TrustedFirmware Git Browser
Code Review
Sign In
review.trustedfirmware.org
/
mirror
/
mbed-tls.git
/
81f2fe9f084a2ae07c6034ca085d4e2e15c1fe9c
/
library
/
ssl_srv.c
1aa586e
Check handshake message_seq field
by Manuel Pégourié-Gonnard
· 11 years ago
d9ba0d9
Prepare for checking incoming handshake seqnum
by Manuel Pégourié-Gonnard
· 11 years ago
30d16eb
Fix client-initiated renegotiation with DTLS
by Manuel Pégourié-Gonnard
· 11 years ago
b35fe56
Fix HelloVerifyRequest version handling
by Manuel Pégourié-Gonnard
· 11 years ago
7d38d21
Allow disabling HelloVerifyRequest
by Manuel Pégourié-Gonnard
· 11 years ago
232edd4
Move cookie callbacks implementation to own module
by Manuel Pégourié-Gonnard
· 11 years ago
d485d19
Move to a callback interface for DTLS cookies
by Manuel Pégourié-Gonnard
· 11 years ago
d7f9bc5
Refactor cookie to prepare for external callbacks
by Manuel Pégourié-Gonnard
· 11 years ago
82202f0
Make DTLS_HELLO_VERIFY a compile option
by Manuel Pégourié-Gonnard
· 11 years ago
98545f1
Generate random key for HelloVerifyRequest
by Manuel Pégourié-Gonnard
· 11 years ago
dd3cdb0
Start using client IP in HelloVerifyRequest
by Manuel Pégourié-Gonnard
· 11 years ago
43c0218
Add ssl_set_client_transport_id()
by Manuel Pégourié-Gonnard
· 11 years ago
2c9ee81
Start adding srv support for hello verify request
by Manuel Pégourié-Gonnard
· 11 years ago
a0e1632
Do not use compression with DTLS
by Manuel Pégourié-Gonnard
· 11 years ago
5d53cbe
Fix length check in ssl_write_ticket()
by Manuel Pégourié-Gonnard
· 11 years ago
b2f3be8
Support multiple records in one datagram
by Manuel Pégourié-Gonnard
· 11 years ago
d6b721c
More ssl_parse_client_hello() adjustments
by Manuel Pégourié-Gonnard
· 11 years ago
4128aa7
Add the 'cookie' field of DTLS ClientHello
by Manuel Pégourié-Gonnard
· 11 years ago
8933a65
Rework ssl_parse_client_hello() a bit
by Manuel Pégourié-Gonnard
· 11 years ago
e89bcf0
Write new DTLS handshake fields correctly
by Manuel Pégourié-Gonnard
· 11 years ago
ce441b3
Add space for new DTLS fields in handshake
by Manuel Pégourié-Gonnard
· 11 years ago
0619348
Add explicit counter in DTLS record header
by Manuel Pégourié-Gonnard
· 11 years ago
507e1e4
Prep: allow {in,out}_len != {in,out}_hdr + 3
by Manuel Pégourié-Gonnard
· 11 years ago
abc7e3b
Handle DTLS version encoding and fix some checks
by Manuel Pégourié-Gonnard
· 11 years ago
d666451
Add a ciphersuite NODTLS flag
by Manuel Pégourié-Gonnard
· 11 years ago
43c3b28
Fix memory leak with crafted ClientHello
by Manuel Pégourié-Gonnard
· 11 years ago
480905d
Fix selection of hash from sig_alg ClientHello ext.
by Manuel Pégourié-Gonnard
· 11 years ago
84bbeb5
Adapt cipher and MD layer with _init() and _free()
by Paul Bakker
· 11 years ago
accaffe
Restructure ssl_handshake_init() and small fixes
by Paul Bakker
· 11 years ago
5b4af39
Add _init() and _free() for hash modules
by Paul Bakker
· 11 years ago
d27680b
Clarify code using PSK callback
by Manuel Pégourié-Gonnard
· 11 years ago
14beb08
Fix missing const
by Manuel Pégourié-Gonnard
· 11 years ago
08e81e0
Change selection of hash algorithm for TLS 1.2
by Manuel Pégourié-Gonnard
· 11 years ago
dd0c0f3
Better usage of dhm_calc_secret in SSL
by Manuel Pégourié-Gonnard
· 11 years ago
4d2a8eb
SSL modules now using x509_crt_parse_der()
by Manuel Pégourié-Gonnard
· 11 years ago
66d5d07
Fix formatting in various code to match spacing from coding style
by Paul Bakker
· 11 years ago
db20c10
Add #endif comments for #endif more than 10 lines from #if / #else
by Paul Bakker
· 11 years ago
3461772
Introduce polarssl_zeroize() instead of memset() for zeroization
by Paul Bakker
· 11 years ago
14877e6
Remove unused 'ret' variable
by Paul Bakker
· 11 years ago
14b16c6
Minor optimizations (original by Peter Vaskovic, modified by Paul Bakker)
by Paul Bakker
· 11 years ago
0f651c7
Stricter check on SSL ClientHello internal sizes compared to actual packet size
by Paul Bakker
· 11 years ago
61edffe
Normalize "should never happen" messages/errors
by Manuel Pégourié-Gonnard
· 11 years ago
b9e4e2c
Fix formatting: fix some 'easy' > 80 length lines
by Paul Bakker
· 11 years ago
9af723c
Fix formatting: remove trailing spaces, #endif with comments (> 10 lines)
by Paul Bakker
· 11 years ago
cef4ad2
Adapt sources to configurable config.h name
by Manuel Pégourié-Gonnard
· 11 years ago
a703663
Improve interop by not writing ext_len in ClientHello / ServerHello when 0
by Paul Bakker
· 11 years ago
c70e425
Only iterate over actual certificates in ssl_write_certificate_request()
by Paul Bakker
· 11 years ago
4f42c11
Remove arbitrary maximum length for cipher_list and content length
by Paul Bakker
· 11 years ago
d893aef
Force default value to curve parameter
by Paul Bakker
· 11 years ago
7f2a07d
Check keyUsage in SSL client and server
by Manuel Pégourié-Gonnard
· 11 years ago
f6521de
Add ALPN tests to ssl-opt.sh
by Manuel Pégourié-Gonnard
· 11 years ago
89e3579
Implement ALPN server-side
by Manuel Pégourié-Gonnard
· 11 years ago
969ccc6
Fix length checking of various ClientKeyExchange's
by Manuel Pégourié-Gonnard
· 11 years ago
b2bf5a1
Fix possible buffer overflow with PSK
by Manuel Pégourié-Gonnard
· 11 years ago
d701c9a
Fix memory leak in server with expired tickets
by Manuel Pégourié-Gonnard
· 11 years ago
145dfcb
Fix bug with NewSessionTicket and non-blocking I/O
by Manuel Pégourié-Gonnard
· 11 years ago
96ea2f2
Add tests for SNI
by Manuel Pégourié-Gonnard
· 11 years ago
8520dac
Add tests for auth_mode
by Manuel Pégourié-Gonnard
· 11 years ago
f7c5201
Add basic tests for session resumption
by Manuel Pégourié-Gonnard
· 11 years ago
6b1e207
Fix verion-major intolerance
by Manuel Pégourié-Gonnard
· 11 years ago
7dc4c44
Library files moved to use platform layer
by Paul Bakker
· 11 years ago
f6dc5e1
Remove temporary debug code
by Manuel Pégourié-Gonnard
· 11 years ago
c3f6b62c
Print curve name instead of size in debugging
by Manuel Pégourié-Gonnard
· 11 years ago
de05390
Rename ecdh_curve_list to curve_list
by Manuel Pégourié-Gonnard
· 11 years ago
5de2580
Make ssl_set_ecdh_curves() a compile-time option
by Manuel Pégourié-Gonnard
· 11 years ago
987bfb5
Added the possibility to define the allowed curves for ECDHE handshake. It also defines the preference of the curves.
by Gergely Budai
· 12 years ago
5538970
Add server support for ECDH key exchanges
by Manuel Pégourié-Gonnard
· 12 years ago
1a9f2c7
Add option to respect client ciphersuite order
by Manuel Pégourié-Gonnard
· 12 years ago
011a8db
Complete refactoring of ciphersuite choosing
by Manuel Pégourié-Gonnard
· 12 years ago
3252560
Move some functions up
by Manuel Pégourié-Gonnard
· 12 years ago
59b81d7
Refactor ciphersuite selection for version > 2
by Manuel Pégourié-Gonnard
· 12 years ago
da1ff38
Don't accept CertificateRequest with PSK suites
by Manuel Pégourié-Gonnard
· 12 years ago
dc953e8
Add missing defines/cases for RSA_PSK key exchange
by Manuel Pégourié-Gonnard
· 12 years ago
a9a028e
SSL now gracefully handles missing RNG
by Paul Bakker
· 12 years ago
31ff1d2
Safer buffer comparisons in the SSL modules
by Manuel Pégourié-Gonnard
· 12 years ago
21ef42f
Don't select a PSK ciphersuite if no key available
by Manuel Pégourié-Gonnard
· 12 years ago
45a2c8d
Prevent possible alignment warnings on casting from char * to 'aligned *'
by Paul Bakker
· 12 years ago
677377f
Server does not send out extensions not advertised by client
by Paul Bakker
· 12 years ago
f34673e
Merged RSA-PSK key-exchange and ciphersuites
by Paul Bakker
· 12 years ago
376e815
Merged ECDHE-PSK ciphersuites
by Paul Bakker
· 12 years ago
bac0e3b
Dependency fixes
by Manuel Pégourié-Gonnard
· 12 years ago
09258b9
Refactor parse_server_key_exchange a bit
by Manuel Pégourié-Gonnard
· 12 years ago
8a3c64d
Fix and simplify *-PSK ifdef's
by Manuel Pégourié-Gonnard
· 12 years ago
0fae60b
Implement RSA-PSK key exchange
by Manuel Pégourié-Gonnard
· 12 years ago
b9cfaa0
Explicit conversions and minor changes to prevent MSVC compiler warnings
by Paul Bakker
· 12 years ago
1b62c7f
Fix dependencies and related issues
by Manuel Pégourié-Gonnard
· 12 years ago
bd1ae24
Factor PSK pms computation to ssl_tls.c
by Manuel Pégourié-Gonnard
· 12 years ago
b59d699
Fix bugs in ECDHE_PSK key exchange
by Manuel Pégourié-Gonnard
· 12 years ago
3ce3bbd
Add support for ECDHE_PSK key exchange
by Manuel Pégourié-Gonnard
· 12 years ago
beccd9f
Explicit void pointer cast for buggy MS compiler
by Paul Bakker
· 12 years ago
caa3af4
Handle missing curve extension correctly in ssl_parse_client_hello()
by Paul Bakker
· 12 years ago
8372454
Rework SNI to fix memory issues
by Manuel Pégourié-Gonnard
· 12 years ago
705fcca
Adapt support for SNI to recent changes
by Manuel Pégourié-Gonnard
· 12 years ago
d09453c
Check our ECDSA cert(s) against supported curves
by Manuel Pégourié-Gonnard
· 12 years ago
f24b4a7
Interface change in ECP info functions
by Manuel Pégourié-Gonnard
· 12 years ago
3ebb2cd
Add support for multiple server certificates
by Manuel Pégourié-Gonnard
· 12 years ago
834ea85
Change internal structs for multi-cert support
by Manuel Pégourié-Gonnard
· 12 years ago
164d894
Fix: session start time wasn't set server side
by Manuel Pégourié-Gonnard
· 12 years ago
1a48383
SSL_TLS doesn't depend on PK any more
by Manuel Pégourié-Gonnard
· 12 years ago
34ced2d
Fix mis-sized buffer
by Manuel Pégourié-Gonnard
· 12 years ago
Next »