TrustedFirmware Git Browser
Code Review
Sign In
review.trustedfirmware.org
/
mirror
/
mbed-tls
/
4087c47043cb7b8b51e69f1de47ab6a2bccead3d
/
include
/
polarssl
/
ssl.h
f4a84b1
Added default value comment for ssl_set_ciphersuites*()
by Paul Bakker
· 12 years ago
a627298
Ability to specify allowed ciphersuites based on the protocol version.
by Paul Bakker
· 12 years ago
1961b70
Added ssl_handshake_step() to allow single stepping the handshake process
by Paul Bakker
· 13 years ago
926af75
Fixed client certificate handling with TLS 1.2
by Paul Bakker
· 13 years ago
e667c98
Added p_hw_data to ssl_context for context specific hardware acceleration data
by Paul Bakker
· 13 years ago
1f9d02d
Added more notes / comments on own_cert, trust_ca purposes
by Paul Bakker
· 13 years ago
6831c4a
- Fixed typos
by Paul Bakker
· 13 years ago
7c90078
- Default to disabled renegotiation
by Paul Bakker
· 13 years ago
7a2538e
- Fixes for MSVC6
by Paul Bakker
· 13 years ago
645ce3a
- Moved ciphersuite naming scheme to IANA reserved names
by Paul Bakker
· 13 years ago
b0550d9
- Added ssl_get_peer_cert() to SSL API
by Paul Bakker
· 13 years ago
df2bb75
- Premaster should have a maximum of MPI size
by Paul Bakker
· 13 years ago
09f097d
- Added more documentation on disable / enable renegotiation
by Paul Bakker
· 13 years ago
0f5281a
- Enlarged buffer to fit gcm_context on all platforms
by Paul Bakker
· 13 years ago
5c2364c
- Moved from unsigned long to uint32_t throughout code
by Paul Bakker
· 13 years ago
6adff74
- Fixed typo
by Paul Bakker
· 13 years ago
23f3680
- Added proper support for TLS 1.2 signature_algorithm extension on server
by Paul Bakker
· 13 years ago
1d29fb5
- Added option to add minimum accepted SSL/TLS protocol version
by Paul Bakker
· 13 years ago
62f2dee
- Set POLARSSL_DHM_RFC5114_MODP_1024_[PG] as default DHM MODP group for SSL/TLS
by Paul Bakker
· 13 years ago
915275b
- Revamped x509_verify() and the SSL f_vrfy callback implementations
by Paul Bakker
· 13 years ago
5701cdc
- Added ServerName extension parsing (SNI) at server side
by Paul Bakker
· 13 years ago
eb2c658
- Generalized external private key implementation handling (like PKCS#11) in SSL/TLS
by Paul Bakker
· 13 years ago
0a59707
- Added simple SSL session cache implementation
by Paul Bakker
· 13 years ago
d0f6fa7
- Sending of handshake_failures during renegotiation added
by Paul Bakker
· 13 years ago
48916f9
- Added Secure Renegotiation (RFC 5746)
by Paul Bakker
· 13 years ago
b68cad6
- Made cipersuites in ssl context const (no intention to modify)
by Paul Bakker
· 13 years ago
2770fbd
- Added DEFLATE compression support as per RFC3749 (requires zlib)
by Paul Bakker
· 13 years ago
186751d
- Moved out_msg to out_hdr + 32 to support hardware acceleration
by Paul Bakker
· 13 years ago
05ef835
- Added support for Hardware Acceleration hooking in SSL/TLS
by Paul Bakker
· 13 years ago
380da53
- Abstracted checksum updating during handshake
by Paul Bakker
· 13 years ago
ca4ab49
- Added GCM ciphersuites to TLS implementation
by Paul Bakker
· 13 years ago
0a92518
- Report unexpected_message if unknown record type is received
by Paul Bakker
· 13 years ago
10cd225
- Added support for the SHA256 ciphersuites of AES and Camellia
by Paul Bakker
· 13 years ago
c3f177a
- Added client side support for signature_algorithm extension and affiliated handling
by Paul Bakker
· 13 years ago
1ef83d6
- Initial bare version of TLS 1.2
by Paul Bakker
· 13 years ago
e93dfa7
- Added hex documentation for alerts
by Paul Bakker
· 13 years ago
fab5c82
- Added support for NULL cipher (POLARSSL_CIPHER_NULL_CIPHER) and weak ciphersuites (POLARSSL_ENABLE_WEAK_CIPHERSUITES). They are disabled by default!
by Paul Bakker
· 13 years ago
b15b851
- Check for failed malloc() in ssl_set_hostname() and x509_get_entries() (Closes ticket #47, found by Hugo Leisink)
by Paul Bakker
· 14 years ago
69e095c
- Changed the behaviour of x509parse_parse_crt for permissive parsing. Now returns the number of 'failed certificates' instead of having a switch to enable it.
by Paul Bakker
· 14 years ago
a3d195c
- Changed the used random function pointer to more flexible format. Renamed havege_rand() to havege_random() to prevent mistakes. Lots of changes as a consequence in library code and programs
by Paul Bakker
· 14 years ago
490ecc8
- Added ssl_set_max_version() to set the client's maximum sent version number
by Paul Bakker
· 14 years ago
7eb013f
- Added ssl_session_reset() to allow re-use of already set non-connection specific context information
by Paul Bakker
· 14 years ago
314052f
- Removed extraneous "polarssl/" in front on include directives in header files
by Paul Bakker
· 14 years ago
09b1ec6
- Adapted define for inline to be more solid
by Paul Bakker
· 14 years ago
74fb74e
- Updated ARMCC_VERSION to __ARMCC_VERSION
by Paul Bakker
· 14 years ago
569df2c
- Fixed inline definition for ARM systems
by Paul Bakker
· 14 years ago
39bb418
- Made second argument of f_send() prototype and of net_send() const
by Paul Bakker
· 14 years ago
831a755
- Changed behaviour of net_recv(), ssl_fetch_input() and ssl_read(). net_recv() now returns 0 on EOF instead of POLARSSL_ERR_NET_CONN_RESET. ssl_fetch_input() returns POLARSSL_ERR_SSL_CONN_EOF on an EOF from its f_recv() function. ssl_read() returns 0 if a POLARSSL_ERR_SSL_CONN_EOF is received after the handshake.
by Paul Bakker
· 14 years ago
9d78140
- A error_strerror function() has been added to translate between error codes and their description.
by Paul Bakker
· 14 years ago
23986e5
- Major type rewrite of int to size_t for most variables and arguments used for buffer lengths and loops
by Paul Bakker
· 14 years ago
af5c85f
- Improved portability with Microsoft Visual C
by Paul Bakker
· 14 years ago
fbc4a45
- Fixed typo in define
by Paul Bakker
· 14 years ago
e3166ce
- Renamed ciphers member of ssl_context and cipher member of ssl_session to ciphersuites and ciphersuite respectively. This clarifies the difference with the generic cipher layer and is better naming altogether
by Paul Bakker
· 15 years ago
43b7e35
- Support for PKCS#11 through the use of the pkcs11-helper library
by Paul Bakker
· 15 years ago
72f6266
- Improved information provided about current Hashing, Cipher and Suite capabilities
by Paul Bakker
· 15 years ago
43ca69c
- Added function for stringified SSL/TLS version
by Paul Bakker
· 15 years ago
b63b0af
- Added verification callback in certificate verification chain in order to allow external blacklisting
by Paul Bakker
· 15 years ago
1b57b06
- Added reading of DHM context from memory and file
by Paul Bakker
· 15 years ago
37ca75d
- Added Doxygen source code documentation parts (donated by Fox-IT)
by Paul Bakker
· 15 years ago
2e11f7d
- Added support for TLS v1.1
by Paul Bakker
· 15 years ago
b96f154
- Fixed copyright message
by Paul Bakker
· 15 years ago
84f12b7
- Updated Copyright to correct entity
by Paul Bakker
· 15 years ago
77a4358
- Added support for the SSL_EDH_RSA_AES_128_SHA and SSL_EDH_RSA_CAMELLIA_128_SHA ciphersuites
by Paul Bakker
· 15 years ago
57b7914
- String peer_cn in ssl context made const as well.
by Paul Bakker
· 15 years ago
fc8c436
- Updated copyright line to 2010
by Paul Bakker
· 15 years ago
1f3c39c
- Removed copyright line for Christophe Devine for clarity
by Paul Bakker
· 15 years ago
ff60ee6
- Added const-correctness to main codebase
by Paul Bakker
· 15 years ago
3391b12
- Fixed error codes. Negative when needed (SSL error codes). Non-negative if error-codes are OR'ed to other error codes (ASN1, Base64, MPI, DHM). The rest is negative by default.
by Paul Bakker
· 16 years ago
77b385e
- Updated copyright messages on all relevant files
by Paul Bakker
· 16 years ago
13e2dfe
- Cleaned up header documentation
by Paul Bakker
· 16 years ago
b5bf176
- Major change: Errors are now positive numbers instead of negative.
by Paul Bakker
· 16 years ago
40ea7de
- Added CRL revocation support to x509parse_verify()
by Paul Bakker
· 16 years ago
785a9ee
- Added email address to header license information
by Paul Bakker
· 17 years ago
b5ef0ba
- Added SSL_RSA_CAMELLIA_128_SHA, SSL_RSA_CAMELLIA_256_SHA, SSL_EDH_RSA_CAMELLIA_256_SHA ciphersuites to SSL
by Paul Bakker
· 17 years ago
e0ccd0a
- Updated Copyright notices
by Paul Bakker
· 17 years ago
40e4694
- First replacement of xyssl by polarssl where needed
by Paul Bakker
· 17 years ago
8e831ed
by Paul Bakker
· 17 years ago
5121ce5
- Renamed include directory to polarssl
by Paul Bakker
· 17 years ago