- b3d9187 PK: add nice interface functions by Manuel Pégourié-Gonnard · 12 years ago
- 0b27267 Fix ifdef conditions for EC-related extensions. by Manuel Pégourié-Gonnard · 12 years ago
- 5734b2d Actually use the point format selected for ECDH by Manuel Pégourié-Gonnard · 12 years ago
- 1f2bc62 Made support for the truncated_hmac extension configurable by Paul Bakker · 12 years ago
- 05decb2 Made support for the max_fragment_length extension configurable by Paul Bakker · 12 years ago
- 606b4ba Session ticket expiration checked on server by Paul Bakker · 12 years ago
- a503a63 Made session tickets support configurable from config.h by Paul Bakker · 12 years ago
- 56dc9e8 Authenticate session tickets. by Manuel Pégourié-Gonnard · 12 years ago
- 990c51a Encrypt session tickets by Manuel Pégourié-Gonnard · 12 years ago
- 779e429 Start adding ticket keys (only key_name for now) by Manuel Pégourié-Gonnard · 12 years ago
- aa0d4d1 Add ssl_set_session_tickets() by Manuel Pégourié-Gonnard · 12 years ago
- 06650f6 Fix reusing session more than once by Manuel Pégourié-Gonnard · 12 years ago
- a5cc602 Parse NewSessionTicket message by Manuel Pégourié-Gonnard · 12 years ago
- 60182ef ssl_cli: write & parse session ticket extension by Manuel Pégourié-Gonnard · 12 years ago
- 75d4401 Introduce ticket field in session structure by Manuel Pégourié-Gonnard · 12 years ago
- 7471803 Add ssl_get_session() to save session on client by Manuel Pégourié-Gonnard · 12 years ago
- d6f41c5 Fixed size of ctx_enc / ctx_dec in ssl for gcm_context size by Paul Bakker · 12 years ago
- 8c1ede6 Changed prototype for ssl_set_truncated_hmac() to allow disabling by Paul Bakker · 12 years ago
- 277f7f2 Implement hmac truncation by Manuel Pégourié-Gonnard · 12 years ago
- 57c2852 Added truncated hmac negociation (without effect) by Manuel Pégourié-Gonnard · 12 years ago
- e980a99 Add interface for truncated hmac by Manuel Pégourié-Gonnard · 12 years ago
- e048b67 Misc minor fixes by Manuel Pégourié-Gonnard · 12 years ago
- ed4af8b Move negotiated max fragment length to session by Manuel Pégourié-Gonnard · 12 years ago
- 581e6b6 Prepare migrating max fragment length to session by Manuel Pégourié-Gonnard · 12 years ago
- 48f8d0d Read max_fragment_length extension (server) by Manuel Pégourié-Gonnard · 12 years ago
- 8b46459 Add ssl_set_max_frag_len() by Manuel Pégourié-Gonnard · 12 years ago
- fa9b100 Also compiles / runs without time-based functions in OS by Paul Bakker · 12 years ago
- d2681d8 Renamed sha2.{c,h} to sha256.{c,h} and sha4.{c,h} to sha512.{c,h} by Paul Bakker · 12 years ago
- 9e36f04 SHA2 renamed to SHA256, SHA4 renamed to SHA512 and functions accordingly by Paul Bakker · 12 years ago
- 2fbefde Client and server now filter sent and accepted ciphersuites on minimum by Paul Bakker · 12 years ago
- 407a0da Moved __cplusplus extern statement to include struct definitions as well. by Paul Bakker · 12 years ago
- b6c5d2e Cleanup up non-prototyped functions (static) and const-correctness by Paul Bakker · 12 years ago
- 9bcf16c Centralized module option values in config.h by Paul Bakker · 12 years ago
- ed27a04 More granular define selections within code to allow for smaller code sizes by Paul Bakker · 12 years ago
- 73a899a Changed error code message to also cover missing pre-shared key by Paul Bakker · 12 years ago
- d4a56ec Added pre-shared key handling for the client side of SSL / TLS by Paul Bakker · 12 years ago
- 8f4ddae Ability to specify allowed ciphersuites based on the protocol version. by Paul Bakker · 12 years ago
- 41c83d3 Added Ephemeral Elliptic Curve Diffie Hellman ciphersuites to SSL/TLS by Paul Bakker · 12 years ago
- 68884e3 Moved to advanced ciphersuite representation and more dynamic SSL code by Paul Bakker · 13 years ago
- 92be97b Align data with future location based on IV size by Paul Bakker · 13 years ago
- 07eb38b Update ssl_hw_record_init() to receive keylen, ivlen and maclen as well by Paul Bakker · 13 years ago
- 5bd4229 Reverted commit 186751d9dd28082d4b19e69a2c15fd432d366133 and made out_hdr and out_msg back-to-back again by Paul Bakker · 13 years ago
- 1961b70 Added ssl_handshake_step() to allow single stepping the handshake process by Paul Bakker · 13 years ago
- 926af75 Fixed client certificate handling with TLS 1.2 by Paul Bakker · 13 years ago
- e667c98 Added p_hw_data to ssl_context for context specific hardware acceleration data by Paul Bakker · 13 years ago
- 1f9d02d Added more notes / comments on own_cert, trust_ca purposes by Paul Bakker · 13 years ago
- 6831c4a - Fixed typos by Paul Bakker · 13 years ago
- 7c90078 - Default to disabled renegotiation by Paul Bakker · 13 years ago
- 7a2538e - Fixes for MSVC6 by Paul Bakker · 13 years ago
- 645ce3a - Moved ciphersuite naming scheme to IANA reserved names by Paul Bakker · 13 years ago
- b0550d9 - Added ssl_get_peer_cert() to SSL API by Paul Bakker · 13 years ago
- df2bb75 - Premaster should have a maximum of MPI size by Paul Bakker · 13 years ago
- 09f097d - Added more documentation on disable / enable renegotiation by Paul Bakker · 13 years ago
- 0f5281a - Enlarged buffer to fit gcm_context on all platforms by Paul Bakker · 13 years ago
- 5c2364c - Moved from unsigned long to uint32_t throughout code by Paul Bakker · 13 years ago
- 6adff74 - Fixed typo by Paul Bakker · 13 years ago
- 23f3680 - Added proper support for TLS 1.2 signature_algorithm extension on server by Paul Bakker · 13 years ago
- 1d29fb5 - Added option to add minimum accepted SSL/TLS protocol version by Paul Bakker · 13 years ago
- 62f2dee - Set POLARSSL_DHM_RFC5114_MODP_1024_[PG] as default DHM MODP group for SSL/TLS by Paul Bakker · 13 years ago
- 915275b - Revamped x509_verify() and the SSL f_vrfy callback implementations by Paul Bakker · 13 years ago
- 5701cdc - Added ServerName extension parsing (SNI) at server side by Paul Bakker · 13 years ago
- eb2c658 - Generalized external private key implementation handling (like PKCS#11) in SSL/TLS by Paul Bakker · 13 years ago
- 0a59707 - Added simple SSL session cache implementation by Paul Bakker · 13 years ago
- d0f6fa7 - Sending of handshake_failures during renegotiation added by Paul Bakker · 13 years ago
- 48916f9 - Added Secure Renegotiation (RFC 5746) by Paul Bakker · 13 years ago
- b68cad6 - Made cipersuites in ssl context const (no intention to modify) by Paul Bakker · 13 years ago
- 2770fbd - Added DEFLATE compression support as per RFC3749 (requires zlib) by Paul Bakker · 13 years ago
- 186751d - Moved out_msg to out_hdr + 32 to support hardware acceleration by Paul Bakker · 13 years ago
- 05ef835 - Added support for Hardware Acceleration hooking in SSL/TLS by Paul Bakker · 13 years ago
- 380da53 - Abstracted checksum updating during handshake by Paul Bakker · 13 years ago
- ca4ab49 - Added GCM ciphersuites to TLS implementation by Paul Bakker · 13 years ago
- 0a92518 - Report unexpected_message if unknown record type is received by Paul Bakker · 13 years ago
- 10cd225 - Added support for the SHA256 ciphersuites of AES and Camellia by Paul Bakker · 13 years ago
- c3f177a - Added client side support for signature_algorithm extension and affiliated handling by Paul Bakker · 13 years ago
- 1ef83d6 - Initial bare version of TLS 1.2 by Paul Bakker · 13 years ago
- e93dfa7 - Added hex documentation for alerts by Paul Bakker · 13 years ago
- fab5c82 - Added support for NULL cipher (POLARSSL_CIPHER_NULL_CIPHER) and weak ciphersuites (POLARSSL_ENABLE_WEAK_CIPHERSUITES). They are disabled by default! by Paul Bakker · 13 years ago
- b15b851 - Check for failed malloc() in ssl_set_hostname() and x509_get_entries() (Closes ticket #47, found by Hugo Leisink) by Paul Bakker · 14 years ago
- 69e095c - Changed the behaviour of x509parse_parse_crt for permissive parsing. Now returns the number of 'failed certificates' instead of having a switch to enable it. by Paul Bakker · 14 years ago
- a3d195c - Changed the used random function pointer to more flexible format. Renamed havege_rand() to havege_random() to prevent mistakes. Lots of changes as a consequence in library code and programs by Paul Bakker · 14 years ago
- 490ecc8 - Added ssl_set_max_version() to set the client's maximum sent version number by Paul Bakker · 14 years ago
- 7eb013f - Added ssl_session_reset() to allow re-use of already set non-connection specific context information by Paul Bakker · 14 years ago
- 314052f - Removed extraneous "polarssl/" in front on include directives in header files by Paul Bakker · 14 years ago
- 09b1ec6 - Adapted define for inline to be more solid by Paul Bakker · 14 years ago
- 74fb74e - Updated ARMCC_VERSION to __ARMCC_VERSION by Paul Bakker · 14 years ago
- 569df2c - Fixed inline definition for ARM systems by Paul Bakker · 14 years ago
- 39bb418 - Made second argument of f_send() prototype and of net_send() const by Paul Bakker · 14 years ago
- 831a755 - Changed behaviour of net_recv(), ssl_fetch_input() and ssl_read(). net_recv() now returns 0 on EOF instead of POLARSSL_ERR_NET_CONN_RESET. ssl_fetch_input() returns POLARSSL_ERR_SSL_CONN_EOF on an EOF from its f_recv() function. ssl_read() returns 0 if a POLARSSL_ERR_SSL_CONN_EOF is received after the handshake. by Paul Bakker · 14 years ago
- 9d78140 - A error_strerror function() has been added to translate between error codes and their description. by Paul Bakker · 14 years ago
- 23986e5 - Major type rewrite of int to size_t for most variables and arguments used for buffer lengths and loops by Paul Bakker · 14 years ago
- af5c85f - Improved portability with Microsoft Visual C by Paul Bakker · 14 years ago
- fbc4a45 - Fixed typo in define by Paul Bakker · 14 years ago
- e3166ce - Renamed ciphers member of ssl_context and cipher member of ssl_session to ciphersuites and ciphersuite respectively. This clarifies the difference with the generic cipher layer and is better naming altogether by Paul Bakker · 15 years ago
- 43b7e35 - Support for PKCS#11 through the use of the pkcs11-helper library by Paul Bakker · 15 years ago
- 72f6266 - Improved information provided about current Hashing, Cipher and Suite capabilities by Paul Bakker · 15 years ago
- 43ca69c - Added function for stringified SSL/TLS version by Paul Bakker · 15 years ago
- b63b0af - Added verification callback in certificate verification chain in order to allow external blacklisting by Paul Bakker · 15 years ago
- 1b57b06 - Added reading of DHM context from memory and file by Paul Bakker · 15 years ago
- 37ca75d - Added Doxygen source code documentation parts (donated by Fox-IT) by Paul Bakker · 15 years ago
- 2e11f7d - Added support for TLS v1.1 by Paul Bakker · 15 years ago