1. 834ea85 Change internal structs for multi-cert support by Manuel Pégourié-Gonnard · 12 years ago
  2. a7496f0 Fix a few more warnings in small configurations by Manuel Pégourié-Gonnard · 12 years ago
  3. 1032c1d Fix some dependencies and warnings in small config by Manuel Pégourié-Gonnard · 12 years ago
  4. da179e4 Add ecp_curve_list(), hide ecp_supported_curves by Manuel Pégourié-Gonnard · 12 years ago
  5. a310459 Fix a few things that broke with RSA compiled out by Manuel Pégourié-Gonnard · 12 years ago
  6. 56cd319 Add human-friendly name in ecp_curve_info by Manuel Pégourié-Gonnard · 12 years ago
  7. a79d123 Make ecp_supported_curves constant by Manuel Pégourié-Gonnard · 12 years ago
  8. 15d5de1 Simplify usage of DHM blinding by Manuel Pégourié-Gonnard · 12 years ago
  9. 568c9cf Add ecp_supported_curves and simplify some code by Manuel Pégourié-Gonnard · 12 years ago
  10. 7038039 Dissociate TLS and internal EC curve identifiers by Manuel Pégourié-Gonnard · 12 years ago
  11. a97c015 Rm useless/wrong DHM lenght test by Manuel Pégourié-Gonnard · 12 years ago
  12. 032c34e Don't use DH blinding for ephemeral DH by Manuel Pégourié-Gonnard · 12 years ago
  13. 2d62764 Change dhm_calc_secret() prototype by Manuel Pégourié-Gonnard · 12 years ago
  14. e09d2f8 Change ecp_mul() prototype to allow randomization by Manuel Pégourié-Gonnard · 12 years ago
  15. 9659dae Some extra code defined out by Paul Bakker · 12 years ago
  16. 577e006 Merged ECDSA-based key-exchange and ciphersuites into development by Paul Bakker · 12 years ago
  17. 9cc6f5c Fix some hash debugging by Manuel Pégourié-Gonnard · 12 years ago
  18. 4bd1284 Fix ECDSA hash selection bug with TLS 1.0 and 1.1 by Manuel Pégourié-Gonnard · 12 years ago
  19. 9c9812a Fix bug introduced in dbf69cf by Manuel Pégourié-Gonnard · 12 years ago
  20. e511ffc Allow compiling without RSA or DH by Manuel Pégourié-Gonnard · 12 years ago
  21. f484282 Rm a few unneeded tests by Manuel Pégourié-Gonnard · 12 years ago
  22. d11eb7c Fix sig_alg extension on client. by Manuel Pégourié-Gonnard · 12 years ago
  23. bfe32ef pk_{sign,verify}() now accept hash_len = 0 by Manuel Pégourié-Gonnard · 12 years ago
  24. a20c58c Use convert functions for SSL_SIG_* and SSL_HASH_* by Manuel Pégourié-Gonnard · 12 years ago
  25. 0d42049 Merge code for RSA and ECDSA in SSL by Manuel Pégourié-Gonnard · 12 years ago
  26. 070cc7f Use the new PK RSA-alt interface by Manuel Pégourié-Gonnard · 12 years ago
  27. a2d3f22 Add and use pk_encrypt(), pk_decrypt() by Manuel Pégourié-Gonnard · 12 years ago
  28. 8df2769 Introduce pk_sign() and use it in ssl by Manuel Pégourié-Gonnard · 12 years ago
  29. 583b608 Fix some return values by Manuel Pégourié-Gonnard · 12 years ago
  30. 76c18a1 Add client support for ECDSA client auth by Manuel Pégourié-Gonnard · 12 years ago
  31. 09edda8 Check key type against selected key exchange by Manuel Pégourié-Gonnard · 12 years ago
  32. 20846b1 Add client support for ECDHE_ECDSA key exchange by Manuel Pégourié-Gonnard · 12 years ago
  33. efebb0a Refactor ssl_parse_server_key_exchange() a bit by Manuel Pégourié-Gonnard · 12 years ago
  34. 0be444a Ability to disable server_name extension (RFC 6066) by Paul Bakker · 12 years ago
  35. d2f068e Ability to enable / disable SSL v3 / TLS 1.0 / TLS 1.1 / TLS 1.2 individually by Paul Bakker · 12 years ago
  36. b3d9187 PK: add nice interface functions by Manuel Pégourié-Gonnard · 12 years ago
  37. 04376b1 Fixed memory leak in ssl_parse_server_key_exchange from missing md_free_ctx() by Paul Bakker · 12 years ago
  38. 0b27267 Fix ifdef conditions for EC-related extensions. by Manuel Pégourié-Gonnard · 12 years ago
  39. 5734b2d Actually use the point format selected for ECDH by Manuel Pégourié-Gonnard · 12 years ago
  40. 7b19c16 Handle suported_point_formats in ServerHello by Manuel Pégourié-Gonnard · 12 years ago
  41. 6b8846d Stop advertising support for compressed points by Manuel Pégourié-Gonnard · 12 years ago
  42. 1f2bc62 Made support for the truncated_hmac extension configurable by Paul Bakker · 12 years ago
  43. 05decb2 Made support for the max_fragment_length extension configurable by Paul Bakker · 12 years ago
  44. a503a63 Made session tickets support configurable from config.h by Paul Bakker · 12 years ago
  45. aa0d4d1 Add ssl_set_session_tickets() by Manuel Pégourié-Gonnard · 12 years ago
  46. 7cd5924 Rework NewSessionTicket handling in state machine by Manuel Pégourié-Gonnard · 12 years ago
  47. 6377e41 Complete client support for session tickets by Manuel Pégourié-Gonnard · 12 years ago
  48. a5cc602 Parse NewSessionTicket message by Manuel Pégourié-Gonnard · 12 years ago
  49. 60182ef ssl_cli: write & parse session ticket extension by Manuel Pégourié-Gonnard · 12 years ago
  50. 57c2852 Added truncated hmac negociation (without effect) by Manuel Pégourié-Gonnard · 12 years ago
  51. e048b67 Misc minor fixes by Manuel Pégourié-Gonnard · 12 years ago
  52. de600e5 Read max_fragment_length extension (client) by Manuel Pégourié-Gonnard · 12 years ago
  53. a052849 Send max_fragment_length extension (client) by Manuel Pégourié-Gonnard · 12 years ago
  54. ff56da3 Fix direct uses of x509_cert.rsa, now use pk_rsa() by Manuel Pégourié-Gonnard · 12 years ago
  55. 61d113b Init and free new contexts in the right place for SSL to prevent memory leaks by Paul Bakker · 12 years ago
  56. fa9b100 Also compiles / runs without time-based functions in OS by Paul Bakker · 12 years ago
  57. 9e36f04 SHA2 renamed to SHA256, SHA4 renamed to SHA512 and functions accordingly by Paul Bakker · 12 years ago
  58. 3866b9f Removed redundant inclusion by Paul Bakker · 12 years ago
  59. 5dc6b5f Made supported curves configurable by Paul Bakker · 12 years ago
  60. 2fbefde Client and server now filter sent and accepted ciphersuites on minimum by Paul Bakker · 12 years ago
  61. c5a79cc Fixed compiler warnings for unused parameter ssl by Paul Bakker · 12 years ago
  62. 73d4431 Fixed parse error in ssl_parse_certificate_request() by Paul Bakker · 12 years ago
  63. 48f7a5d DHE-PSK based ciphersuite support added and cleaner key exchange based by Paul Bakker · 12 years ago
  64. 188c8de Only allow missing SereverKeyExchange message in bare PSK mode by Paul Bakker · 12 years ago
  65. ed27a04 More granular define selections within code to allow for smaller code sizes by Paul Bakker · 12 years ago
  66. d4a56ec Added pre-shared key handling for the client side of SSL / TLS by Paul Bakker · 12 years ago
  67. f7abd42 Removed extra spaces on end of lines by Paul Bakker · 12 years ago
  68. 29e1f12 split parts of ssl_parse_server_key_exchange() into separate functions by Paul Bakker · 12 years ago
  69. 8f4ddae Ability to specify allowed ciphersuites based on the protocol version. by Paul Bakker · 12 years ago
  70. c70b982 OID functionality moved to a separate module. by Paul Bakker · 12 years ago
  71. 3b6a07b Prevented compiler warning on uninitialized end by Paul Bakker · 12 years ago
  72. d3edc86 Moved writing of client extensions to separate functions in ssl_cli.c by Paul Bakker · 12 years ago
  73. b7149bc Corrected behaviour for CBC-based suites using the SHA384 MAC and PRF by Paul Bakker · 12 years ago
  74. 41c83d3 Added Ephemeral Elliptic Curve Diffie Hellman ciphersuites to SSL/TLS by Paul Bakker · 12 years ago
  75. 68884e3 Moved to advanced ciphersuite representation and more dynamic SSL code by Paul Bakker · 13 years ago
  76. 1961b70 Added ssl_handshake_step() to allow single stepping the handshake process by Paul Bakker · 13 years ago
  77. 9c94cdd Correctly handle CertificateRequest with empty DN list in <= TLS 1.1 by Paul Bakker · 13 years ago
  78. 769075d Fixed dependency on POLARSSL_SHA4_C in ssl modules by Paul Bakker · 13 years ago
  79. 926af75 Fixed client certificate handling with TLS 1.2 by Paul Bakker · 13 years ago
  80. 645ce3a - Moved ciphersuite naming scheme to IANA reserved names by Paul Bakker · 13 years ago
  81. 993d11d - Send ClientHello with 'minimal version' by Paul Bakker · 13 years ago
  82. 23f3680 - Added proper support for TLS 1.2 signature_algorithm extension on server by Paul Bakker · 13 years ago
  83. 1d29fb5 - Added option to add minimum accepted SSL/TLS protocol version by Paul Bakker · 13 years ago
  84. eb2c658 - Generalized external private key implementation handling (like PKCS#11) in SSL/TLS by Paul Bakker · 13 years ago
  85. 0a59707 - Added simple SSL session cache implementation by Paul Bakker · 13 years ago
  86. 29b6476 - Added predefined DHM groups from RFC 5114 by Paul Bakker · 13 years ago
  87. d0f6fa7 - Sending of handshake_failures during renegotiation added by Paul Bakker · 13 years ago
  88. 48916f9 - Added Secure Renegotiation (RFC 5746) by Paul Bakker · 13 years ago
  89. 2770fbd - Added DEFLATE compression support as per RFC3749 (requires zlib) by Paul Bakker · 13 years ago
  90. 380da53 - Abstracted checksum updating during handshake by Paul Bakker · 13 years ago
  91. ca4ab49 - Added GCM ciphersuites to TLS implementation by Paul Bakker · 13 years ago
  92. 10cd225 - Added support for the SHA256 ciphersuites of AES and Camellia by Paul Bakker · 13 years ago
  93. bf63b36 - Updated comments by Paul Bakker · 13 years ago
  94. c3f177a - Added client side support for signature_algorithm extension and affiliated handling by Paul Bakker · 13 years ago
  95. 1ef83d6 - Initial bare version of TLS 1.2 by Paul Bakker · 13 years ago
  96. 1504af5 - Removed redundant POLARSSL_DEBUG_MSG define by Paul Bakker · 13 years ago
  97. fab5c82 - Added support for NULL cipher (POLARSSL_CIPHER_NULL_CIPHER) and weak ciphersuites (POLARSSL_ENABLE_WEAK_CIPHERSUITES). They are disabled by default! by Paul Bakker · 13 years ago
  98. 87e5cda - Fixed warning for t if no debugging defined by Paul Bakker · 14 years ago
  99. 55d3fd9 - Enlarged maximum size of DHM a client accepts to 512 bytes by Paul Bakker · 14 years ago
  100. a3d195c - Changed the used random function pointer to more flexible format. Renamed havege_rand() to havege_random() to prevent mistakes. Lots of changes as a consequence in library code and programs by Paul Bakker · 14 years ago