TrustedFirmware Git Browser
Code Review
Sign In
review.trustedfirmware.org
/
mirror
/
mbed-tls.git
/
d742a032f4b6c8ae39468da35a5725f5640b8423
/
library
/
ssl_tls.c
7c59363
Remove a few dead stores
by Manuel Pégourié-Gonnard
· 12 years ago
7cfdcb8
Add a length check in ssl_derive_keys()
by Manuel Pégourié-Gonnard
· 12 years ago
6992eb7
Fixed potential overflow in certificate size in ssl_write_certificate()
by Paul Bakker
· 12 years ago
956c9e0
Reduced the input / output overhead with 200+ bytes and covered corner case
by Paul Bakker
· 12 years ago
1e5369c
Variables in proper block or within proper defines in ssl_decrypt_buf()
by Paul Bakker
· 12 years ago
fdf9469
Merged support for ECDH-RSA / ECDH-ECDSA key exchanges and ciphersuites
by Paul Bakker
· 12 years ago
77e257e
Fixed bad check for maximum size of fragment length index
by Paul Bakker
· 12 years ago
6f0636a
Potential memory leak in ssl_ticket_keys_init()
by Paul Bakker
· 12 years ago
d18cc57
Add client-side support for ECDH key exchanges
by Manuel Pégourié-Gonnard
· 12 years ago
c72ac7c
Fix SSLv3 handling of SHA-384 suites
by Manuel Pégourié-Gonnard
· 12 years ago
dc953e8
Add missing defines/cases for RSA_PSK key exchange
by Manuel Pégourié-Gonnard
· 12 years ago
08b028f
Prevent unlikely NULL dereference
by Paul Bakker
· 12 years ago
0333b97
Handshake key_cert should be set on first addition to the key_cert chain
by Paul Bakker
· 12 years ago
993e386
Merged renegotiation refactoring
by Paul Bakker
· 12 years ago
37ce0ff
Added defines around renegotiation code for SSL_SRV and SSL_CLI
by Paul Bakker
· 12 years ago
31ff1d2
Safer buffer comparisons in the SSL modules
by Manuel Pégourié-Gonnard
· 12 years ago
6d8404d
Server: enforce renegotiation
by Manuel Pégourié-Gonnard
· 12 years ago
9c1e189
Move some code around, improve documentation
by Manuel Pégourié-Gonnard
· 12 years ago
214eed3
Make ssl_renegotiate the only interface
by Manuel Pégourié-Gonnard
· 12 years ago
caed054
Allow ssl_renegotiate() to be called in a loop
by Manuel Pégourié-Gonnard
· 12 years ago
e5e1bb9
Fix misplaced initialisation
by Manuel Pégourié-Gonnard
· 12 years ago
f3dc2f6
Add code for testing server-initiated renegotiation
by Manuel Pégourié-Gonnard
· 12 years ago
6edcd41
Addition conditions for UEFI environment under MSVC
by Paul Bakker
· 12 years ago
fa6a620
Defines for UEFI environment under MSVC added
by Paul Bakker
· 12 years ago
a8a25ae
Fix bad error codes
by Manuel Pégourié-Gonnard
· 12 years ago
7109624
Skip MAC computation/check when GCM is used
by Manuel Pégourié-Gonnard
· 12 years ago
8866591
Don't special-case NULL cipher in ssl_tls.c
by Manuel Pégourié-Gonnard
· 12 years ago
126a66f
Simplify switching on mode in ssl_tls.c
by Manuel Pégourié-Gonnard
· 12 years ago
8d01eea
Add Camellia-GCM ciphersuites
by Manuel Pégourié-Gonnard
· 12 years ago
f34673e
Merged RSA-PSK key-exchange and ciphersuites
by Paul Bakker
· 12 years ago
376e815
Merged ECDHE-PSK ciphersuites
by Paul Bakker
· 12 years ago
8a3c64d
Fix and simplify *-PSK ifdef's
by Manuel Pégourié-Gonnard
· 12 years ago
0fae60b
Implement RSA-PSK key exchange
by Manuel Pégourié-Gonnard
· 12 years ago
b9cfaa0
Explicit conversions and minor changes to prevent MSVC compiler warnings
by Paul Bakker
· 12 years ago
1b62c7f
Fix dependencies and related issues
by Manuel Pégourié-Gonnard
· 12 years ago
bd1ae24
Factor PSK pms computation to ssl_tls.c
by Manuel Pégourié-Gonnard
· 12 years ago
3ce3bbd
Add support for ECDHE_PSK key exchange
by Manuel Pégourié-Gonnard
· 12 years ago
beccd9f
Explicit void pointer cast for buggy MS compiler
by Paul Bakker
· 12 years ago
1677033
TLS compression only allocates working buffer once
by Paul Bakker
· 12 years ago
ca9c87e
Removed possible cache-timing difference for pad check
by Paul Bakker
· 12 years ago
8372454
Rework SNI to fix memory issues
by Manuel Pégourié-Gonnard
· 12 years ago
705fcca
Adapt support for SNI to recent changes
by Manuel Pégourié-Gonnard
· 12 years ago
d09453c
Check our ECDSA cert(s) against supported curves
by Manuel Pégourié-Gonnard
· 12 years ago
f71e587
Fix memory leak in ssl cipher usage
by Manuel Pégourié-Gonnard
· 12 years ago
3ebb2cd
Add support for multiple server certificates
by Manuel Pégourié-Gonnard
· 12 years ago
834ea85
Change internal structs for multi-cert support
by Manuel Pégourié-Gonnard
· 12 years ago
1a48383
SSL_TLS doesn't depend on PK any more
by Manuel Pégourié-Gonnard
· 12 years ago
5ad403f
Prepared for 1.3.0 RC0
by Paul Bakker
· 12 years ago
polarssl-1.3.0-rc0
6db455e
PSK callback added to SSL server
by Paul Bakker
· 12 years ago
a310459
Fix a few things that broke with RSA compiled out
by Manuel Pégourié-Gonnard
· 12 years ago
b6b0956
Rm of memset instead of x509_crt_init()
by Paul Bakker
· 12 years ago
c559c7a
Renamed x509_cert structure to x509_crt for consistency
by Paul Bakker
· 12 years ago
ddf26b4
Renamed x509parse_* functions to new form
by Paul Bakker
· 12 years ago
7c6b2c3
Split up X509 files into smaller modules
by Paul Bakker
· 12 years ago
2292d1f
Fixed warnings in case POLARSSL_X509_PARSE_C is not defined
by Paul Bakker
· 12 years ago
f7dc378
Make CBC an option, step 1: ssl ciphersuites
by Manuel Pégourié-Gonnard
· 12 years ago
bfb355c
Fix memory leak on missed session reuse
by Manuel Pégourié-Gonnard
· 12 years ago
d13a409
GCM ciphersuites using only cipher layer
by Manuel Pégourié-Gonnard
· 12 years ago
b8bd593
Restrict cipher_update() for GCM
by Manuel Pégourié-Gonnard
· 12 years ago
226d5da
GCM ciphersuites partially using cipher layer
by Manuel Pégourié-Gonnard
· 12 years ago
45125bc
Changes to handle merged enhancements
by Paul Bakker
· 12 years ago
ea6ad3f
ARC4 ciphersuites using only cipher layer
by Paul Bakker
· 12 years ago
cca5b81
All CBC ciphersuites via the cipher layer
by Paul Bakker
· 12 years ago
da02a7f
AES_CBC ciphersuites now run purely via cipher layer
by Paul Bakker
· 12 years ago
c852a68
More robust selection of ctx_enc size
by Manuel Pégourié-Gonnard
· 12 years ago
577e006
Merged ECDSA-based key-exchange and ciphersuites into development
by Paul Bakker
· 12 years ago
2fb15f6
Un-rename ssl_set_own_cert_alt()
by Manuel Pégourié-Gonnard
· 12 years ago
a20c58c
Use convert functions for SSL_SIG_* and SSL_HASH_*
by Manuel Pégourié-Gonnard
· 12 years ago
0d42049
Merge code for RSA and ECDSA in SSL
by Manuel Pégourié-Gonnard
· 12 years ago
070cc7f
Use the new PK RSA-alt interface
by Manuel Pégourié-Gonnard
· 12 years ago
8df2769
Introduce pk_sign() and use it in ssl
by Manuel Pégourié-Gonnard
· 12 years ago
ac75523
Adapt ssl_set_own_cert() to generic keys
by Manuel Pégourié-Gonnard
· 12 years ago
0be444a
Ability to disable server_name extension (RFC 6066)
by Paul Bakker
· 12 years ago
d2f068e
Ability to enable / disable SSL v3 / TLS 1.0 / TLS 1.1 / TLS 1.2 individually
by Paul Bakker
· 12 years ago
fb08fd2
Entropy collector and CTR-DRBG now also work on SHA-256 if SHA-512 not available
by Paul Bakker
· 12 years ago
38d1eba
Move verify_result from ssl_context to session
by Manuel Pégourié-Gonnard
· 12 years ago
75c1a6f
Fixed potential heap buffer overflow on large hostname setting
by Paul Bakker
· 12 years ago
5fd4917
Add missing ifdefs in ssl modules
by Paul Bakker
· 12 years ago
1f2bc62
Made support for the truncated_hmac extension configurable
by Paul Bakker
· 12 years ago
05decb2
Made support for the max_fragment_length extension configurable
by Paul Bakker
· 12 years ago
606b4ba
Session ticket expiration checked on server
by Paul Bakker
· 12 years ago
a503a63
Made session tickets support configurable from config.h
by Paul Bakker
· 12 years ago
56dc9e8
Authenticate session tickets.
by Manuel Pégourié-Gonnard
· 12 years ago
990c51a
Encrypt session tickets
by Manuel Pégourié-Gonnard
· 12 years ago
779e429
Start adding ticket keys (only key_name for now)
by Manuel Pégourié-Gonnard
· 12 years ago
aa0d4d1
Add ssl_set_session_tickets()
by Manuel Pégourié-Gonnard
· 12 years ago
06650f6
Fix reusing session more than once
by Manuel Pégourié-Gonnard
· 12 years ago
c086cce
Don't cache empty session ID nor resumed session
by Manuel Pégourié-Gonnard
· 12 years ago
7cd5924
Rework NewSessionTicket handling in state machine
by Manuel Pégourié-Gonnard
· 12 years ago
7a358b8
ssl_srv: write & parse session ticket ext & msg
by Manuel Pégourié-Gonnard
· 12 years ago
a5cc602
Parse NewSessionTicket message
by Manuel Pégourié-Gonnard
· 12 years ago
75d4401
Introduce ticket field in session structure
by Manuel Pégourié-Gonnard
· 12 years ago
5f280cc
Implement saving peer cert as part of session.
by Manuel Pégourié-Gonnard
· 12 years ago
7471803
Add ssl_get_session() to save session on client
by Manuel Pégourié-Gonnard
· 12 years ago
8c1ede6
Changed prototype for ssl_set_truncated_hmac() to allow disabling
by Paul Bakker
· 12 years ago
277f7f2
Implement hmac truncation
by Manuel Pégourié-Gonnard
· 12 years ago
e980a99
Add interface for truncated hmac
by Manuel Pégourié-Gonnard
· 12 years ago
e048b67
Misc minor fixes
by Manuel Pégourié-Gonnard
· 12 years ago
ed4af8b
Move negotiated max fragment length to session
by Manuel Pégourié-Gonnard
· 12 years ago
581e6b6
Prepare migrating max fragment length to session
by Manuel Pégourié-Gonnard
· 12 years ago
Next »