aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Refactored fragment building, use correct TLS content type for non-first ↵Martin Willi2010-08-251-67/+82
| | | | fragments
* Update delete_payload length when adding SPIsMartin Willi2010-08-251-0/+1
|
* Migrated delete_payload to INIT/METHOD macros, replaced iteratorMartin Willi2010-08-253-130/+108
|
* Use different return values in payload decryption to distinguish between ↵Martin Willi2010-08-253-12/+16
| | | | integrity and syntax errors
* Implemented a TLS utility to test on any TLS secured TCP connectionMartin Willi2010-08-254-4/+334
|
* Added a simple high level TLS wrapper for socketsMartin Willi2010-08-254-0/+290
|
* Initialize output chunk before appending data to itMartin Willi2010-08-251-0/+1
|
* Added private key support to in-memory credential setMartin Willi2010-08-252-1/+77
|
* Added certificate support to in-memory credential setMartin Willi2010-08-252-2/+121
|
* Check if colliding rekey actually created an IKE_INITThomas Egerer2010-08-251-37/+42
| | | | | | In some cases (especially if a child is half-open) the colliding rekey-job might not have created the ike_init member. If so, the nonce check fails with SIGSEGV.
* Added a ike_name logger option to prefix the IKE_SA name on each lineMartin Willi2010-08-255-19/+69
|
* removed tls_record_t definitionAndreas Steffen2010-08-241-10/+0
|
* Pass NULL peer identity to omit TLS peer authentication, added ↵Martin Willi2010-08-247-49/+36
| | | | eap-ttls.request_peer_auth option
* Skip the close notify if application layer completes successfullyMartin Willi2010-08-242-4/+11
|
* added ikev2/rw-eap-tls-fragments scenarioAndreas Steffen2010-08-2424-0/+119
|
* use correct network diagramAndreas Steffen2010-08-241-2/+2
|
* support fragmentation in AVPsAndreas Steffen2010-08-243-21/+118
|
* removed some redundant debug outputAndreas Steffen2010-08-242-4/+0
|
* Added generic TLS purposesMartin Willi2010-08-243-6/+19
|
* Client sends empty EAP-TTLS packet on fatal alerts to properly shut down TLSMartin Willi2010-08-241-0/+6
|
* Check if the application layer has completed successfullyMartin Willi2010-08-243-16/+62
|
* Moved TLS record parsing/generation to tls.cMartin Willi2010-08-244-134/+78
|
* added debug-tls comand line optionAndreas Steffen2010-08-231-0/+1
|
* Added a TLS purpose for EAP-TTLS with client authenticationMartin Willi2010-08-233-0/+4
|
* EAP-TLS clients send an empty packet on failure to properly shut down a TLS ↵Martin Willi2010-08-231-0/+6
| | | | session
* Implemented TLS Alert handlingMartin Willi2010-08-2315-80/+643
|
* Rebuild library.lo after changing ./configure optionsMartin Willi2010-08-231-0/+2
|
* Build a trustchain even if no trust anchor is givenMartin Willi2010-08-231-14/+23
|
* Accept encryption payloads with no wrapped payloadsMartin Willi2010-08-231-1/+1
|
* Fall back to shifting with 32-bit words if 64-bit byte order conversion ↵Martin Willi2010-08-231-10/+12
| | | | function missing
* Use enum mappings to resolve debug groupMartin Willi2010-08-231-16/+1
|
* Implemented generic enum name to enum value mappingMartin Willi2010-08-232-3/+44
|
* Verify negotiated TLS versionMartin Willi2010-08-234-8/+27
|
* Introducing a dedicated debug message group for libtlsMartin Willi2010-08-238-74/+78
|
* Streamlined TLS debugging outputMartin Willi2010-08-232-12/+12
|
* fixed build_cipher_suite_list()Andreas Steffen2010-08-211-6/+6
|
* Introducing simple purposes for the TLS stack, switches various optionsMartin Willi2010-08-209-30/+113
|
* Fixed compiler warningMartin Willi2010-08-201-1/+1
|
* enable the ccm and gcm plugins in the UML scenariosAndreas Steffen2010-08-202-1/+13
|
* Register missing SHA256 authenticator with no truncation, as used by TLSMartin Willi2010-08-201-0/+2
|
* Added more TLS cipher suites we already supportMartin Willi2010-08-201-30/+36
|
* Build TLS cipher suite list in a generic fashionMartin Willi2010-08-201-74/+51
|
* Fixed crypter keymat derivation bugMartin Willi2010-08-191-3/+4
|
* Added ctr, ccm, gcm plugin NEWSMartin Willi2010-08-191-0/+9
|
* Improve GCM performance by factor 2-3 by shifting full 32/64 bit wordsMartin Willi2010-08-191-5/+25
|
* Implemented a gcm plugin providing GCM mode based on CBC cryptersMartin Willi2010-08-197-0/+586
|
* Added AES-GCM test vectorsMartin Willi2010-08-193-0/+147
|
* Added a crypto transform stress test for profilingMartin Willi2010-08-194-4/+109
|
* Give a benchmark point for each operation to compare different transformsMartin Willi2010-08-191-1/+4
|
* Implemented a ccm plugin providing CCM mode based on CBC cryptersMartin Willi2010-08-197-0/+586
|