TrustedFirmware Git Browser
Code Review Sign In
review.trustedfirmware.org / mirror / mbed-tls.git / f16db18c55039452012f56413c51e89c1981fcc4 / library / ssl_tls.c
  1. 8c1ede6 Changed prototype for ssl_set_truncated_hmac() to allow disabling by Paul Bakker · 12 years ago
  2. 277f7f2 Implement hmac truncation by Manuel Pégourié-Gonnard · 12 years ago
  3. e980a99 Add interface for truncated hmac by Manuel Pégourié-Gonnard · 12 years ago
  4. e048b67 Misc minor fixes by Manuel Pégourié-Gonnard · 12 years ago
  5. ed4af8b Move negotiated max fragment length to session by Manuel Pégourié-Gonnard · 12 years ago
  6. 581e6b6 Prepare migrating max fragment length to session by Manuel Pégourié-Gonnard · 12 years ago
  7. 6b4f237 Forbid setting max_frag_len > MAX_CONTENT_LEN by Manuel Pégourié-Gonnard · 12 years ago
  8. 30dc7ef Reset max_fragment_length in ssl_session_reset() by Manuel Pégourié-Gonnard · 12 years ago
  9. 787b658 Implement max_frag_len write restriction by Manuel Pégourié-Gonnard · 12 years ago
  10. 8b46459 Add ssl_set_max_frag_len() by Manuel Pégourié-Gonnard · 12 years ago
  11. 61d113b Init and free new contexts in the right place for SSL to prevent memory leaks by Paul Bakker · 12 years ago
  12. fa9b100 Also compiles / runs without time-based functions in OS by Paul Bakker · 12 years ago
  13. 6e339b5 Memory-allocation abstraction layer and buffer-based allocator added by Paul Bakker · 12 years ago
  14. abf2f8f zlib compression/decompression skipped on empty blocks by Paul Bakker · 12 years ago
  15. e5bffc3 Removed redundant includes by Paul Bakker · 12 years ago
  16. d2681d8 Renamed sha2.{c,h} to sha256.{c,h} and sha4.{c,h} to sha512.{c,h} by Paul Bakker · 12 years ago
  17. 9e36f04 SHA2 renamed to SHA256, SHA4 renamed to SHA512 and functions accordingly by Paul Bakker · 12 years ago
  18. 2fbefde Client and server now filter sent and accepted ciphersuites on minimum by Paul Bakker · 12 years ago
  19. b6c5d2e Cleanup up non-prototyped functions (static) and const-correctness by Paul Bakker · 12 years ago
  20. 90995b5 Added mechanism to provide alternative cipher / hash implementations by Paul Bakker · 12 years ago
  21. 89ecb2d ssl_parse_certificate() now calls x509parse_crt_der() directly by Paul Bakker · 12 years ago
  22. 3c2122f Fixed const correctness issues that have no impact on the ABI by Paul Bakker · 12 years ago
  23. 48f7a5d DHE-PSK based ciphersuite support added and cleaner key exchange based by Paul Bakker · 12 years ago
  24. ed27a04 More granular define selections within code to allow for smaller code sizes by Paul Bakker · 12 years ago
  25. d4a56ec Added pre-shared key handling for the client side of SSL / TLS by Paul Bakker · 12 years ago
  26. f7abd42 Removed extra spaces on end of lines by Paul Bakker · 12 years ago
  27. 8f4ddae Ability to specify allowed ciphersuites based on the protocol version. by Paul Bakker · 12 years ago
  28. b7149bc Corrected behaviour for CBC-based suites using the SHA384 MAC and PRF by Paul Bakker · 12 years ago
  29. 41c83d3 Added Ephemeral Elliptic Curve Diffie Hellman ciphersuites to SSL/TLS by Paul Bakker · 12 years ago
  30. 68884e3 Moved to advanced ciphersuite representation and more dynamic SSL code by Paul Bakker · 13 years ago
  31. c9118b4 Renamed hash structures to ctx by Paul Bakker · 12 years ago
  32. 92be97b Align data with future location based on IV size by Paul Bakker · 13 years ago
  33. 07eb38b Update ssl_hw_record_init() to receive keylen, ivlen and maclen as well by Paul Bakker · 13 years ago
  34. c787811 Do not set done in case of a fall-through by Paul Bakker · 13 years ago
  35. 5bd4229 Reverted commit 186751d9dd28082d4b19e69a2c15fd432d366133 and made out_hdr and out_msg back-to-back again by Paul Bakker · 13 years ago
  36. 926c8e4 Fixed possible NULL pointer exception in ssl_get_ciphersuite() by Paul Bakker · 12 years ago
  37. e47b34b Removed further timing differences during SSL message decryption in ssl_decrypt_buf() by Paul Bakker · 12 years ago
  38. 86f04f4 Fixed comment by Paul Bakker · 12 years ago
  39. c046350 Fixed memory leak in ssl_free() and ssl_reset() for active session by Paul Bakker · 12 years ago
  40. 40865c8 Added sending of alert messages in case of decryption failures as per RFC by Paul Bakker · 13 years ago
  41. d66f070 Disable debug messages that can introduce a timing side channel. by Paul Bakker · 13 years ago
  42. 4582999 Fixed timing difference resulting from badly formatted padding. by Paul Bakker · 13 years ago
  43. 1961b70 Added ssl_handshake_step() to allow single stepping the handshake process by Paul Bakker · 13 years ago
  44. 769075d Fixed dependency on POLARSSL_SHA4_C in ssl modules by Paul Bakker · 13 years ago
  45. 645ce3a - Moved ciphersuite naming scheme to IANA reserved names by Paul Bakker · 13 years ago
  46. b0550d9 - Added ssl_get_peer_cert() to SSL API by Paul Bakker · 13 years ago
  47. 23f3680 - Added proper support for TLS 1.2 signature_algorithm extension on server by Paul Bakker · 13 years ago
  48. 1d29fb5 - Added option to add minimum accepted SSL/TLS protocol version by Paul Bakker · 13 years ago
  49. 62f2dee - Set POLARSSL_DHM_RFC5114_MODP_1024_[PG] as default DHM MODP group for SSL/TLS by Paul Bakker · 13 years ago
  50. 915275b - Revamped x509_verify() and the SSL f_vrfy callback implementations by Paul Bakker · 13 years ago
  51. 5701cdc - Added ServerName extension parsing (SNI) at server side by Paul Bakker · 13 years ago
  52. eb2c658 - Generalized external private key implementation handling (like PKCS#11) in SSL/TLS by Paul Bakker · 13 years ago
  53. 0a59707 - Added simple SSL session cache implementation by Paul Bakker · 13 years ago
  54. d0f6fa7 - Sending of handshake_failures during renegotiation added by Paul Bakker · 13 years ago
  55. 48916f9 - Added Secure Renegotiation (RFC 5746) by Paul Bakker · 13 years ago
  56. 5f70b25 - Correctly handle SHA256 ciphersuites in SSLv3 by Paul Bakker · 13 years ago
  57. b68cad6 - Made cipersuites in ssl context const (no intention to modify) by Paul Bakker · 13 years ago
  58. 2770fbd - Added DEFLATE compression support as per RFC3749 (requires zlib) by Paul Bakker · 13 years ago
  59. 186751d - Moved out_msg to out_hdr + 32 to support hardware acceleration by Paul Bakker · 13 years ago
  60. 05ef835 - Added support for Hardware Acceleration hooking in SSL/TLS by Paul Bakker · 13 years ago
  61. 380da53 - Abstracted checksum updating during handshake by Paul Bakker · 13 years ago
  62. ca4ab49 - Added GCM ciphersuites to TLS implementation by Paul Bakker · 13 years ago
  63. 0a92518 - Report unexpected_message if unknown record type is received by Paul Bakker · 13 years ago
  64. 10cd225 - Added support for the SHA256 ciphersuites of AES and Camellia by Paul Bakker · 13 years ago
  65. 1ef83d6 - Initial bare version of TLS 1.2 by Paul Bakker · 13 years ago
  66. f34cf85 - Fixed too restrictive test by Paul Bakker · 13 years ago
  67. 452d532 - Fixed potential memory corruption on miscrafted client messages (found by Frama-C team at CEA LIST) by Paul Bakker · 13 years ago
  68. fab5c82 - Added support for NULL cipher (POLARSSL_CIPHER_NULL_CIPHER) and weak ciphersuites (POLARSSL_ENABLE_WEAK_CIPHERSUITES). They are disabled by default! by Paul Bakker · 13 years ago
  69. b15b851 - Check for failed malloc() in ssl_set_hostname() and x509_get_entries() (Closes ticket #47, found by Hugo Leisink) by Paul Bakker · 14 years ago
  70. 69e095c - Changed the behaviour of x509parse_parse_crt for permissive parsing. Now returns the number of 'failed certificates' instead of having a switch to enable it. by Paul Bakker · 14 years ago
  71. 6c0ceb3 - Added permissive certificate parsing to x509parse_crt() and x509parse_crtfile(). With permissive parsing the parsing does not stop on encountering a parse-error by Paul Bakker · 14 years ago
  72. a3d195c - Changed the used random function pointer to more flexible format. Renamed havege_rand() to havege_random() to prevent mistakes. Lots of changes as a consequence in library code and programs by Paul Bakker · 14 years ago
  73. 490ecc8 - Added ssl_set_max_version() to set the client's maximum sent version number by Paul Bakker · 14 years ago
  74. 7eb013f - Added ssl_session_reset() to allow re-use of already set non-connection specific context information by Paul Bakker · 14 years ago
  75. 8934a98 - Fixed memcpy() that had possible overlapping areas to memmove() by Paul Bakker · 14 years ago
  76. 39bb418 - Made second argument of f_send() prototype and of net_send() const by Paul Bakker · 14 years ago
  77. 887bd50 - Undid fix for ssl_write that introduced a true bug when buffers are running full. by Paul Bakker · 14 years ago
  78. 831a755 - Changed behaviour of net_recv(), ssl_fetch_input() and ssl_read(). net_recv() now returns 0 on EOF instead of POLARSSL_ERR_NET_CONN_RESET. ssl_fetch_input() returns POLARSSL_ERR_SSL_CONN_EOF on an EOF from its f_recv() function. ssl_read() returns 0 if a POLARSSL_ERR_SSL_CONN_EOF is received after the handshake. by Paul Bakker · 14 years ago
  79. 9d78140 - A error_strerror function() has been added to translate between error codes and their description. by Paul Bakker · 14 years ago
  80. 23986e5 - Major type rewrite of int to size_t for most variables and arguments used for buffer lengths and loops by Paul Bakker · 14 years ago
  81. af5c85f - Improved portability with Microsoft Visual C by Paul Bakker · 14 years ago
  82. 1fd00bf - Fixed bug in ssl_write() when flushing old data (Fixes ticket #18) by Paul Bakker · 14 years ago
  83. cdf07e9 - Information about missing or non-verified client certificate is not provided as well. by Paul Bakker · 15 years ago
  84. e3166ce - Renamed ciphers member of ssl_context and cipher member of ssl_session to ciphersuites and ciphersuite respectively. This clarifies the difference with the generic cipher layer and is better naming altogether by Paul Bakker · 15 years ago
  85. 43b7e35 - Support for PKCS#11 through the use of the pkcs11-helper library by Paul Bakker · 15 years ago
  86. 72f6266 - Improved information provided about current Hashing, Cipher and Suite capabilities by Paul Bakker · 15 years ago
  87. 43ca69c - Added function for stringified SSL/TLS version by Paul Bakker · 15 years ago
  88. b63b0af - Added verification callback in certificate verification chain in order to allow external blacklisting by Paul Bakker · 15 years ago
  89. 1b57b06 - Added reading of DHM context from memory and file by Paul Bakker · 15 years ago
  90. 2e11f7d - Added support for TLS v1.1 by Paul Bakker · 15 years ago
  91. b96f154 - Fixed copyright message by Paul Bakker · 15 years ago
  92. 84f12b7 - Updated Copyright to correct entity by Paul Bakker · 15 years ago
  93. 77a4358 - Added support for the SSL_EDH_RSA_AES_128_SHA and SSL_EDH_RSA_CAMELLIA_128_SHA ciphersuites by Paul Bakker · 15 years ago
  94. 57b7914 - String peer_cn in ssl context made const as well. by Paul Bakker · 15 years ago
  95. 2908713 - Corrected behaviour by Paul Bakker · 15 years ago
  96. fc8c436 - Updated copyright line to 2010 by Paul Bakker · 15 years ago
  97. 1f3c39c - Removed copyright line for Christophe Devine for clarity by Paul Bakker · 15 years ago
  98. baad650 - Changed ARC4 to use seperate input/output buffer by Paul Bakker · 15 years ago
  99. ff60ee6 - Added const-correctness to main codebase by Paul Bakker · 15 years ago
  100. 1f76115 - Fixed bug resulting in failure to send the last certificate in the chain in ssl_write_certificate() and ssl_write_certificate_request() by Paul Bakker · 15 years ago