add an option to reconnect in ssl_client2
by Manuel Pégourié-Gonnard
· 12 years ago
66c4810
Better handling of ciphersuite version range and forced version in ssl_client2
by Paul Bakker
· 12 years ago
6c85279
Newline fixes in help text for ssl_client2 / ssl_server2
by Paul Bakker
· 12 years ago
dbd79ca
ssl_client2 and ssl_server2 now exit with 1 on errors (shell limitations)
by Paul Bakker
· 12 years ago
8c1ede6
Changed prototype for ssl_set_truncated_hmac() to allow disabling
by Paul Bakker
· 12 years ago
e980a99
Add interface for truncated hmac
by Manuel Pégourié-Gonnard
· 12 years ago
5b55b79
Better handling of ciphersuite version range and forced version in ssl_server2
by Paul Bakker
· 12 years ago
e048b67
Misc minor fixes
by Manuel Pégourié-Gonnard
· 12 years ago
0c017a5
Add max_frag_len option in ssl_server2
by Manuel Pégourié-Gonnard
· 12 years ago
8e714d7
Modified LONG_RESPONSE and comments in ssl_server2
by Paul Bakker
· 12 years ago
bd7ce63
Adapt ssl_server2 to test sending long messages
by Manuel Pégourié-Gonnard
· 12 years ago
787b658
Implement max_frag_len write restriction
by Manuel Pégourié-Gonnard
· 12 years ago
0df6b1f
ssl_client2: add max_frag_len option
by Manuel Pégourié-Gonnard
· 12 years ago
82024bf
ssl_server2 now uses alloc_buffer if present and can be 'SERVERQUIT'
by Paul Bakker
· 12 years ago
ba4878a
Rename x509parse_key & co with _rsa suffix
by Manuel Pégourié-Gonnard
· 12 years ago
fa9b100
Also compiles / runs without time-based functions in OS
by Paul Bakker
· 12 years ago
03a8a79
Programs adapted to use polarssl_strerror() instead of error_strerror()
by Paul Bakker
· 12 years ago
c1516be
ssl_server2 and ssl_client2 adapted to support maximum protocol version
by Paul Bakker
· 12 years ago
3c5ef71
Cleanup up non-prototyped functions (static) and const-correctness in programs
by Paul Bakker
· 12 years ago
ef3f8c7
Fixed const correctness issues in programs and tests
by Paul Bakker
· 12 years ago
bcbe2d8
Prettier printing of the lists for longer ciphersuite names
by Paul Bakker
· 12 years ago
ed27a04
More granular define selections within code to allow for smaller code sizes
by Paul Bakker
· 12 years ago
fbb1780
Added pre-shared key handling for the server side of SSL / TLS
by Paul Bakker
· 12 years ago
d4a56ec
Added pre-shared key handling for the client side of SSL / TLS
by Paul Bakker
· 12 years ago
41c83d3
Added Ephemeral Elliptic Curve Diffie Hellman ciphersuites to SSL/TLS
by Paul Bakker
· 12 years ago
91ebfb5
Made auth_mode as an command line option
by Paul Bakker
· 13 years ago
1f9d02d
Added more notes / comments on own_cert, trust_ca purposes
by Paul Bakker
· 13 years ago
75242c3
Added checking of CA peer cert to ssl_client1 as sane default
by Paul Bakker
· 13 years ago
645ce3a
- Moved ciphersuite naming scheme to IANA reserved names
by Paul Bakker
· 13 years ago
b0550d9
- Added ssl_get_peer_cert() to SSL API
by Paul Bakker
· 13 years ago
1d29fb5
- Added option to add minimum accepted SSL/TLS protocol version
by Paul Bakker
· 13 years ago
5d19f86
- Added comment
by Paul Bakker
· 13 years ago
cbbd999
- SSL/TLS now has default group
by Paul Bakker
· 13 years ago
915275b
- Revamped x509_verify() and the SSL f_vrfy callback implementations
by Paul Bakker
· 13 years ago
819370c
- Removed lowercasing of parameters
by Paul Bakker
· 13 years ago
d432410
- Removed clutter from my_dhm values
by Paul Bakker
· 13 years ago
0a59707
- Added simple SSL session cache implementation
by Paul Bakker
· 13 years ago
29b6476
- Added predefined DHM groups from RFC 5114
by Paul Bakker
· 13 years ago
b60b95f
- Added first version of ssl_server2 example application
by Paul Bakker
· 13 years ago
d0f6fa7
- Sending of handshake_failures during renegotiation added
by Paul Bakker
· 13 years ago
48916f9
- Added Secure Renegotiation (RFC 5746)
by Paul Bakker
· 13 years ago
835b29e
- Should not be debug_level 5 in repo (reset to 0)
by Paul Bakker
· 13 years ago
92eeea4
- Modified CMakeLists to support zlib
by Paul Bakker
· 13 years ago
2770fbd
- Added DEFLATE compression support as per RFC3749 (requires zlib)
by Paul Bakker
· 13 years ago
8d91458
- Added X509 CA Path support
by Paul Bakker
· 13 years ago
4248823
- Updated to handle x509parse_crtfile() positive return values
by Paul Bakker
· 13 years ago
4d2c124
- Changed certificate verify behaviour to comply with RFC 6125 section 6.3 to not match CN if subjectAltName extension is present.
by Paul Bakker
· 13 years ago
ca4ab49
- Added GCM ciphersuites to TLS implementation
by Paul Bakker
· 13 years ago
0b22e3e
- Print return codes properly
by Paul Bakker
· 13 years ago
6f3578c
- Report proper error number
by Paul Bakker
· 13 years ago
10cd225
- Added support for the SHA256 ciphersuites of AES and Camellia
by Paul Bakker
· 13 years ago
570267f
- print error string in useful format
by Paul Bakker
· 13 years ago
92101f2
- Keep requests for future use
by Paul Bakker
· 13 years ago
57b1298
- Multi-domain certificates support wildcards as well
by Paul Bakker
· 13 years ago
a8cd239
- Added support for wildcard certificates
by Paul Bakker
· 13 years ago
fab5c82
- Added support for NULL cipher (POLARSSL_CIPHER_NULL_CIPHER) and weak ciphersuites (POLARSSL_ENABLE_WEAK_CIPHERSUITES). They are disabled by default!
by Paul Bakker
· 14 years ago
13eb9f0
- Added error exit code
by Paul Bakker
· 14 years ago
b1dee1c
- Changed commands to lowercase where it was not the case
by Paul Bakker
· 14 years ago
69e095c
- Changed the behaviour of x509parse_parse_crt for permissive parsing. Now returns the number of 'failed certificates' instead of having a switch to enable it.
by Paul Bakker
· 14 years ago
508ad5a
- Moved all examples programs to use the new entropy and CTR_DRBG
by Paul Bakker
· 14 years ago
4dc6457
- Added public key of server1.key
by Paul Bakker
· 14 years ago
6c0ceb3
- Added permissive certificate parsing to x509parse_crt() and x509parse_crtfile(). With permissive parsing the parsing does not stop on encountering a parse-error
by Paul Bakker
· 14 years ago
a3d195c
- Changed the used random function pointer to more flexible format. Renamed havege_rand() to havege_random() to prevent mistakes. Lots of changes as a consequence in library code and programs
by Paul Bakker
· 14 years ago
cce9d77
- Lots of minimal changes to better support WINCE as a build target
by Paul Bakker
· 14 years ago
61da752
- Changed read from server loop to read more than a single read.
by Paul Bakker
· 14 years ago
436e4c5
- Removed redundant "ok" printing
by Paul Bakker
· 14 years ago
b892b13
- Prevented compiler warning
by Paul Bakker
· 14 years ago
5a83522
- Added Windows dependent header code
by Paul Bakker
· 14 years ago
7eb013f
- Added ssl_session_reset() to allow re-use of already set non-connection specific context information
by Paul Bakker
· 14 years ago
b81b3ab
- Added safeguard not to build in WIN32 environment.
by Paul Bakker
· 14 years ago
5690efc
- Fixed a whole bunch of dependencies on defines between files, examples and tests
by Paul Bakker
· 14 years ago
e22d703
- Fixed warnings with cast
by Paul Bakker
· 14 years ago
1496d38
- Added the ssl_mail_client example application
by Paul Bakker
· 14 years ago
cb79ae0b
- Fixed description in header
by Paul Bakker
· 14 years ago
896ac22
- Added ssl_fork_server example program
by Paul Bakker
· 14 years ago
f357131
- Gather data until server gives EOF
by Paul Bakker
· 14 years ago
831a755
- Changed behaviour of net_recv(), ssl_fetch_input() and ssl_read(). net_recv() now returns 0 on EOF instead of POLARSSL_ERR_NET_CONN_RESET. ssl_fetch_input() returns POLARSSL_ERR_SSL_CONN_EOF on an EOF from its f_recv() function. ssl_read() returns 0 if a POLARSSL_ERR_SSL_CONN_EOF is received after the handshake.
by Paul Bakker
· 14 years ago
91b4159
- Added missing rsa_init() statement
by Paul Bakker
· 14 years ago
23986e5
- Major type rewrite of int to size_t for most variables and arguments used for buffer lengths and loops
by Paul Bakker
· 14 years ago
5193688
- Added force_ciphersuite option to ssl_client2 application
by Paul Bakker
· 14 years ago
400ff6f
- Corrected parsing of UTCTime dates before 1990 and after 1950
by Paul Bakker
· 14 years ago
1a207ec
- Set sane start values for structures that are closed or freed.
by Paul Bakker
· 15 years ago
e3166ce
- Renamed ciphers member of ssl_context and cipher member of ssl_session to ciphersuites and ciphersuite respectively. This clarifies the difference with the generic cipher layer and is better naming altogether
by Paul Bakker
· 15 years ago
b06819b
- Adapted CMake files for the PKCS#11 support
by Paul Bakker
· 15 years ago
547f73d
- Added install targets to the CMake files
by Paul Bakker
· 15 years ago
eaca51d
- Minor text/debug fixes for release
by Paul Bakker
· 15 years ago
b96f154
- Fixed copyright message
by Paul Bakker
· 15 years ago
84f12b7
- Updated Copyright to correct entity
by Paul Bakker
· 15 years ago
6796839
by Paul Bakker
· 15 years ago
77a4358
- Added support for the SSL_EDH_RSA_AES_128_SHA and SSL_EDH_RSA_CAMELLIA_128_SHA ciphersuites
by Paul Bakker
· 15 years ago
fc8c436
- Updated copyright line to 2010
by Paul Bakker
· 15 years ago
1f3c39c
- Removed copyright line for Christophe Devine for clarity
by Paul Bakker
· 15 years ago
43f7ff6
- Removed debug print
by Paul Bakker
· 15 years ago
f80d453
- Small fix to initialize value
by Paul Bakker
· 15 years ago
Next »