Log - cffe4a65bd44152dfd2d8c5c84aed3105c4b3b13 - mirror/mbed-tls

577e006 Merged ECDSA-based key-exchange and ciphersuites into development by Paul Bakker · 12 years ago
ac75523 Adapt ssl_set_own_cert() to generic keys by Manuel Pégourié-Gonnard · 12 years ago
0be444a Ability to disable server_name extension (RFC 6066) by Paul Bakker · 12 years ago
38d1eba Move verify_result from ssl_context to session by Manuel Pégourié-Gonnard · 12 years ago
1f2bc62 Made support for the truncated_hmac extension configurable by Paul Bakker · 12 years ago
05decb2 Made support for the max_fragment_length extension configurable by Paul Bakker · 12 years ago
a503a63 Made session tickets support configurable from config.h by Paul Bakker · 12 years ago
aa0d4d1 Add ssl_set_session_tickets() by Manuel Pégourié-Gonnard · 12 years ago
06650f6 Fix reusing session more than once by Manuel Pégourié-Gonnard · 12 years ago
cf2e97e ssl_client2: allow reconnecting twice by Manuel Pégourié-Gonnard · 12 years ago
aaa1eab Add an option to reconnect in ssl_client2 by Manuel Pégourié-Gonnard · 12 years ago
66c4810 Better handling of ciphersuite version range and forced version in ssl_client2 by Paul Bakker · 12 years ago
6c85279 Newline fixes in help text for ssl_client2 / ssl_server2 by Paul Bakker · 12 years ago
dbd79ca ssl_client2 and ssl_server2 now exit with 1 on errors (shell limitations) by Paul Bakker · 12 years ago
8c1ede6 Changed prototype for ssl_set_truncated_hmac() to allow disabling by Paul Bakker · 12 years ago
e980a99 Add interface for truncated hmac by Manuel Pégourié-Gonnard · 12 years ago
5b55b79 Better handling of ciphersuite version range and forced version in ssl_server2 by Paul Bakker · 12 years ago
e048b67 Misc minor fixes by Manuel Pégourié-Gonnard · 12 years ago
0c017a5 Add max_frag_len option in ssl_server2 by Manuel Pégourié-Gonnard · 12 years ago
8e714d7 Modified LONG_RESPONSE and comments in ssl_server2 by Paul Bakker · 12 years ago
bd7ce63 Adapt ssl_server2 to test sending long messages by Manuel Pégourié-Gonnard · 12 years ago
787b658 Implement max_frag_len write restriction by Manuel Pégourié-Gonnard · 12 years ago
0df6b1f ssl_client2: add max_frag_len option by Manuel Pégourié-Gonnard · 12 years ago
82024bf ssl_server2 now uses alloc_buffer if present and can be 'SERVERQUIT' by Paul Bakker · 12 years ago
ba4878a Rename x509parse_key & co with _rsa suffix by Manuel Pégourié-Gonnard · 12 years ago
fa9b100 Also compiles / runs without time-based functions in OS by Paul Bakker · 12 years ago
03a8a79 Programs adapted to use polarssl_strerror() instead of error_strerror() by Paul Bakker · 12 years ago
c1516be ssl_server2 and ssl_client2 adapted to support maximum protocol version by Paul Bakker · 12 years ago
3c5ef71 Cleanup up non-prototyped functions (static) and const-correctness in programs by Paul Bakker · 12 years ago
ef3f8c7 Fixed const correctness issues in programs and tests by Paul Bakker · 12 years ago
bcbe2d8 Prettier printing of the lists for longer ciphersuite names by Paul Bakker · 12 years ago
ed27a04 More granular define selections within code to allow for smaller code sizes by Paul Bakker · 12 years ago
fbb1780 Added pre-shared key handling for the server side of SSL / TLS by Paul Bakker · 12 years ago
d4a56ec Added pre-shared key handling for the client side of SSL / TLS by Paul Bakker · 12 years ago
41c83d3 Added Ephemeral Elliptic Curve Diffie Hellman ciphersuites to SSL/TLS by Paul Bakker · 12 years ago
91ebfb5 Made auth_mode as an command line option by Paul Bakker · 13 years ago
1f9d02d Added more notes / comments on own_cert, trust_ca purposes by Paul Bakker · 13 years ago
75242c3 Added checking of CA peer cert to ssl_client1 as sane default by Paul Bakker · 13 years ago
645ce3a - Moved ciphersuite naming scheme to IANA reserved names by Paul Bakker · 13 years ago
b0550d9 - Added ssl_get_peer_cert() to SSL API by Paul Bakker · 13 years ago
1d29fb5 - Added option to add minimum accepted SSL/TLS protocol version by Paul Bakker · 13 years ago
5d19f86 - Added comment by Paul Bakker · 13 years ago
cbbd999 - SSL/TLS now has default group by Paul Bakker · 13 years ago
915275b - Revamped x509_verify() and the SSL f_vrfy callback implementations by Paul Bakker · 13 years ago
819370c - Removed lowercasing of parameters by Paul Bakker · 13 years ago
d432410 - Removed clutter from my_dhm values by Paul Bakker · 13 years ago
0a59707 - Added simple SSL session cache implementation by Paul Bakker · 13 years ago
29b6476 - Added predefined DHM groups from RFC 5114 by Paul Bakker · 13 years ago
b60b95f - Added first version of ssl_server2 example application by Paul Bakker · 13 years ago
d0f6fa7 - Sending of handshake_failures during renegotiation added by Paul Bakker · 13 years ago
48916f9 - Added Secure Renegotiation (RFC 5746) by Paul Bakker · 13 years ago
835b29e - Should not be debug_level 5 in repo (reset to 0) by Paul Bakker · 13 years ago
92eeea4 - Modified CMakeLists to support zlib by Paul Bakker · 13 years ago
2770fbd - Added DEFLATE compression support as per RFC3749 (requires zlib) by Paul Bakker · 13 years ago
8d91458 - Added X509 CA Path support by Paul Bakker · 13 years ago
4248823 - Updated to handle x509parse_crtfile() positive return values by Paul Bakker · 13 years ago
4d2c124 - Changed certificate verify behaviour to comply with RFC 6125 section 6.3 to not match CN if subjectAltName extension is present. by Paul Bakker · 13 years ago
ca4ab49 - Added GCM ciphersuites to TLS implementation by Paul Bakker · 13 years ago
0b22e3e - Print return codes properly by Paul Bakker · 13 years ago
6f3578c - Report proper error number by Paul Bakker · 13 years ago
10cd225 - Added support for the SHA256 ciphersuites of AES and Camellia by Paul Bakker · 13 years ago
570267f - print error string in useful format by Paul Bakker · 13 years ago
92101f2 - Keep requests for future use by Paul Bakker · 13 years ago
57b1298 - Multi-domain certificates support wildcards as well by Paul Bakker · 13 years ago
a8cd239 - Added support for wildcard certificates by Paul Bakker · 13 years ago
fab5c82 - Added support for NULL cipher (POLARSSL_CIPHER_NULL_CIPHER) and weak ciphersuites (POLARSSL_ENABLE_WEAK_CIPHERSUITES). They are disabled by default! by Paul Bakker · 14 years ago
13eb9f0 - Added error exit code by Paul Bakker · 14 years ago
b1dee1c - Changed commands to lowercase where it was not the case by Paul Bakker · 14 years ago
69e095c - Changed the behaviour of x509parse_parse_crt for permissive parsing. Now returns the number of 'failed certificates' instead of having a switch to enable it. by Paul Bakker · 14 years ago
508ad5a - Moved all examples programs to use the new entropy and CTR_DRBG by Paul Bakker · 14 years ago
4dc6457 - Added public key of server1.key by Paul Bakker · 14 years ago
6c0ceb3 - Added permissive certificate parsing to x509parse_crt() and x509parse_crtfile(). With permissive parsing the parsing does not stop on encountering a parse-error by Paul Bakker · 14 years ago
a3d195c - Changed the used random function pointer to more flexible format. Renamed havege_rand() to havege_random() to prevent mistakes. Lots of changes as a consequence in library code and programs by Paul Bakker · 14 years ago
cce9d77 - Lots of minimal changes to better support WINCE as a build target by Paul Bakker · 14 years ago
61da752 - Changed read from server loop to read more than a single read. by Paul Bakker · 14 years ago
436e4c5 - Removed redundant "ok" printing by Paul Bakker · 14 years ago
b892b13 - Prevented compiler warning by Paul Bakker · 14 years ago
5a83522 - Added Windows dependent header code by Paul Bakker · 14 years ago
7eb013f - Added ssl_session_reset() to allow re-use of already set non-connection specific context information by Paul Bakker · 14 years ago
b81b3ab - Added safeguard not to build in WIN32 environment. by Paul Bakker · 14 years ago
5690efc - Fixed a whole bunch of dependencies on defines between files, examples and tests by Paul Bakker · 14 years ago
e22d703 - Fixed warnings with cast by Paul Bakker · 14 years ago
1496d38 - Added the ssl_mail_client example application by Paul Bakker · 14 years ago
cb79ae0b - Fixed description in header by Paul Bakker · 14 years ago
896ac22 - Added ssl_fork_server example program by Paul Bakker · 14 years ago
f357131 - Gather data until server gives EOF by Paul Bakker · 14 years ago
831a755 - Changed behaviour of net_recv(), ssl_fetch_input() and ssl_read(). net_recv() now returns 0 on EOF instead of POLARSSL_ERR_NET_CONN_RESET. ssl_fetch_input() returns POLARSSL_ERR_SSL_CONN_EOF on an EOF from its f_recv() function. ssl_read() returns 0 if a POLARSSL_ERR_SSL_CONN_EOF is received after the handshake. by Paul Bakker · 14 years ago
91b4159 - Added missing rsa_init() statement by Paul Bakker · 14 years ago
23986e5 - Major type rewrite of int to size_t for most variables and arguments used for buffer lengths and loops by Paul Bakker · 14 years ago
5193688 - Added force_ciphersuite option to ssl_client2 application by Paul Bakker · 14 years ago
400ff6f - Corrected parsing of UTCTime dates before 1990 and after 1950 by Paul Bakker · 14 years ago
1a207ec - Set sane start values for structures that are closed or freed. by Paul Bakker · 15 years ago
e3166ce - Renamed ciphers member of ssl_context and cipher member of ssl_session to ciphersuites and ciphersuite respectively. This clarifies the difference with the generic cipher layer and is better naming altogether by Paul Bakker · 15 years ago
b06819b - Adapted CMake files for the PKCS#11 support by Paul Bakker · 15 years ago
547f73d - Added install targets to the CMake files by Paul Bakker · 15 years ago
eaca51d - Minor text/debug fixes for release by Paul Bakker · 15 years ago
b96f154 - Fixed copyright message by Paul Bakker · 15 years ago
84f12b7 - Updated Copyright to correct entity by Paul Bakker · 15 years ago
6796839 by Paul Bakker · 15 years ago
77a4358 - Added support for the SSL_EDH_RSA_AES_128_SHA and SSL_EDH_RSA_CAMELLIA_128_SHA ciphersuites by Paul Bakker · 15 years ago