TrustedFirmware Git Browser
Code Review
Sign In
review.trustedfirmware.org
/
mirror
/
mbed-tls
/
23b7b703aa3cbbbcc87eda7aa7bc09892a00bc2a
/
include
/
polarssl
/
ssl.h
23b7b70
Fix issue with renego & resend
by Manuel Pégourié-Gonnard
· 11 years ago
2739313
Make anti-replay a runtime option
by Manuel Pégourié-Gonnard
· 11 years ago
246c13a
Fix epoch checking
by Manuel Pégourié-Gonnard
· 11 years ago
7a7e140
Add functions for replay protection
by Manuel Pégourié-Gonnard
· 11 years ago
5d8ba53
Expand and fix resend infrastructure
by Manuel Pégourié-Gonnard
· 11 years ago
ffa67be
Infrastructure for buffering & resending flights
by Manuel Pégourié-Gonnard
· 11 years ago
8fa6dfd
Introduce f_recv_timeout callback
by Manuel Pégourié-Gonnard
· 11 years ago
e6bdc44
Merge I/O contexts into one
by Manuel Pégourié-Gonnard
· 11 years ago
624bcb5
No memmove: done, rm temporary things
by Manuel Pégourié-Gonnard
· 11 years ago
f899583
Prepare moving away from memmove() on incoming HS
by Manuel Pégourié-Gonnard
· 11 years ago
9d1d719
Check length before reading handshake header
by Manuel Pégourié-Gonnard
· 11 years ago
d9ba0d9
Prepare for checking incoming handshake seqnum
by Manuel Pégourié-Gonnard
· 11 years ago
64dffc5
Make handshake reassembly work with openssl
by Manuel Pégourié-Gonnard
· 11 years ago
502bf30
Handle reassembly of handshake messages
by Manuel Pégourié-Gonnard
· 11 years ago
562eb78
Add and use POLARSSL_ERR_SSL_BUFFER_TOO_SMALL
by Manuel Pégourié-Gonnard
· 11 years ago
7d38d21
Allow disabling HelloVerifyRequest
by Manuel Pégourié-Gonnard
· 11 years ago
232edd4
Move cookie callbacks implementation to own module
by Manuel Pégourié-Gonnard
· 11 years ago
d485d19
Move to a callback interface for DTLS cookies
by Manuel Pégourié-Gonnard
· 11 years ago
d7f9bc5
Refactor cookie to prepare for external callbacks
by Manuel Pégourié-Gonnard
· 11 years ago
82202f0
Make DTLS_HELLO_VERIFY a compile option
by Manuel Pégourié-Gonnard
· 11 years ago
98545f1
Generate random key for HelloVerifyRequest
by Manuel Pégourié-Gonnard
· 11 years ago
43c0218
Add ssl_set_client_transport_id()
by Manuel Pégourié-Gonnard
· 11 years ago
2c9ee81
Start adding srv support for hello verify request
by Manuel Pégourié-Gonnard
· 11 years ago
67427c0
Fix checksum computation with HelloVerifyRequest
by Manuel Pégourié-Gonnard
· 11 years ago
7484881
Implement HelloVerifyRequest on client
by Manuel Pégourié-Gonnard
· 11 years ago
b2f3be8
Support multiple records in one datagram
by Manuel Pégourié-Gonnard
· 11 years ago
34c1011
Fix a few warnings in reduced configs
by Manuel Pégourié-Gonnard
· 11 years ago
fe98ace
Adapt ssl_fetch_input() for UDP
by Manuel Pégourié-Gonnard
· 11 years ago
e89bcf0
Write new DTLS handshake fields correctly
by Manuel Pégourié-Gonnard
· 11 years ago
0619348
Add explicit counter in DTLS record header
by Manuel Pégourié-Gonnard
· 11 years ago
7ee6f0e
Preparation: allow {in,out}_ctr != {in,out}_buf
by Manuel Pégourié-Gonnard
· 11 years ago
abc7e3b
Handle DTLS version encoding and fix some checks
by Manuel Pégourié-Gonnard
· 11 years ago
864a81f
More ssl_set_XXX() functions can return BAD_INPUT
by Manuel Pégourié-Gonnard
· 11 years ago
b21ca2a
Adapt version-handling functions to DTLS
by Manuel Pégourié-Gonnard
· 11 years ago
0b1ff29
Add basic flags for DTLS
by Manuel Pégourié-Gonnard
· 11 years ago
9e4ff95
Clarified len parameter of ssl_read()
by Paul Bakker
· 11 years ago
44ade65
Implement (partial) renego delay on client
by Manuel Pégourié-Gonnard
· 11 years ago
6591962
Allow delay on renego on client
by Manuel Pégourié-Gonnard
· 11 years ago
55e4ff2
Tune comments
by Manuel Pégourié-Gonnard
· 11 years ago
8d4ad07
SHA-2 ciphersuites now require TLS 1.x
by Manuel Pégourié-Gonnard
· 11 years ago
accaffe
Restructure ssl_handshake_init() and small fixes
by Paul Bakker
· 11 years ago
08e81e0
Change selection of hash algorithm for TLS 1.2
by Manuel Pégourié-Gonnard
· 11 years ago
8fb99ab
Merge changes for leaner memory footprint
by Paul Bakker
· 11 years ago
481fcfd
Make PSK_LEN configurable and adjust PMS size
by Manuel Pégourié-Gonnard
· 11 years ago
a9964db
Add ssl_set_renegotiation_enforced()
by Manuel Pégourié-Gonnard
· 11 years ago
c27807d
Make SSL_BUFFER_LEN overhead depend more on config
by Manuel Pégourié-Gonnard
· 11 years ago
08485cc
Fix SSL_BUFFER_LEN
by Manuel Pégourié-Gonnard
· 11 years ago
b9e4e2c
Fix formatting: fix some 'easy' > 80 length lines
by Paul Bakker
· 11 years ago
9af723c
Fix formatting: remove trailing spaces, #endif with comments (> 10 lines)
by Paul Bakker
· 11 years ago
cef4ad2
Adapt sources to configurable config.h name
by Manuel Pégourié-Gonnard
· 11 years ago
088c5c5
POLARSSL_CONFIG_OPTIONS has been removed. Values are set individually
by Paul Bakker
· 11 years ago
043a2e2
Merge verification of the keyUsage extension in X.509 certificates
by Paul Bakker
· 11 years ago
7f2a07d
Check keyUsage in SSL client and server
by Manuel Pégourié-Gonnard
· 11 years ago
75342a6
Fixed typos in code
by Paul Bakker
· 11 years ago
89e3579
Implement ALPN server-side
by Manuel Pégourié-Gonnard
· 11 years ago
0b874dc
Implement ALPN client-side
by Manuel Pégourié-Gonnard
· 11 years ago
7e250d4
Add ALPN interface
by Manuel Pégourié-Gonnard
· 11 years ago
7a2aba8
Deprecate some non-PK compatibility functions
by Manuel Pégourié-Gonnard
· 11 years ago
a612b44
Fix typo in doc
by Manuel Pégourié-Gonnard
· 11 years ago
e2ce211
Update doc of ssl_set_authmode()
by Manuel Pégourié-Gonnard
· 11 years ago
83cdffc
Forbid sequence number wrapping
by Manuel Pégourié-Gonnard
· 11 years ago
ab24010
Enforce our choice of allowed curves.
by Manuel Pégourié-Gonnard
· 12 years ago
7f38ed0
ssl_set_curves is no longer ECDHE only
by Manuel Pégourié-Gonnard
· 12 years ago
cd49f76
Make ssl_set_curves() work client-side too.
by Manuel Pégourié-Gonnard
· 12 years ago
de05390
Rename ecdh_curve_list to curve_list
by Manuel Pégourié-Gonnard
· 12 years ago
5de2580
Make ssl_set_ecdh_curves() a compile-time option
by Manuel Pégourié-Gonnard
· 12 years ago
987bfb5
Added the possibility to define the allowed curves for ECDHE handshake. It also defines the preference of the curves.
by Gergely Budai
· 12 years ago
cf1d73b
Clarified ssl_set_ciphersuites() doc for influencing preference as well
by Paul Bakker
· 12 years ago
956c9e0
Reduced the input / output overhead with 200+ bytes and covered corner case
by Paul Bakker
· 12 years ago
c72ac7c
Fix SSLv3 handling of SHA-384 suites
by Manuel Pégourié-Gonnard
· 12 years ago
a9a028e
SSL now gracefully handles missing RNG
by Paul Bakker
· 12 years ago
28d81a0
Fix pkcs11.c to conform to PolarSSL 1.3 API.
by Steffan Karger
· 12 years ago
993e386
Merged renegotiation refactoring
by Paul Bakker
· 12 years ago
31ff1d2
Safer buffer comparisons in the SSL modules
by Manuel Pégourié-Gonnard
· 12 years ago
6d8404d
Server: enforce renegotiation
by Manuel Pégourié-Gonnard
· 12 years ago
9c1e189
Move some code around, improve documentation
by Manuel Pégourié-Gonnard
· 12 years ago
214eed3
Make ssl_renegotiate the only interface
by Manuel Pégourié-Gonnard
· 12 years ago
caed054
Allow ssl_renegotiate() to be called in a loop
by Manuel Pégourié-Gonnard
· 12 years ago
f3dc2f6
Add code for testing server-initiated renegotiation
by Manuel Pégourié-Gonnard
· 12 years ago
60b1d10
Fixed spelling / typos (from PowerDNS:codespell)
by Paul Bakker
· 12 years ago
1642122
Merged support for Camellia-GCM + ciphersuite and fixes to cipher layer
by Paul Bakker
· 12 years ago
677377f
Server does not send out extensions not advertised by client
by Paul Bakker
· 12 years ago
a8a25ae
Fix bad error codes
by Manuel Pégourié-Gonnard
· 12 years ago
f34673e
Merged RSA-PSK key-exchange and ciphersuites
by Paul Bakker
· 12 years ago
376e815
Merged ECDHE-PSK ciphersuites
by Paul Bakker
· 12 years ago
8a3c64d
Fix and simplify *-PSK ifdef's
by Manuel Pégourié-Gonnard
· 12 years ago
1b62c7f
Fix dependencies and related issues
by Manuel Pégourié-Gonnard
· 12 years ago
bd1ae24
Factor PSK pms computation to ssl_tls.c
by Manuel Pégourié-Gonnard
· 12 years ago
1677033
TLS compression only allocates working buffer once
by Paul Bakker
· 12 years ago
6838bd1
Clarified threading issues
by Paul Bakker
· 12 years ago
8372454
Rework SNI to fix memory issues
by Manuel Pégourié-Gonnard
· 12 years ago
705fcca
Adapt support for SNI to recent changes
by Manuel Pégourié-Gonnard
· 12 years ago
d09453c
Check our ECDSA cert(s) against supported curves
by Manuel Pégourié-Gonnard
· 12 years ago
3ebb2cd
Add support for multiple server certificates
by Manuel Pégourié-Gonnard
· 12 years ago
834ea85
Change internal structs for multi-cert support
by Manuel Pégourié-Gonnard
· 12 years ago
cbf3ef3
RSA and ECDSA key exchanges don't depend on CRL
by Manuel Pégourié-Gonnard
· 12 years ago
1a48383
SSL_TLS doesn't depend on PK any more
by Manuel Pégourié-Gonnard
· 12 years ago
1032c1d
Fix some dependencies and warnings in small config
by Manuel Pégourié-Gonnard
· 12 years ago
6db455e
PSK callback added to SSL server
by Paul Bakker
· 12 years ago
c559c7a
Renamed x509_cert structure to x509_crt for consistency
by Paul Bakker
· 12 years ago
Next »