TrustedFirmware Git Browser
Code Review
Sign In
review.trustedfirmware.org
/
mirror
/
mbed-tls.git
/
abc7e3b4baaa78ba13d0fc11a3f33d40f18ece29
/
include
/
polarssl
/
ssl.h
abc7e3b
Handle DTLS version encoding and fix some checks
by Manuel Pégourié-Gonnard
· 11 years ago
864a81f
More ssl_set_XXX() functions can return BAD_INPUT
by Manuel Pégourié-Gonnard
· 11 years ago
b21ca2a
Adapt version-handling functions to DTLS
by Manuel Pégourié-Gonnard
· 11 years ago
0b1ff29
Add basic flags for DTLS
by Manuel Pégourié-Gonnard
· 11 years ago
9e4ff95
Clarified len parameter of ssl_read()
by Paul Bakker
· 11 years ago
44ade65
Implement (partial) renego delay on client
by Manuel Pégourié-Gonnard
· 11 years ago
6591962
Allow delay on renego on client
by Manuel Pégourié-Gonnard
· 11 years ago
55e4ff2
Tune comments
by Manuel Pégourié-Gonnard
· 11 years ago
8d4ad07
SHA-2 ciphersuites now require TLS 1.x
by Manuel Pégourié-Gonnard
· 11 years ago
accaffe
Restructure ssl_handshake_init() and small fixes
by Paul Bakker
· 11 years ago
08e81e0
Change selection of hash algorithm for TLS 1.2
by Manuel Pégourié-Gonnard
· 11 years ago
8fb99ab
Merge changes for leaner memory footprint
by Paul Bakker
· 11 years ago
481fcfd
Make PSK_LEN configurable and adjust PMS size
by Manuel Pégourié-Gonnard
· 11 years ago
a9964db
Add ssl_set_renegotiation_enforced()
by Manuel Pégourié-Gonnard
· 11 years ago
c27807d
Make SSL_BUFFER_LEN overhead depend more on config
by Manuel Pégourié-Gonnard
· 11 years ago
08485cc
Fix SSL_BUFFER_LEN
by Manuel Pégourié-Gonnard
· 11 years ago
b9e4e2c
Fix formatting: fix some 'easy' > 80 length lines
by Paul Bakker
· 11 years ago
9af723c
Fix formatting: remove trailing spaces, #endif with comments (> 10 lines)
by Paul Bakker
· 11 years ago
cef4ad2
Adapt sources to configurable config.h name
by Manuel Pégourié-Gonnard
· 11 years ago
088c5c5
POLARSSL_CONFIG_OPTIONS has been removed. Values are set individually
by Paul Bakker
· 11 years ago
043a2e2
Merge verification of the keyUsage extension in X.509 certificates
by Paul Bakker
· 11 years ago
7f2a07d
Check keyUsage in SSL client and server
by Manuel Pégourié-Gonnard
· 11 years ago
75342a6
Fixed typos in code
by Paul Bakker
· 11 years ago
89e3579
Implement ALPN server-side
by Manuel Pégourié-Gonnard
· 11 years ago
0b874dc
Implement ALPN client-side
by Manuel Pégourié-Gonnard
· 11 years ago
7e250d4
Add ALPN interface
by Manuel Pégourié-Gonnard
· 11 years ago
7a2aba8
Deprecate some non-PK compatibility functions
by Manuel Pégourié-Gonnard
· 11 years ago
a612b44
Fix typo in doc
by Manuel Pégourié-Gonnard
· 11 years ago
e2ce211
Update doc of ssl_set_authmode()
by Manuel Pégourié-Gonnard
· 11 years ago
83cdffc
Forbid sequence number wrapping
by Manuel Pégourié-Gonnard
· 11 years ago
ab24010
Enforce our choice of allowed curves.
by Manuel Pégourié-Gonnard
· 11 years ago
7f38ed0
ssl_set_curves is no longer ECDHE only
by Manuel Pégourié-Gonnard
· 11 years ago
cd49f76
Make ssl_set_curves() work client-side too.
by Manuel Pégourié-Gonnard
· 11 years ago
de05390
Rename ecdh_curve_list to curve_list
by Manuel Pégourié-Gonnard
· 11 years ago
5de2580
Make ssl_set_ecdh_curves() a compile-time option
by Manuel Pégourié-Gonnard
· 12 years ago
987bfb5
Added the possibility to define the allowed curves for ECDHE handshake. It also defines the preference of the curves.
by Gergely Budai
· 12 years ago
cf1d73b
Clarified ssl_set_ciphersuites() doc for influencing preference as well
by Paul Bakker
· 12 years ago
956c9e0
Reduced the input / output overhead with 200+ bytes and covered corner case
by Paul Bakker
· 12 years ago
c72ac7c
Fix SSLv3 handling of SHA-384 suites
by Manuel Pégourié-Gonnard
· 12 years ago
a9a028e
SSL now gracefully handles missing RNG
by Paul Bakker
· 12 years ago
28d81a0
Fix pkcs11.c to conform to PolarSSL 1.3 API.
by Steffan Karger
· 12 years ago
993e386
Merged renegotiation refactoring
by Paul Bakker
· 12 years ago
31ff1d2
Safer buffer comparisons in the SSL modules
by Manuel Pégourié-Gonnard
· 12 years ago
6d8404d
Server: enforce renegotiation
by Manuel Pégourié-Gonnard
· 12 years ago
9c1e189
Move some code around, improve documentation
by Manuel Pégourié-Gonnard
· 12 years ago
214eed3
Make ssl_renegotiate the only interface
by Manuel Pégourié-Gonnard
· 12 years ago
caed054
Allow ssl_renegotiate() to be called in a loop
by Manuel Pégourié-Gonnard
· 12 years ago
f3dc2f6
Add code for testing server-initiated renegotiation
by Manuel Pégourié-Gonnard
· 12 years ago
60b1d10
Fixed spelling / typos (from PowerDNS:codespell)
by Paul Bakker
· 12 years ago
1642122
Merged support for Camellia-GCM + ciphersuite and fixes to cipher layer
by Paul Bakker
· 12 years ago
677377f
Server does not send out extensions not advertised by client
by Paul Bakker
· 12 years ago
a8a25ae
Fix bad error codes
by Manuel Pégourié-Gonnard
· 12 years ago
f34673e
Merged RSA-PSK key-exchange and ciphersuites
by Paul Bakker
· 12 years ago
376e815
Merged ECDHE-PSK ciphersuites
by Paul Bakker
· 12 years ago
8a3c64d
Fix and simplify *-PSK ifdef's
by Manuel Pégourié-Gonnard
· 12 years ago
1b62c7f
Fix dependencies and related issues
by Manuel Pégourié-Gonnard
· 12 years ago
bd1ae24
Factor PSK pms computation to ssl_tls.c
by Manuel Pégourié-Gonnard
· 12 years ago
1677033
TLS compression only allocates working buffer once
by Paul Bakker
· 12 years ago
6838bd1
Clarified threading issues
by Paul Bakker
· 12 years ago
8372454
Rework SNI to fix memory issues
by Manuel Pégourié-Gonnard
· 12 years ago
705fcca
Adapt support for SNI to recent changes
by Manuel Pégourié-Gonnard
· 12 years ago
d09453c
Check our ECDSA cert(s) against supported curves
by Manuel Pégourié-Gonnard
· 12 years ago
3ebb2cd
Add support for multiple server certificates
by Manuel Pégourié-Gonnard
· 12 years ago
834ea85
Change internal structs for multi-cert support
by Manuel Pégourié-Gonnard
· 12 years ago
cbf3ef3
RSA and ECDSA key exchanges don't depend on CRL
by Manuel Pégourié-Gonnard
· 12 years ago
1a48383
SSL_TLS doesn't depend on PK any more
by Manuel Pégourié-Gonnard
· 12 years ago
1032c1d
Fix some dependencies and warnings in small config
by Manuel Pégourié-Gonnard
· 12 years ago
6db455e
PSK callback added to SSL server
by Paul Bakker
· 12 years ago
c559c7a
Renamed x509_cert structure to x509_crt for consistency
by Paul Bakker
· 12 years ago
7c6b2c3
Split up X509 files into smaller modules
by Paul Bakker
· 12 years ago
dcbfdcc
Updated doxygen documentation in header files and HTML pages
by Paul Bakker
· 12 years ago
7da0a38
Rm some includes that are now useless
by Manuel Pégourié-Gonnard
· 12 years ago
226d5da
GCM ciphersuites partially using cipher layer
by Manuel Pégourié-Gonnard
· 12 years ago
da02a7f
AES_CBC ciphersuites now run purely via cipher layer
by Paul Bakker
· 12 years ago
c852a68
More robust selection of ctx_enc size
by Manuel Pégourié-Gonnard
· 12 years ago
577e006
Merged ECDSA-based key-exchange and ciphersuites into development
by Paul Bakker
· 12 years ago
acc7505
Temporary fix for size of cipher contexts
by Manuel Pégourié-Gonnard
· 12 years ago
2fb15f6
Un-rename ssl_set_own_cert_alt()
by Manuel Pégourié-Gonnard
· 12 years ago
a20c58c
Use convert functions for SSL_SIG_* and SSL_HASH_*
by Manuel Pégourié-Gonnard
· 12 years ago
0d42049
Merge code for RSA and ECDSA in SSL
by Manuel Pégourié-Gonnard
· 12 years ago
070cc7f
Use the new PK RSA-alt interface
by Manuel Pégourié-Gonnard
· 12 years ago
8df2769
Introduce pk_sign() and use it in ssl
by Manuel Pégourié-Gonnard
· 12 years ago
ac75523
Adapt ssl_set_own_cert() to generic keys
by Manuel Pégourié-Gonnard
· 12 years ago
0b03200
Add server-side support for ECDSA client auth
by Manuel Pégourié-Gonnard
· 12 years ago
0be444a
Ability to disable server_name extension (RFC 6066)
by Paul Bakker
· 12 years ago
d2f068e
Ability to enable / disable SSL v3 / TLS 1.0 / TLS 1.1 / TLS 1.2 individually
by Paul Bakker
· 12 years ago
fb08fd2
Entropy collector and CTR-DRBG now also work on SHA-256 if SHA-512 not available
by Paul Bakker
· 12 years ago
38d1eba
Move verify_result from ssl_context to session
by Manuel Pégourié-Gonnard
· 12 years ago
b3d9187
PK: add nice interface functions
by Manuel Pégourié-Gonnard
· 12 years ago
0b27267
Fix ifdef conditions for EC-related extensions.
by Manuel Pégourié-Gonnard
· 12 years ago
5734b2d
Actually use the point format selected for ECDH
by Manuel Pégourié-Gonnard
· 12 years ago
1f2bc62
Made support for the truncated_hmac extension configurable
by Paul Bakker
· 12 years ago
05decb2
Made support for the max_fragment_length extension configurable
by Paul Bakker
· 12 years ago
606b4ba
Session ticket expiration checked on server
by Paul Bakker
· 12 years ago
a503a63
Made session tickets support configurable from config.h
by Paul Bakker
· 12 years ago
56dc9e8
Authenticate session tickets.
by Manuel Pégourié-Gonnard
· 12 years ago
990c51a
Encrypt session tickets
by Manuel Pégourié-Gonnard
· 12 years ago
779e429
Start adding ticket keys (only key_name for now)
by Manuel Pégourié-Gonnard
· 12 years ago
aa0d4d1
Add ssl_set_session_tickets()
by Manuel Pégourié-Gonnard
· 12 years ago
06650f6
Fix reusing session more than once
by Manuel Pégourié-Gonnard
· 12 years ago
Next »