TrustedFirmware Git Browser
Code Review
Sign In
review.trustedfirmware.org
/
mirror
/
mbed-tls
/
c5671bdcf4bea8b9b51a0734fa16af78b6b01dd9
/
library
/
ssl_tls.c
158fc33
Merge remote-tracking branch 'upstream-public/pr/1296' into HEAD
by Gilles Peskine
· 7 years ago
3f9cff2
Merge branch 'prr_424' into mbedtls-2.7-proposed
by Gilles Peskine
· 7 years ago
784de59
Merge remote-tracking branch 'upstream-restricted/pr/410' into development-restricted
by Jaeden Amero
· 8 years ago
66954e1
Merge branch 'development' into development-restricted
by Jaeden Amero
· 8 years ago
5e9f14d
Set correct minimal versions in default conf
by Ron Eldor
· 8 years ago
9e4f77c
New MD API: rename functions from _ext to _ret
by Gilles Peskine
· 8 years ago
d91f2a2
Merge branch 'development' into iotssl-1251-2.7
by Gilles Peskine
· 8 years ago
82d607e
Merge remote-tracking branch 'upstream-restricted/pr/433' into development-restricted
by Gilles Peskine
· 8 years ago
d04c623
Merge remote-tracking branch 'restricted/pr/403' into development-restricted
by Manuel Pégourié-Gonnard
· 8 years ago
b053efb
Fix magic constant in previous commit
by Manuel Pégourié-Gonnard
· 8 years ago
464147c
Fix SSLv3 MAC computation
by Manuel Pégourié-Gonnard
· 8 years ago
02e28fe
Merge remote-tracking branch 'upstream-restricted/pr/425' into development-restricted
by Gilles Peskine
· 8 years ago
0960f06
Merge branch 'development' into development-restricted
by Gilles Peskine
· 8 years ago
0884f48
Merge remote-tracking branch 'upstream-public/pr/1141' into development
by Gilles Peskine
· 8 years ago
1df4923
Remove compile-time deprecation warning for TRUNCATED_HMAC_COMPAT
by Hanno Becker
· 8 years ago
c753f5d
Merge remote-tracking branch 'upstream-restricted/pr/369' into development-restricted
by Gilles Peskine
· 8 years ago
68306ed
Merge remote-tracking branch 'upstream-public/pr/1094' into development
by Gilles Peskine
· 8 years ago
4c2ac7e
Deprecate MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT
by Hanno Becker
· 8 years ago
563423f
Improve documentation of MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT option
by Hanno Becker
· 8 years ago
e89353a
Add fallback to non-compliant truncated HMAC for compatibiltiy
by Hanno Becker
· 8 years ago
81c7b18
Don't truncate MAC key when truncated HMAC is negotiated
by Hanno Becker
· 8 years ago
992b687
Fix heap corruption in ssl_decrypt_buf
by Hanno Becker
· 8 years ago
888fede
Merge branch 'development' into development-restricted
by Manuel Pégourié-Gonnard
· 8 years ago
21df7f9
Fix handling of HS msgs in mbedtls_ssl_read if renegotiation unused
by Hanno Becker
· 8 years ago
b4ff0aa
Swap branches accepting/refusing renegotiation in in ssl_read
by Hanno Becker
· 8 years ago
1a9a51c
Enhance documentation of ssl_write_hostname_ext, adapt ChangeLog.
by Hanno Becker
· 8 years ago
947194e
Make mbedtls_ssl_set_hostname safe to be called multiple times
by Hanno Becker
· 8 years ago
a90658f
Add ssl_conf_dh_param_bin superseding ssl_conf_dh_param
by Hanno Becker
· 8 years ago
470a8c4
Deprecate mbedtls_ssl_conf_dh_param
by Hanno Becker
· 8 years ago
184f675
Improve debugging output
by Hanno Becker
· 8 years ago
00d0a68
Adapt code setting default DHM parameters
by Hanno Becker
· 8 years ago
2f38a43
Enhance documentation of ssl_write_hostname_ext, adapt ChangeLog.
by Hanno Becker
· 8 years ago
39f5d35
Make mbedtls_ssl_set_hostname safe to be called multiple times
by Hanno Becker
· 8 years ago
8c8b0ab
Change default Diffie-Hellman parameters from RFC 5114 to RFC 7919
by Hanno Becker
· 8 years ago
0b7b83f
Fixed SIGSEGV problem when writing with ssl_write_real a buffer that is over MBEDTLS_SSL_MAX_CONTENT_LEN bytes
by Florin
· 8 years ago
2b187c4
Correct typo
by Hanno Becker
· 8 years ago
9648f8b
Add run-time check for handshake message size in ssl_write_record
by Hanno Becker
· 8 years ago
d33f1ca
Add run-time check for record content size in ssl_encrypt_buf
by Hanno Becker
· 8 years ago
0169253
Document code silently discarding invalid records
by Andres Amaya Garcia
· 8 years ago
2fad94b
Dont send alert on invalid DTLS record type
by Andres Amaya Garcia
· 8 years ago
3395250
Fix use of uninitialised ret ssl_tls.c
by Andres Amaya Garcia
· 8 years ago
46f5a3e
Check return codes from MD in ssl code
by Andres Amaya Garcia
· 8 years ago
bbafd34
Set len var to 0 when buf is freed in ssl_tls.c
by Andres Amaya Garcia
· 8 years ago
1a607a1
Change ssl_tls to use new MD API and check ret code
by Andres Amaya Garcia
· 8 years ago
a004988
Zeroize old psk buf when changing value in ssl_tls
by Andres Amaya Garcia
· 8 years ago
bdf3905
Ensure application data records are not kept when fully processed
by Hanno Becker
· 8 years ago
bb9dd0c
Add hard assertion to mbedtls_ssl_read_record_layer
by Hanno Becker
· 8 years ago
4a810fb
Fix mbedtls_ssl_read
by Hanno Becker
· 8 years ago
af0665d
Simplify retaining of messages for future processing
by Hanno Becker
· 8 years ago
e6706e6
Add tests for missing CA chains and bad curves.
by Hanno Becker
· 8 years ago
39ae8cd
Fix implementation of VERIFY_OPTIONAL verification mode
by Hanno Becker
· 8 years ago
383a118
Merge remote-tracking branch 'gilles/IOTSSL-1330/development' into development
by Manuel Pégourié-Gonnard
· 8 years ago
5d2511c
SHA-1 deprecation: allow it in key exchange
by Gilles Peskine
· 8 years ago
5e79cb3
Remove SHA-1 in TLS by default
by Gilles Peskine
· 8 years ago
23b33f8
Merge remote-tracking branch 'hanno/sig_hash_compatibility' into development
by Manuel Pégourié-Gonnard
· 8 years ago
088ce43
Implement optional CA list suppression in Certificate Request
by Janos Follath
· 8 years ago
7e5437a
Remember suitable hash function for any signature algorithm.
by Hanno Becker
· 8 years ago
92e4426
SSLv3: when refusing renegotiation, stop processing
by Gilles Peskine
· 8 years ago
c94f735
Ignore failures when sending fatal alerts
by Gilles Peskine
· 8 years ago
8498cb3
Cleaned up double variable declaration
by Gilles Peskine
· 8 years ago
064a85c
Code portability fix
by Gilles Peskine
· 8 years ago
1cc8e34
Send TLS alerts in many more cases
by Gilles Peskine
· 8 years ago
f982852
Balanced braces across preprocessor conditionals
by Gilles Peskine
· 8 years ago
182013f
Prevent SLOTH attacks
by Janos Follath
· 9 years ago
2196c7f
Fix renegotiation at incorrect times in DTLS
by Andres AG
· 9 years ago
1903fb3
Clarify Comments and Fix Typos (#651)
by Brian J Murray
· 9 years ago
8e00410
Merge fix for AEAD Random IVs
by Simon Butcher
· 9 years ago
9900014
Merge fix for IE Certificate Compatibility
by Simon Butcher
· 9 years ago
23bdca0
Fix an x509 compatibility issue
by Janos Follath
· 9 years ago
b5b6af2
Puts platform time abstraction into its own header
by Simon Butcher
· 9 years ago
8eb6413
Address issues find by manual coverity scan.
by Janos Follath
· 9 years ago
f002164
Refactor slightly to silence a clang-analyze warning
by Nicholas Wilson
· 9 years ago
d5800b7
Abstracts away time()/stdlib.h into platform
by SimonB
· 9 years ago
e846b51
Use the SSL IO and time callback typedefs consistently
by Simon Butcher
· 9 years ago
214a848
Update note about hardcoded verify_data_length
by Manuel Pégourié-Gonnard
· 9 years ago
967994a
Remove unused code.
by Manuel Pégourié-Gonnard
· 9 years ago
4ae5c29
Add Changelog entry and improve coding style
by Janos Follath
· 9 years ago
ca214b9
Updated relevant #ifdef
by Janos Follath
· 9 years ago
c97b697
Fix for unused variable warning
by Simon Butcher
· 10 years ago
4c2bfdb
Merge 'iotssl-558-md5-tls-sigs-restricted'
by Simon Butcher
· 10 years ago
207990d
Added description of change to the Changelog
by Simon Butcher
· 10 years ago
47229c7
Disable MD5 in handshake signatures by default
by Manuel Pégourié-Gonnard
· 10 years ago
e2e25e7
DTLS: avoid dropping too many records
by Manuel Pégourié-Gonnard
· 10 years ago
bd36398
Merge branch 'iotssl-519-asn1write-overflows-restricted' into development-restricted
by Manuel Pégourié-Gonnard
· 10 years ago
f8b2442
Merge branch 'iotssl-517-double-free-restricted' into development-restricted
by Manuel Pégourié-Gonnard
· 10 years ago
2046062
Merge branch 'development' into misc
by Simon Butcher
· 10 years ago
459a950
Fixed typo in comment
by Simon Butcher
· 10 years ago
62aab15
Merge branch 'development' into iotssl-513-alerts
by Simon Butcher
· 10 years ago
e357a64
Merge pull request #328 from ARMmbed/iotssl-461-ecjpake-finalization
by Simon Butcher
· 10 years ago
fbdf06c
Fix handling of non-fatal alerts
by Manuel Pégourié-Gonnard
· 10 years ago
e5f3072
Fix #ifdef inconsistency
by Manuel Pégourié-Gonnard
· 10 years ago
bc5e508
Fix other int casts in bounds checking
by Manuel Pégourié-Gonnard
· 10 years ago
cdea97c
Remove useless code
by Manuel Pégourié-Gonnard
· 10 years ago
173c790
Fix potential double-free in ssl_conf_psk()
by Manuel Pégourié-Gonnard
· 10 years ago
fadacb9
Merge branch 'development' into iotssl-461-ecjpake-finalization
by Manuel Pégourié-Gonnard
· 10 years ago
5674a97
Fix compilers warnings in reduced configs
by Manuel Pégourié-Gonnard
· 10 years ago
024b6df
Improve key export API and documentation
by Manuel Pégourié-Gonnard
· 10 years ago
fec73a8
Merge of fix for IOTSSL-481 - Double free
by Simon Butcher
· 10 years ago
5b8d1d6
Fix for IOTSSL-473 Double free error
by Simon Butcher
· 10 years ago
4feb7ae
Added key export API
by Robert Cragie
· 10 years ago
Next »