TrustedFirmware Git Browser
Code Review
Sign In
review.trustedfirmware.org
/
mirror
/
mbed-tls
/
fb18b6ccd2f7f33e893dbf5d299f232b51a7c41f
/
include
/
polarssl
/
ssl.h
ce2c02c
Enhance documentation of ssl_set_hostname
by Hanno Becker
· 8 years ago
10699cc
Simplify retaining of messages for future processing
by Hanno Becker
· 8 years ago
c2b9d98
Remember suitable hash function for any signature algorithm.
by Hanno Becker
· 8 years ago
c593427
Merge branch 'mbedtls-1.3' into mbedtls-1.3-restricted
by Manuel Pégourié-Gonnard
· 10 years ago
20607bb
Fix macroization of inline in C++
by Manuel Pégourié-Gonnard
· 10 years ago
c988f32
Added max length checking of hostname
by Simon Butcher
· 10 years ago
89789be
Fix handling of new config option
by Manuel Pégourié-Gonnard
· 10 years ago
f0f399d
Up default server DHM size to 2048 bits
by Manuel Pégourié-Gonnard
· 10 years ago
9ea1b23
Up min size of DHM params to 1024 bits on client
by Manuel Pégourié-Gonnard
· 10 years ago
48647b9
Merge remote-tracking branch 'nw/misc' into mbedtls-1.3
by Manuel Pégourié-Gonnard
· 10 years ago
d0fa5cc
Typos and doc additions
by Nicholas Wilson
· 10 years ago
e16b62c
Make results of (ext)KeyUsage accessible
by Manuel Pégourié-Gonnard
· 10 years ago
c70581c
Add POLARSSL_DEPRECATED_{WARNING,REMOVED}
by Manuel Pégourié-Gonnard
· 10 years ago
7143284
Use proper doxygen markup to mark deprecations
by Manuel Pégourié-Gonnard
· 10 years ago
fe44643
Rename website and repository
by Manuel Pégourié-Gonnard
· 10 years ago
860b516
Fix url again
by Manuel Pégourié-Gonnard
· 11 years ago
607d663
Add debug info for cert/suite selection
by Manuel Pégourié-Gonnard
· 11 years ago
e89163c
Fix bug in ssl_get_verify_result()
by Manuel Pégourié-Gonnard
· 11 years ago
085ab04
Fix website url to use https.
by Manuel Pégourié-Gonnard
· 11 years ago
9698f58
Remove maintainer line.
by Manuel Pégourié-Gonnard
· 11 years ago
19f6b5d
Remove redundant "all rights reserved"
by Manuel Pégourié-Gonnard
· 11 years ago
a658a40
Update copyright
by Manuel Pégourié-Gonnard
· 11 years ago
b4fe3cb
Rename to mbed TLS in the documentation/comments
by Manuel Pégourié-Gonnard
· 11 years ago
967a2a5
Change name to mbed TLS in the copyright notice
by Manuel Pégourié-Gonnard
· 11 years ago
11c9192
Fix error code description.
by Manuel Pégourié-Gonnard
· 11 years ago
5b8f7ea
Merge new security defaults for programs (RC4 disabled, SSL3 disabled)
by Paul Bakker
· 11 years ago
c82b7e2
Merge option to disable truncated hmac on the server-side
by Paul Bakker
· 11 years ago
e522d0f
Merge smarter certificate selection for pre-TLS-1.2 clients
by Paul Bakker
· 11 years ago
78803c0
Fix char signedness issue
by Manuel Pégourié-Gonnard
· 11 years ago
f356115
Merge support for 1/n-1 record splitting
by Paul Bakker
· 11 years ago
f6080b8
Merge support for enabling / disabling renegotiation support at compile-time
by Paul Bakker
· 11 years ago
d7e2483
Merge miscellaneous fixes into development
by Paul Bakker
· 11 years ago
bd47a58
Add ssl_set_arc4_support()
by Manuel Pégourié-Gonnard
· 11 years ago
448ea50
Set min version to TLS 1.0 in programs
by Manuel Pégourié-Gonnard
· 11 years ago
e117a8f
Make truncated hmac a runtime option server-side
by Manuel Pégourié-Gonnard
· 11 years ago
f01768c
Specific error for suites in common but none good
by Manuel Pégourié-Gonnard
· 11 years ago
cfa477e
Allow disabling record splitting at runtime
by Manuel Pégourié-Gonnard
· 11 years ago
d76314c
Add 1/n-1 record splitting
by Manuel Pégourié-Gonnard
· 11 years ago
edd371a
Enhance doc on ssl_write()
by Manuel Pégourié-Gonnard
· 11 years ago
837f0fe
Make renego period configurable
by Manuel Pégourié-Gonnard
· 11 years ago
0371704
Switch from an enable to a disable flag
by Manuel Pégourié-Gonnard
· 11 years ago
6186019
Save 48 bytes if SSLv3 is not defined
by Manuel Pégourié-Gonnard
· 11 years ago
615e677
Make renegotiation a compile-time option
by Manuel Pégourié-Gonnard
· 11 years ago
cb7da35
Fix typo in #ifdef
by Manuel Pégourié-Gonnard
· 11 years ago
3e94493
Fix comment on resumption
by Manuel Pégourié-Gonnard
· 11 years ago
d16d1cb
Use more #ifdef's on CLI_C and SRV_C in ssl_tls.c
by Manuel Pégourié-Gonnard
· 11 years ago
699cafa
Implement initial negotiation of EtM
by Manuel Pégourié-Gonnard
· 11 years ago
367381f
Add negotiation of Extended Master Secret
by Manuel Pégourié-Gonnard
· 11 years ago
01b2699
Implement FALLBACK_SCSV server-side
by Manuel Pégourié-Gonnard
· 11 years ago
1cbd39d
Implement FALLBACK_SCSV client-side
by Manuel Pégourié-Gonnard
· 11 years ago
9e4ff95
Clarified len parameter of ssl_read()
by Paul Bakker
· 11 years ago
44ade65
Implement (partial) renego delay on client
by Manuel Pégourié-Gonnard
· 11 years ago
6591962
Allow delay on renego on client
by Manuel Pégourié-Gonnard
· 11 years ago
55e4ff2
Tune comments
by Manuel Pégourié-Gonnard
· 11 years ago
8d4ad07
SHA-2 ciphersuites now require TLS 1.x
by Manuel Pégourié-Gonnard
· 11 years ago
accaffe
Restructure ssl_handshake_init() and small fixes
by Paul Bakker
· 11 years ago
08e81e0
Change selection of hash algorithm for TLS 1.2
by Manuel Pégourié-Gonnard
· 11 years ago
8fb99ab
Merge changes for leaner memory footprint
by Paul Bakker
· 11 years ago
481fcfd
Make PSK_LEN configurable and adjust PMS size
by Manuel Pégourié-Gonnard
· 11 years ago
a9964db
Add ssl_set_renegotiation_enforced()
by Manuel Pégourié-Gonnard
· 11 years ago
c27807d
Make SSL_BUFFER_LEN overhead depend more on config
by Manuel Pégourié-Gonnard
· 11 years ago
08485cc
Fix SSL_BUFFER_LEN
by Manuel Pégourié-Gonnard
· 11 years ago
b9e4e2c
Fix formatting: fix some 'easy' > 80 length lines
by Paul Bakker
· 11 years ago
9af723c
Fix formatting: remove trailing spaces, #endif with comments (> 10 lines)
by Paul Bakker
· 11 years ago
cef4ad2
Adapt sources to configurable config.h name
by Manuel Pégourié-Gonnard
· 11 years ago
088c5c5
POLARSSL_CONFIG_OPTIONS has been removed. Values are set individually
by Paul Bakker
· 11 years ago
043a2e2
Merge verification of the keyUsage extension in X.509 certificates
by Paul Bakker
· 11 years ago
7f2a07d
Check keyUsage in SSL client and server
by Manuel Pégourié-Gonnard
· 11 years ago
75342a6
Fixed typos in code
by Paul Bakker
· 11 years ago
89e3579
Implement ALPN server-side
by Manuel Pégourié-Gonnard
· 11 years ago
0b874dc
Implement ALPN client-side
by Manuel Pégourié-Gonnard
· 11 years ago
7e250d4
Add ALPN interface
by Manuel Pégourié-Gonnard
· 11 years ago
7a2aba8
Deprecate some non-PK compatibility functions
by Manuel Pégourié-Gonnard
· 11 years ago
a612b44
Fix typo in doc
by Manuel Pégourié-Gonnard
· 11 years ago
e2ce211
Update doc of ssl_set_authmode()
by Manuel Pégourié-Gonnard
· 11 years ago
83cdffc
Forbid sequence number wrapping
by Manuel Pégourié-Gonnard
· 11 years ago
ab24010
Enforce our choice of allowed curves.
by Manuel Pégourié-Gonnard
· 11 years ago
7f38ed0
ssl_set_curves is no longer ECDHE only
by Manuel Pégourié-Gonnard
· 11 years ago
cd49f76
Make ssl_set_curves() work client-side too.
by Manuel Pégourié-Gonnard
· 11 years ago
de05390
Rename ecdh_curve_list to curve_list
by Manuel Pégourié-Gonnard
· 11 years ago
5de2580
Make ssl_set_ecdh_curves() a compile-time option
by Manuel Pégourié-Gonnard
· 11 years ago
987bfb5
Added the possibility to define the allowed curves for ECDHE handshake. It also defines the preference of the curves.
by Gergely Budai
· 12 years ago
cf1d73b
Clarified ssl_set_ciphersuites() doc for influencing preference as well
by Paul Bakker
· 12 years ago
956c9e0
Reduced the input / output overhead with 200+ bytes and covered corner case
by Paul Bakker
· 12 years ago
c72ac7c
Fix SSLv3 handling of SHA-384 suites
by Manuel Pégourié-Gonnard
· 12 years ago
a9a028e
SSL now gracefully handles missing RNG
by Paul Bakker
· 12 years ago
28d81a0
Fix pkcs11.c to conform to PolarSSL 1.3 API.
by Steffan Karger
· 12 years ago
993e386
Merged renegotiation refactoring
by Paul Bakker
· 12 years ago
31ff1d2
Safer buffer comparisons in the SSL modules
by Manuel Pégourié-Gonnard
· 12 years ago
6d8404d
Server: enforce renegotiation
by Manuel Pégourié-Gonnard
· 12 years ago
9c1e189
Move some code around, improve documentation
by Manuel Pégourié-Gonnard
· 12 years ago
214eed3
Make ssl_renegotiate the only interface
by Manuel Pégourié-Gonnard
· 12 years ago
caed054
Allow ssl_renegotiate() to be called in a loop
by Manuel Pégourié-Gonnard
· 12 years ago
f3dc2f6
Add code for testing server-initiated renegotiation
by Manuel Pégourié-Gonnard
· 12 years ago
60b1d10
Fixed spelling / typos (from PowerDNS:codespell)
by Paul Bakker
· 12 years ago
1642122
Merged support for Camellia-GCM + ciphersuite and fixes to cipher layer
by Paul Bakker
· 12 years ago
677377f
Server does not send out extensions not advertised by client
by Paul Bakker
· 12 years ago
a8a25ae
Fix bad error codes
by Manuel Pégourié-Gonnard
· 12 years ago
f34673e
Merged RSA-PSK key-exchange and ciphersuites
by Paul Bakker
· 12 years ago
376e815
Merged ECDHE-PSK ciphersuites
by Paul Bakker
· 12 years ago
Next »