TrustedFirmware Git Browser
Code Review
Sign In
review.trustedfirmware.org
/
mirror
/
mbed-tls
/
cb576cc18b7412e6be52cf79c1e82fac4d8f40d5
/
include
/
polarssl
/
ssl.h
b9e4e2c
Fix formatting: fix some 'easy' > 80 length lines
by Paul Bakker
· 11 years ago
9af723c
Fix formatting: remove trailing spaces, #endif with comments (> 10 lines)
by Paul Bakker
· 11 years ago
cef4ad2
Adapt sources to configurable config.h name
by Manuel Pégourié-Gonnard
· 11 years ago
088c5c5
POLARSSL_CONFIG_OPTIONS has been removed. Values are set individually
by Paul Bakker
· 11 years ago
043a2e2
Merge verification of the keyUsage extension in X.509 certificates
by Paul Bakker
· 11 years ago
7f2a07d
Check keyUsage in SSL client and server
by Manuel Pégourié-Gonnard
· 11 years ago
75342a6
Fixed typos in code
by Paul Bakker
· 11 years ago
89e3579
Implement ALPN server-side
by Manuel Pégourié-Gonnard
· 11 years ago
0b874dc
Implement ALPN client-side
by Manuel Pégourié-Gonnard
· 11 years ago
7e250d4
Add ALPN interface
by Manuel Pégourié-Gonnard
· 11 years ago
7a2aba8
Deprecate some non-PK compatibility functions
by Manuel Pégourié-Gonnard
· 11 years ago
a612b44
Fix typo in doc
by Manuel Pégourié-Gonnard
· 11 years ago
e2ce211
Update doc of ssl_set_authmode()
by Manuel Pégourié-Gonnard
· 11 years ago
83cdffc
Forbid sequence number wrapping
by Manuel Pégourié-Gonnard
· 11 years ago
ab24010
Enforce our choice of allowed curves.
by Manuel Pégourié-Gonnard
· 11 years ago
7f38ed0
ssl_set_curves is no longer ECDHE only
by Manuel Pégourié-Gonnard
· 11 years ago
cd49f76
Make ssl_set_curves() work client-side too.
by Manuel Pégourié-Gonnard
· 11 years ago
de05390
Rename ecdh_curve_list to curve_list
by Manuel Pégourié-Gonnard
· 11 years ago
5de2580
Make ssl_set_ecdh_curves() a compile-time option
by Manuel Pégourié-Gonnard
· 12 years ago
987bfb5
Added the possibility to define the allowed curves for ECDHE handshake. It also defines the preference of the curves.
by Gergely Budai
· 12 years ago
cf1d73b
Clarified ssl_set_ciphersuites() doc for influencing preference as well
by Paul Bakker
· 12 years ago
956c9e0
Reduced the input / output overhead with 200+ bytes and covered corner case
by Paul Bakker
· 12 years ago
c72ac7c
Fix SSLv3 handling of SHA-384 suites
by Manuel Pégourié-Gonnard
· 12 years ago
a9a028e
SSL now gracefully handles missing RNG
by Paul Bakker
· 12 years ago
28d81a0
Fix pkcs11.c to conform to PolarSSL 1.3 API.
by Steffan Karger
· 12 years ago
993e386
Merged renegotiation refactoring
by Paul Bakker
· 12 years ago
31ff1d2
Safer buffer comparisons in the SSL modules
by Manuel Pégourié-Gonnard
· 12 years ago
6d8404d
Server: enforce renegotiation
by Manuel Pégourié-Gonnard
· 12 years ago
9c1e189
Move some code around, improve documentation
by Manuel Pégourié-Gonnard
· 12 years ago
214eed3
Make ssl_renegotiate the only interface
by Manuel Pégourié-Gonnard
· 12 years ago
caed054
Allow ssl_renegotiate() to be called in a loop
by Manuel Pégourié-Gonnard
· 12 years ago
f3dc2f6
Add code for testing server-initiated renegotiation
by Manuel Pégourié-Gonnard
· 12 years ago
60b1d10
Fixed spelling / typos (from PowerDNS:codespell)
by Paul Bakker
· 12 years ago
1642122
Merged support for Camellia-GCM + ciphersuite and fixes to cipher layer
by Paul Bakker
· 12 years ago
677377f
Server does not send out extensions not advertised by client
by Paul Bakker
· 12 years ago
a8a25ae
Fix bad error codes
by Manuel Pégourié-Gonnard
· 12 years ago
f34673e
Merged RSA-PSK key-exchange and ciphersuites
by Paul Bakker
· 12 years ago
376e815
Merged ECDHE-PSK ciphersuites
by Paul Bakker
· 12 years ago
8a3c64d
Fix and simplify *-PSK ifdef's
by Manuel Pégourié-Gonnard
· 12 years ago
1b62c7f
Fix dependencies and related issues
by Manuel Pégourié-Gonnard
· 12 years ago
bd1ae24
Factor PSK pms computation to ssl_tls.c
by Manuel Pégourié-Gonnard
· 12 years ago
1677033
TLS compression only allocates working buffer once
by Paul Bakker
· 12 years ago
6838bd1
Clarified threading issues
by Paul Bakker
· 12 years ago
8372454
Rework SNI to fix memory issues
by Manuel Pégourié-Gonnard
· 12 years ago
705fcca
Adapt support for SNI to recent changes
by Manuel Pégourié-Gonnard
· 12 years ago
d09453c
Check our ECDSA cert(s) against supported curves
by Manuel Pégourié-Gonnard
· 12 years ago
3ebb2cd
Add support for multiple server certificates
by Manuel Pégourié-Gonnard
· 12 years ago
834ea85
Change internal structs for multi-cert support
by Manuel Pégourié-Gonnard
· 12 years ago
cbf3ef3
RSA and ECDSA key exchanges don't depend on CRL
by Manuel Pégourié-Gonnard
· 12 years ago
1a48383
SSL_TLS doesn't depend on PK any more
by Manuel Pégourié-Gonnard
· 12 years ago
1032c1d
Fix some dependencies and warnings in small config
by Manuel Pégourié-Gonnard
· 12 years ago
6db455e
PSK callback added to SSL server
by Paul Bakker
· 12 years ago
c559c7a
Renamed x509_cert structure to x509_crt for consistency
by Paul Bakker
· 12 years ago
7c6b2c3
Split up X509 files into smaller modules
by Paul Bakker
· 12 years ago
dcbfdcc
Updated doxygen documentation in header files and HTML pages
by Paul Bakker
· 12 years ago
7da0a38
Rm some includes that are now useless
by Manuel Pégourié-Gonnard
· 12 years ago
226d5da
GCM ciphersuites partially using cipher layer
by Manuel Pégourié-Gonnard
· 12 years ago
da02a7f
AES_CBC ciphersuites now run purely via cipher layer
by Paul Bakker
· 12 years ago
c852a68
More robust selection of ctx_enc size
by Manuel Pégourié-Gonnard
· 12 years ago
577e006
Merged ECDSA-based key-exchange and ciphersuites into development
by Paul Bakker
· 12 years ago
acc7505
Temporary fix for size of cipher contexts
by Manuel Pégourié-Gonnard
· 12 years ago
2fb15f6
Un-rename ssl_set_own_cert_alt()
by Manuel Pégourié-Gonnard
· 12 years ago
a20c58c
Use convert functions for SSL_SIG_* and SSL_HASH_*
by Manuel Pégourié-Gonnard
· 12 years ago
0d42049
Merge code for RSA and ECDSA in SSL
by Manuel Pégourié-Gonnard
· 12 years ago
070cc7f
Use the new PK RSA-alt interface
by Manuel Pégourié-Gonnard
· 12 years ago
8df2769
Introduce pk_sign() and use it in ssl
by Manuel Pégourié-Gonnard
· 12 years ago
ac75523
Adapt ssl_set_own_cert() to generic keys
by Manuel Pégourié-Gonnard
· 12 years ago
0b03200
Add server-side support for ECDSA client auth
by Manuel Pégourié-Gonnard
· 12 years ago
0be444a
Ability to disable server_name extension (RFC 6066)
by Paul Bakker
· 12 years ago
d2f068e
Ability to enable / disable SSL v3 / TLS 1.0 / TLS 1.1 / TLS 1.2 individually
by Paul Bakker
· 12 years ago
fb08fd2
Entropy collector and CTR-DRBG now also work on SHA-256 if SHA-512 not available
by Paul Bakker
· 12 years ago
38d1eba
Move verify_result from ssl_context to session
by Manuel Pégourié-Gonnard
· 12 years ago
b3d9187
PK: add nice interface functions
by Manuel Pégourié-Gonnard
· 12 years ago
0b27267
Fix ifdef conditions for EC-related extensions.
by Manuel Pégourié-Gonnard
· 12 years ago
5734b2d
Actually use the point format selected for ECDH
by Manuel Pégourié-Gonnard
· 12 years ago
1f2bc62
Made support for the truncated_hmac extension configurable
by Paul Bakker
· 12 years ago
05decb2
Made support for the max_fragment_length extension configurable
by Paul Bakker
· 12 years ago
606b4ba
Session ticket expiration checked on server
by Paul Bakker
· 12 years ago
a503a63
Made session tickets support configurable from config.h
by Paul Bakker
· 12 years ago
56dc9e8
Authenticate session tickets.
by Manuel Pégourié-Gonnard
· 12 years ago
990c51a
Encrypt session tickets
by Manuel Pégourié-Gonnard
· 12 years ago
779e429
Start adding ticket keys (only key_name for now)
by Manuel Pégourié-Gonnard
· 12 years ago
aa0d4d1
Add ssl_set_session_tickets()
by Manuel Pégourié-Gonnard
· 12 years ago
06650f6
Fix reusing session more than once
by Manuel Pégourié-Gonnard
· 12 years ago
a5cc602
Parse NewSessionTicket message
by Manuel Pégourié-Gonnard
· 12 years ago
60182ef
ssl_cli: write & parse session ticket extension
by Manuel Pégourié-Gonnard
· 12 years ago
75d4401
Introduce ticket field in session structure
by Manuel Pégourié-Gonnard
· 12 years ago
7471803
Add ssl_get_session() to save session on client
by Manuel Pégourié-Gonnard
· 12 years ago
d6f41c5
Fixed size of ctx_enc / ctx_dec in ssl for gcm_context size
by Paul Bakker
· 12 years ago
8c1ede6
Changed prototype for ssl_set_truncated_hmac() to allow disabling
by Paul Bakker
· 12 years ago
277f7f2
Implement hmac truncation
by Manuel Pégourié-Gonnard
· 12 years ago
57c2852
Added truncated hmac negociation (without effect)
by Manuel Pégourié-Gonnard
· 12 years ago
e980a99
Add interface for truncated hmac
by Manuel Pégourié-Gonnard
· 12 years ago
e048b67
Misc minor fixes
by Manuel Pégourié-Gonnard
· 12 years ago
ed4af8b
Move negotiated max fragment length to session
by Manuel Pégourié-Gonnard
· 12 years ago
581e6b6
Prepare migrating max fragment length to session
by Manuel Pégourié-Gonnard
· 12 years ago
48f8d0d
Read max_fragment_length extension (server)
by Manuel Pégourié-Gonnard
· 12 years ago
8b46459
Add ssl_set_max_frag_len()
by Manuel Pégourié-Gonnard
· 12 years ago
fa9b100
Also compiles / runs without time-based functions in OS
by Paul Bakker
· 12 years ago
d2681d8
Renamed sha2.{c,h} to sha256.{c,h} and sha4.{c,h} to sha512.{c,h}
by Paul Bakker
· 12 years ago
Next »