TrustedFirmware Git Browser
Code Review
Sign In
review.trustedfirmware.org
/
mirror
/
mbed-tls.git
/
c97f9f6465a2ca6d7f25df45e9a0f6660698cd6c
/
library
/
ssl_tls.c
dc953e8
Add missing defines/cases for RSA_PSK key exchange
by Manuel Pégourié-Gonnard
· 12 years ago
08b028f
Prevent unlikely NULL dereference
by Paul Bakker
· 12 years ago
0333b97
Handshake key_cert should be set on first addition to the key_cert chain
by Paul Bakker
· 12 years ago
993e386
Merged renegotiation refactoring
by Paul Bakker
· 12 years ago
37ce0ff
Added defines around renegotiation code for SSL_SRV and SSL_CLI
by Paul Bakker
· 12 years ago
31ff1d2
Safer buffer comparisons in the SSL modules
by Manuel Pégourié-Gonnard
· 12 years ago
6d8404d
Server: enforce renegotiation
by Manuel Pégourié-Gonnard
· 12 years ago
9c1e189
Move some code around, improve documentation
by Manuel Pégourié-Gonnard
· 12 years ago
214eed3
Make ssl_renegotiate the only interface
by Manuel Pégourié-Gonnard
· 12 years ago
caed054
Allow ssl_renegotiate() to be called in a loop
by Manuel Pégourié-Gonnard
· 12 years ago
e5e1bb9
Fix misplaced initialisation
by Manuel Pégourié-Gonnard
· 12 years ago
f3dc2f6
Add code for testing server-initiated renegotiation
by Manuel Pégourié-Gonnard
· 12 years ago
6edcd41
Addition conditions for UEFI environment under MSVC
by Paul Bakker
· 12 years ago
fa6a620
Defines for UEFI environment under MSVC added
by Paul Bakker
· 12 years ago
a8a25ae
Fix bad error codes
by Manuel Pégourié-Gonnard
· 12 years ago
7109624
Skip MAC computation/check when GCM is used
by Manuel Pégourié-Gonnard
· 12 years ago
8866591
Don't special-case NULL cipher in ssl_tls.c
by Manuel Pégourié-Gonnard
· 12 years ago
126a66f
Simplify switching on mode in ssl_tls.c
by Manuel Pégourié-Gonnard
· 12 years ago
8d01eea
Add Camellia-GCM ciphersuites
by Manuel Pégourié-Gonnard
· 12 years ago
f34673e
Merged RSA-PSK key-exchange and ciphersuites
by Paul Bakker
· 12 years ago
376e815
Merged ECDHE-PSK ciphersuites
by Paul Bakker
· 12 years ago
8a3c64d
Fix and simplify *-PSK ifdef's
by Manuel Pégourié-Gonnard
· 12 years ago
0fae60b
Implement RSA-PSK key exchange
by Manuel Pégourié-Gonnard
· 12 years ago
b9cfaa0
Explicit conversions and minor changes to prevent MSVC compiler warnings
by Paul Bakker
· 12 years ago
1b62c7f
Fix dependencies and related issues
by Manuel Pégourié-Gonnard
· 12 years ago
bd1ae24
Factor PSK pms computation to ssl_tls.c
by Manuel Pégourié-Gonnard
· 12 years ago
3ce3bbd
Add support for ECDHE_PSK key exchange
by Manuel Pégourié-Gonnard
· 12 years ago
beccd9f
Explicit void pointer cast for buggy MS compiler
by Paul Bakker
· 12 years ago
1677033
TLS compression only allocates working buffer once
by Paul Bakker
· 12 years ago
ca9c87e
Removed possible cache-timing difference for pad check
by Paul Bakker
· 12 years ago
8372454
Rework SNI to fix memory issues
by Manuel Pégourié-Gonnard
· 12 years ago
705fcca
Adapt support for SNI to recent changes
by Manuel Pégourié-Gonnard
· 12 years ago
d09453c
Check our ECDSA cert(s) against supported curves
by Manuel Pégourié-Gonnard
· 12 years ago
f71e587
Fix memory leak in ssl cipher usage
by Manuel Pégourié-Gonnard
· 12 years ago
3ebb2cd
Add support for multiple server certificates
by Manuel Pégourié-Gonnard
· 12 years ago
834ea85
Change internal structs for multi-cert support
by Manuel Pégourié-Gonnard
· 12 years ago
1a48383
SSL_TLS doesn't depend on PK any more
by Manuel Pégourié-Gonnard
· 12 years ago
5ad403f
Prepared for 1.3.0 RC0
by Paul Bakker
· 12 years ago
polarssl-1.3.0-rc0
6db455e
PSK callback added to SSL server
by Paul Bakker
· 12 years ago
a310459
Fix a few things that broke with RSA compiled out
by Manuel Pégourié-Gonnard
· 12 years ago
b6b0956
Rm of memset instead of x509_crt_init()
by Paul Bakker
· 12 years ago
c559c7a
Renamed x509_cert structure to x509_crt for consistency
by Paul Bakker
· 12 years ago
ddf26b4
Renamed x509parse_* functions to new form
by Paul Bakker
· 12 years ago
7c6b2c3
Split up X509 files into smaller modules
by Paul Bakker
· 12 years ago
2292d1f
Fixed warnings in case POLARSSL_X509_PARSE_C is not defined
by Paul Bakker
· 12 years ago
f7dc378
Make CBC an option, step 1: ssl ciphersuites
by Manuel Pégourié-Gonnard
· 12 years ago
bfb355c
Fix memory leak on missed session reuse
by Manuel Pégourié-Gonnard
· 12 years ago
d13a409
GCM ciphersuites using only cipher layer
by Manuel Pégourié-Gonnard
· 12 years ago
b8bd593
Restrict cipher_update() for GCM
by Manuel Pégourié-Gonnard
· 12 years ago
226d5da
GCM ciphersuites partially using cipher layer
by Manuel Pégourié-Gonnard
· 12 years ago
45125bc
Changes to handle merged enhancements
by Paul Bakker
· 12 years ago
ea6ad3f
ARC4 ciphersuites using only cipher layer
by Paul Bakker
· 12 years ago
cca5b81
All CBC ciphersuites via the cipher layer
by Paul Bakker
· 12 years ago
da02a7f
AES_CBC ciphersuites now run purely via cipher layer
by Paul Bakker
· 12 years ago
c852a68
More robust selection of ctx_enc size
by Manuel Pégourié-Gonnard
· 12 years ago
577e006
Merged ECDSA-based key-exchange and ciphersuites into development
by Paul Bakker
· 12 years ago
2fb15f6
Un-rename ssl_set_own_cert_alt()
by Manuel Pégourié-Gonnard
· 12 years ago
a20c58c
Use convert functions for SSL_SIG_* and SSL_HASH_*
by Manuel Pégourié-Gonnard
· 12 years ago
0d42049
Merge code for RSA and ECDSA in SSL
by Manuel Pégourié-Gonnard
· 12 years ago
070cc7f
Use the new PK RSA-alt interface
by Manuel Pégourié-Gonnard
· 12 years ago
8df2769
Introduce pk_sign() and use it in ssl
by Manuel Pégourié-Gonnard
· 12 years ago
ac75523
Adapt ssl_set_own_cert() to generic keys
by Manuel Pégourié-Gonnard
· 12 years ago
0be444a
Ability to disable server_name extension (RFC 6066)
by Paul Bakker
· 12 years ago
d2f068e
Ability to enable / disable SSL v3 / TLS 1.0 / TLS 1.1 / TLS 1.2 individually
by Paul Bakker
· 12 years ago
fb08fd2
Entropy collector and CTR-DRBG now also work on SHA-256 if SHA-512 not available
by Paul Bakker
· 12 years ago
38d1eba
Move verify_result from ssl_context to session
by Manuel Pégourié-Gonnard
· 12 years ago
75c1a6f
Fixed potential heap buffer overflow on large hostname setting
by Paul Bakker
· 12 years ago
5fd4917
Add missing ifdefs in ssl modules
by Paul Bakker
· 12 years ago
1f2bc62
Made support for the truncated_hmac extension configurable
by Paul Bakker
· 12 years ago
05decb2
Made support for the max_fragment_length extension configurable
by Paul Bakker
· 12 years ago
606b4ba
Session ticket expiration checked on server
by Paul Bakker
· 12 years ago
a503a63
Made session tickets support configurable from config.h
by Paul Bakker
· 12 years ago
56dc9e8
Authenticate session tickets.
by Manuel Pégourié-Gonnard
· 12 years ago
990c51a
Encrypt session tickets
by Manuel Pégourié-Gonnard
· 12 years ago
779e429
Start adding ticket keys (only key_name for now)
by Manuel Pégourié-Gonnard
· 12 years ago
aa0d4d1
Add ssl_set_session_tickets()
by Manuel Pégourié-Gonnard
· 12 years ago
06650f6
Fix reusing session more than once
by Manuel Pégourié-Gonnard
· 12 years ago
c086cce
Don't cache empty session ID nor resumed session
by Manuel Pégourié-Gonnard
· 12 years ago
7cd5924
Rework NewSessionTicket handling in state machine
by Manuel Pégourié-Gonnard
· 12 years ago
7a358b8
ssl_srv: write & parse session ticket ext & msg
by Manuel Pégourié-Gonnard
· 12 years ago
a5cc602
Parse NewSessionTicket message
by Manuel Pégourié-Gonnard
· 12 years ago
75d4401
Introduce ticket field in session structure
by Manuel Pégourié-Gonnard
· 12 years ago
5f280cc
Implement saving peer cert as part of session.
by Manuel Pégourié-Gonnard
· 12 years ago
7471803
Add ssl_get_session() to save session on client
by Manuel Pégourié-Gonnard
· 12 years ago
8c1ede6
Changed prototype for ssl_set_truncated_hmac() to allow disabling
by Paul Bakker
· 12 years ago
277f7f2
Implement hmac truncation
by Manuel Pégourié-Gonnard
· 12 years ago
e980a99
Add interface for truncated hmac
by Manuel Pégourié-Gonnard
· 12 years ago
e048b67
Misc minor fixes
by Manuel Pégourié-Gonnard
· 12 years ago
ed4af8b
Move negotiated max fragment length to session
by Manuel Pégourié-Gonnard
· 12 years ago
581e6b6
Prepare migrating max fragment length to session
by Manuel Pégourié-Gonnard
· 12 years ago
6b4f237
Forbid setting max_frag_len > MAX_CONTENT_LEN
by Manuel Pégourié-Gonnard
· 12 years ago
30dc7ef
Reset max_fragment_length in ssl_session_reset()
by Manuel Pégourié-Gonnard
· 12 years ago
787b658
Implement max_frag_len write restriction
by Manuel Pégourié-Gonnard
· 12 years ago
8b46459
Add ssl_set_max_frag_len()
by Manuel Pégourié-Gonnard
· 12 years ago
61d113b
Init and free new contexts in the right place for SSL to prevent memory leaks
by Paul Bakker
· 12 years ago
fa9b100
Also compiles / runs without time-based functions in OS
by Paul Bakker
· 12 years ago
6e339b5
Memory-allocation abstraction layer and buffer-based allocator added
by Paul Bakker
· 12 years ago
abf2f8f
zlib compression/decompression skipped on empty blocks
by Paul Bakker
· 12 years ago
e5bffc3
Removed redundant includes
by Paul Bakker
· 12 years ago
d2681d8
Renamed sha2.{c,h} to sha256.{c,h} and sha4.{c,h} to sha512.{c,h}
by Paul Bakker
· 12 years ago
Next »