Log - cffe4a65bd44152dfd2d8c5c84aed3105c4b3b13 - mirror/mbed-tls

577e006 Merged ECDSA-based key-exchange and ciphersuites into development by Paul Bakker · 12 years ago
9cc6f5c Fix some hash debugging by Manuel Pégourié-Gonnard · 12 years ago
4bd1284 Fix ECDSA hash selection bug with TLS 1.0 and 1.1 by Manuel Pégourié-Gonnard · 12 years ago
e511ffc Allow compiling without RSA or DH by Manuel Pégourié-Gonnard · 12 years ago
f484282 Rm a few unneeded tests by Manuel Pégourié-Gonnard · 12 years ago
d11eb7c Fix sig_alg extension on client. by Manuel Pégourié-Gonnard · 12 years ago
bfe32ef pk_{sign,verify}() now accept hash_len = 0 by Manuel Pégourié-Gonnard · 12 years ago
a20c58c Use convert functions for SSL_SIG_* and SSL_HASH_* by Manuel Pégourié-Gonnard · 12 years ago
0d42049 Merge code for RSA and ECDSA in SSL by Manuel Pégourié-Gonnard · 12 years ago
070cc7f Use the new PK RSA-alt interface by Manuel Pégourié-Gonnard · 12 years ago
a2d3f22 Add and use pk_encrypt(), pk_decrypt() by Manuel Pégourié-Gonnard · 12 years ago
8df2769 Introduce pk_sign() and use it in ssl by Manuel Pégourié-Gonnard · 12 years ago
583b608 Fix some return values by Manuel Pégourié-Gonnard · 12 years ago
abae74c Add server support for ECDHE_ECDSA key exchange by Manuel Pégourié-Gonnard · 12 years ago
32ea60a Declare ECDSA key exchange and ciphersuites by Manuel Pégourié-Gonnard · 12 years ago
0b03200 Add server-side support for ECDSA client auth by Manuel Pégourié-Gonnard · 12 years ago
0be444a Ability to disable server_name extension (RFC 6066) by Paul Bakker · 12 years ago
d2f068e Ability to enable / disable SSL v3 / TLS 1.0 / TLS 1.1 / TLS 1.2 individually by Paul Bakker · 12 years ago
0a20171 Fix compiler warning from gcc -Os by Manuel Pégourié-Gonnard · 12 years ago
c6554aa Check length of session tickets we write by Manuel Pégourié-Gonnard · 12 years ago
b3d9187 PK: add nice interface functions by Manuel Pégourié-Gonnard · 12 years ago
5fd4917 Add missing ifdefs in ssl modules by Paul Bakker · 12 years ago
0b27267 Fix ifdef conditions for EC-related extensions. by Manuel Pégourié-Gonnard · 12 years ago
5734b2d Actually use the point format selected for ECDH by Manuel Pégourié-Gonnard · 12 years ago
7b19c16 Handle suported_point_formats in ServerHello by Manuel Pégourié-Gonnard · 12 years ago
1f2bc62 Made support for the truncated_hmac extension configurable by Paul Bakker · 12 years ago
05decb2 Made support for the max_fragment_length extension configurable by Paul Bakker · 12 years ago
606b4ba Session ticket expiration checked on server by Paul Bakker · 12 years ago
f0e39ac Fixed unitialized n when resuming a session by Paul Bakker · 12 years ago
a503a63 Made session tickets support configurable from config.h by Paul Bakker · 12 years ago
56dc9e8 Authenticate session tickets. by Manuel Pégourié-Gonnard · 12 years ago
990c51a Encrypt session tickets by Manuel Pégourié-Gonnard · 12 years ago
779e429 Start adding ticket keys (only key_name for now) by Manuel Pégourié-Gonnard · 12 years ago
aa0d4d1 Add ssl_set_session_tickets() by Manuel Pégourié-Gonnard · 12 years ago
306827e Prepare ticket structure for securing by Manuel Pégourié-Gonnard · 12 years ago
593058e Don't renew ticket when the current one is OK by Manuel Pégourié-Gonnard · 12 years ago
c086cce Don't cache empty session ID nor resumed session by Manuel Pégourié-Gonnard · 12 years ago
7cd5924 Rework NewSessionTicket handling in state machine by Manuel Pégourié-Gonnard · 12 years ago
3ffa3db Fix server session ID handling with ticket by Manuel Pégourié-Gonnard · 12 years ago
72882b2 Relax limit on ClientHello size by Manuel Pégourié-Gonnard · 12 years ago
609bc81 ssl_srv: read & write ticket, unsecure for now by Manuel Pégourié-Gonnard · 12 years ago
94f6a79 Auxiliary functions to (de)serialize ssl_session by Manuel Pégourié-Gonnard · 12 years ago
7a358b8 ssl_srv: write & parse session ticket ext & msg by Manuel Pégourié-Gonnard · 12 years ago
57c2852 Added truncated hmac negociation (without effect) by Manuel Pégourié-Gonnard · 12 years ago
e048b67 Misc minor fixes by Manuel Pégourié-Gonnard · 12 years ago
ed4af8b Move negotiated max fragment length to session by Manuel Pégourié-Gonnard · 12 years ago
7bb7899 Send max_fragment_length extension (server) by Manuel Pégourié-Gonnard · 12 years ago
f11a6d7 Rework server extensions writing by Manuel Pégourié-Gonnard · 12 years ago
48f8d0d Read max_fragment_length extension (server) by Manuel Pégourié-Gonnard · 12 years ago
ff56da3 Fix direct uses of x509_cert.rsa, now use pk_rsa() by Manuel Pégourié-Gonnard · 12 years ago
61d113b Init and free new contexts in the right place for SSL to prevent memory leaks by Paul Bakker · 12 years ago
fa9b100 Also compiles / runs without time-based functions in OS by Paul Bakker · 12 years ago
9e36f04 SHA2 renamed to SHA256, SHA4 renamed to SHA512 and functions accordingly by Paul Bakker · 12 years ago
5dc6b5f Made supported curves configurable by Paul Bakker · 12 years ago
2fbefde Client and server now filter sent and accepted ciphersuites on minimum by Paul Bakker · 12 years ago
59c28a2 SSL v2 handshake should also handle dynamic ciphersuites by Paul Bakker · 12 years ago
b6c5d2e Cleanup up non-prototyped functions (static) and const-correctness by Paul Bakker · 12 years ago
2013950 Secure renegotiation extension should only be sent in case client supports secure renegotiation by Paul Bakker · 12 years ago
48f7a5d DHE-PSK based ciphersuite support added and cleaner key exchange based by Paul Bakker · 12 years ago
ed27a04 More granular define selections within code to allow for smaller code sizes by Paul Bakker · 12 years ago
fbb1780 Added pre-shared key handling for the server side of SSL / TLS by Paul Bakker · 12 years ago
70df2fb Split parts of ssl_parse_client_key_exchange() into separate functions by Paul Bakker · 12 years ago
f7abd42 Removed extra spaces on end of lines by Paul Bakker · 12 years ago
8f4ddae Ability to specify allowed ciphersuites based on the protocol version. by Paul Bakker · 12 years ago
c70b982 OID functionality moved to a separate module. by Paul Bakker · 12 years ago
b7149bc Corrected behaviour for CBC-based suites using the SHA384 MAC and PRF by Paul Bakker · 12 years ago
41c83d3 Added Ephemeral Elliptic Curve Diffie Hellman ciphersuites to SSL/TLS by Paul Bakker · 12 years ago
68884e3 Moved to advanced ciphersuite representation and more dynamic SSL code by Paul Bakker · 13 years ago
78a8c71 Re-added support for parsing and handling SSLv2 Client Hello messages by Paul Bakker · 12 years ago
1961b70 Added ssl_handshake_step() to allow single stepping the handshake process by Paul Bakker · 13 years ago
21dca69 Handle future version properly in ssl_write_certificate_request() by Paul Bakker · 13 years ago
bc3d984 Fixed multiple DN size by Paul Bakker · 13 years ago
78ce507 Fixed typo by Paul Bakker · 13 years ago
926af75 Fixed client certificate handling with TLS 1.2 by Paul Bakker · 13 years ago
645ce3a - Moved ciphersuite naming scheme to IANA reserved names by Paul Bakker · 13 years ago
35a7fe5 - Prevent compiler warning by Paul Bakker · 13 years ago
8611e73 - Fixed infinite loop by Paul Bakker · 13 years ago
81420ab - properly print minimum version by Paul Bakker · 13 years ago
23f3680 - Added proper support for TLS 1.2 signature_algorithm extension on server by Paul Bakker · 13 years ago
1d29fb5 - Added option to add minimum accepted SSL/TLS protocol version by Paul Bakker · 13 years ago
5701cdc - Added ServerName extension parsing (SNI) at server side by Paul Bakker · 13 years ago
eb2c658 - Generalized external private key implementation handling (like PKCS#11) in SSL/TLS by Paul Bakker · 13 years ago
0a59707 - Added simple SSL session cache implementation by Paul Bakker · 13 years ago
29b6476 - Added predefined DHM groups from RFC 5114 by Paul Bakker · 13 years ago
d0f6fa7 - Sending of handshake_failures during renegotiation added by Paul Bakker · 13 years ago
48916f9 - Added Secure Renegotiation (RFC 5746) by Paul Bakker · 13 years ago
ec636f3 - Removed handling for SSLv2 Client Hello (as per RFC 5246 recommendation) by Paul Bakker · 13 years ago
2770fbd - Added DEFLATE compression support as per RFC3749 (requires zlib) by Paul Bakker · 13 years ago
380da53 - Abstracted checksum updating during handshake by Paul Bakker · 13 years ago
ca4ab49 - Added GCM ciphersuites to TLS implementation by Paul Bakker · 13 years ago
10cd225 - Added support for the SHA256 ciphersuites of AES and Camellia by Paul Bakker · 13 years ago
bf63b36 - Updated comments by Paul Bakker · 13 years ago
1ef83d6 - Initial bare version of TLS 1.2 by Paul Bakker · 13 years ago
fab5c82 - Added support for NULL cipher (POLARSSL_CIPHER_NULL_CIPHER) and weak ciphersuites (POLARSSL_ENABLE_WEAK_CIPHERSUITES). They are disabled by default! by Paul Bakker · 13 years ago
1c70d40 - Added better handling of missing session struct by Paul Bakker · 14 years ago
a3d195c - Changed the used random function pointer to more flexible format. Renamed havege_rand() to havege_random() to prevent mistakes. Lots of changes as a consequence in library code and programs by Paul Bakker · 14 years ago
5690efc - Fixed a whole bunch of dependencies on defines between files, examples and tests by Paul Bakker · 14 years ago
9d78140 - A error_strerror function() has been added to translate between error codes and their description. by Paul Bakker · 14 years ago
23986e5 - Major type rewrite of int to size_t for most variables and arguments used for buffer lengths and loops by Paul Bakker · 14 years ago
99a03af - Fixed possible uninitialized values by Paul Bakker · 14 years ago