Log - c2024f4592bbfa1f2d060a12b92da5bd2162008b - mirror/mbed-tls

cf1d73b Clarified ssl_set_ciphersuites() doc for influencing preference as well by Paul Bakker · 12 years ago
956c9e0 Reduced the input / output overhead with 200+ bytes and covered corner case by Paul Bakker · 12 years ago
c72ac7c Fix SSLv3 handling of SHA-384 suites by Manuel Pégourié-Gonnard · 12 years ago
a9a028e SSL now gracefully handles missing RNG by Paul Bakker · 12 years ago
28d81a0 Fix pkcs11.c to conform to PolarSSL 1.3 API. by Steffan Karger · 12 years ago
993e386 Merged renegotiation refactoring by Paul Bakker · 12 years ago
31ff1d2 Safer buffer comparisons in the SSL modules by Manuel Pégourié-Gonnard · 12 years ago
6d8404d Server: enforce renegotiation by Manuel Pégourié-Gonnard · 12 years ago
9c1e189 Move some code around, improve documentation by Manuel Pégourié-Gonnard · 12 years ago
214eed3 Make ssl_renegotiate the only interface by Manuel Pégourié-Gonnard · 12 years ago
caed054 Allow ssl_renegotiate() to be called in a loop by Manuel Pégourié-Gonnard · 12 years ago
f3dc2f6 Add code for testing server-initiated renegotiation by Manuel Pégourié-Gonnard · 12 years ago
60b1d10 Fixed spelling / typos (from PowerDNS:codespell) by Paul Bakker · 12 years ago
1642122 Merged support for Camellia-GCM + ciphersuite and fixes to cipher layer by Paul Bakker · 12 years ago
677377f Server does not send out extensions not advertised by client by Paul Bakker · 12 years ago
a8a25ae Fix bad error codes by Manuel Pégourié-Gonnard · 12 years ago
f34673e Merged RSA-PSK key-exchange and ciphersuites by Paul Bakker · 12 years ago
376e815 Merged ECDHE-PSK ciphersuites by Paul Bakker · 12 years ago
8a3c64d Fix and simplify *-PSK ifdef's by Manuel Pégourié-Gonnard · 12 years ago
1b62c7f Fix dependencies and related issues by Manuel Pégourié-Gonnard · 12 years ago
bd1ae24 Factor PSK pms computation to ssl_tls.c by Manuel Pégourié-Gonnard · 12 years ago
1677033 TLS compression only allocates working buffer once by Paul Bakker · 12 years ago
6838bd1 Clarified threading issues by Paul Bakker · 12 years ago
8372454 Rework SNI to fix memory issues by Manuel Pégourié-Gonnard · 12 years ago
705fcca Adapt support for SNI to recent changes by Manuel Pégourié-Gonnard · 12 years ago
d09453c Check our ECDSA cert(s) against supported curves by Manuel Pégourié-Gonnard · 12 years ago
3ebb2cd Add support for multiple server certificates by Manuel Pégourié-Gonnard · 12 years ago
834ea85 Change internal structs for multi-cert support by Manuel Pégourié-Gonnard · 12 years ago
cbf3ef3 RSA and ECDSA key exchanges don't depend on CRL by Manuel Pégourié-Gonnard · 12 years ago
1a48383 SSL_TLS doesn't depend on PK any more by Manuel Pégourié-Gonnard · 12 years ago
1032c1d Fix some dependencies and warnings in small config by Manuel Pégourié-Gonnard · 12 years ago
6db455e PSK callback added to SSL server by Paul Bakker · 12 years ago
c559c7a Renamed x509_cert structure to x509_crt for consistency by Paul Bakker · 12 years ago
7c6b2c3 Split up X509 files into smaller modules by Paul Bakker · 12 years ago
dcbfdcc Updated doxygen documentation in header files and HTML pages by Paul Bakker · 12 years ago
7da0a38 Rm some includes that are now useless by Manuel Pégourié-Gonnard · 12 years ago
226d5da GCM ciphersuites partially using cipher layer by Manuel Pégourié-Gonnard · 12 years ago
da02a7f AES_CBC ciphersuites now run purely via cipher layer by Paul Bakker · 12 years ago
c852a68 More robust selection of ctx_enc size by Manuel Pégourié-Gonnard · 12 years ago
577e006 Merged ECDSA-based key-exchange and ciphersuites into development by Paul Bakker · 12 years ago
acc7505 Temporary fix for size of cipher contexts by Manuel Pégourié-Gonnard · 12 years ago
2fb15f6 Un-rename ssl_set_own_cert_alt() by Manuel Pégourié-Gonnard · 12 years ago
a20c58c Use convert functions for SSL_SIG_* and SSL_HASH_* by Manuel Pégourié-Gonnard · 12 years ago
0d42049 Merge code for RSA and ECDSA in SSL by Manuel Pégourié-Gonnard · 12 years ago
070cc7f Use the new PK RSA-alt interface by Manuel Pégourié-Gonnard · 12 years ago
8df2769 Introduce pk_sign() and use it in ssl by Manuel Pégourié-Gonnard · 12 years ago
ac75523 Adapt ssl_set_own_cert() to generic keys by Manuel Pégourié-Gonnard · 12 years ago
0b03200 Add server-side support for ECDSA client auth by Manuel Pégourié-Gonnard · 12 years ago
0be444a Ability to disable server_name extension (RFC 6066) by Paul Bakker · 12 years ago
d2f068e Ability to enable / disable SSL v3 / TLS 1.0 / TLS 1.1 / TLS 1.2 individually by Paul Bakker · 12 years ago
fb08fd2 Entropy collector and CTR-DRBG now also work on SHA-256 if SHA-512 not available by Paul Bakker · 12 years ago
38d1eba Move verify_result from ssl_context to session by Manuel Pégourié-Gonnard · 12 years ago
b3d9187 PK: add nice interface functions by Manuel Pégourié-Gonnard · 12 years ago
0b27267 Fix ifdef conditions for EC-related extensions. by Manuel Pégourié-Gonnard · 12 years ago
5734b2d Actually use the point format selected for ECDH by Manuel Pégourié-Gonnard · 12 years ago
1f2bc62 Made support for the truncated_hmac extension configurable by Paul Bakker · 12 years ago
05decb2 Made support for the max_fragment_length extension configurable by Paul Bakker · 12 years ago
606b4ba Session ticket expiration checked on server by Paul Bakker · 12 years ago
a503a63 Made session tickets support configurable from config.h by Paul Bakker · 12 years ago
56dc9e8 Authenticate session tickets. by Manuel Pégourié-Gonnard · 12 years ago
990c51a Encrypt session tickets by Manuel Pégourié-Gonnard · 12 years ago
779e429 Start adding ticket keys (only key_name for now) by Manuel Pégourié-Gonnard · 12 years ago
aa0d4d1 Add ssl_set_session_tickets() by Manuel Pégourié-Gonnard · 12 years ago
06650f6 Fix reusing session more than once by Manuel Pégourié-Gonnard · 12 years ago
a5cc602 Parse NewSessionTicket message by Manuel Pégourié-Gonnard · 12 years ago
60182ef ssl_cli: write & parse session ticket extension by Manuel Pégourié-Gonnard · 12 years ago
75d4401 Introduce ticket field in session structure by Manuel Pégourié-Gonnard · 12 years ago
7471803 Add ssl_get_session() to save session on client by Manuel Pégourié-Gonnard · 12 years ago
d6f41c5 Fixed size of ctx_enc / ctx_dec in ssl for gcm_context size by Paul Bakker · 12 years ago
8c1ede6 Changed prototype for ssl_set_truncated_hmac() to allow disabling by Paul Bakker · 12 years ago
277f7f2 Implement hmac truncation by Manuel Pégourié-Gonnard · 12 years ago
57c2852 Added truncated hmac negociation (without effect) by Manuel Pégourié-Gonnard · 12 years ago
e980a99 Add interface for truncated hmac by Manuel Pégourié-Gonnard · 12 years ago
e048b67 Misc minor fixes by Manuel Pégourié-Gonnard · 12 years ago
ed4af8b Move negotiated max fragment length to session by Manuel Pégourié-Gonnard · 12 years ago
581e6b6 Prepare migrating max fragment length to session by Manuel Pégourié-Gonnard · 12 years ago
48f8d0d Read max_fragment_length extension (server) by Manuel Pégourié-Gonnard · 12 years ago
8b46459 Add ssl_set_max_frag_len() by Manuel Pégourié-Gonnard · 12 years ago
fa9b100 Also compiles / runs without time-based functions in OS by Paul Bakker · 12 years ago
d2681d8 Renamed sha2.{c,h} to sha256.{c,h} and sha4.{c,h} to sha512.{c,h} by Paul Bakker · 12 years ago
9e36f04 SHA2 renamed to SHA256, SHA4 renamed to SHA512 and functions accordingly by Paul Bakker · 12 years ago
2fbefde Client and server now filter sent and accepted ciphersuites on minimum by Paul Bakker · 12 years ago
407a0da Moved __cplusplus extern statement to include struct definitions as well. by Paul Bakker · 12 years ago
b6c5d2e Cleanup up non-prototyped functions (static) and const-correctness by Paul Bakker · 12 years ago
9bcf16c Centralized module option values in config.h by Paul Bakker · 12 years ago
ed27a04 More granular define selections within code to allow for smaller code sizes by Paul Bakker · 12 years ago
73a899a Changed error code message to also cover missing pre-shared key by Paul Bakker · 12 years ago
d4a56ec Added pre-shared key handling for the client side of SSL / TLS by Paul Bakker · 12 years ago
8f4ddae Ability to specify allowed ciphersuites based on the protocol version. by Paul Bakker · 12 years ago
41c83d3 Added Ephemeral Elliptic Curve Diffie Hellman ciphersuites to SSL/TLS by Paul Bakker · 12 years ago
68884e3 Moved to advanced ciphersuite representation and more dynamic SSL code by Paul Bakker · 13 years ago
92be97b Align data with future location based on IV size by Paul Bakker · 13 years ago
07eb38b Update ssl_hw_record_init() to receive keylen, ivlen and maclen as well by Paul Bakker · 13 years ago
5bd4229 Reverted commit 186751d9dd28082d4b19e69a2c15fd432d366133 and made out_hdr and out_msg back-to-back again by Paul Bakker · 13 years ago
1961b70 Added ssl_handshake_step() to allow single stepping the handshake process by Paul Bakker · 13 years ago
926af75 Fixed client certificate handling with TLS 1.2 by Paul Bakker · 13 years ago
e667c98 Added p_hw_data to ssl_context for context specific hardware acceleration data by Paul Bakker · 13 years ago
1f9d02d Added more notes / comments on own_cert, trust_ca purposes by Paul Bakker · 13 years ago
6831c4a - Fixed typos by Paul Bakker · 13 years ago
7c90078 - Default to disabled renegotiation by Paul Bakker · 13 years ago