| Commit message (Expand) | Author | Age | Files | Lines |
* | Double check if a cached suite is available, overwrite any old suite state | Martin Willi | 2012-02-07 | 1 | -2/+3 |
* | Fix TLS EAP-MSK derivation, uses different order of randoms than key expansion | Martin Willi | 2012-02-07 | 1 | -0/+1 |
* | Filter TLS suite MAC by HMAC algorithm, as the hash is not necessarily the same | Martin Willi | 2012-02-07 | 1 | -4/+4 |
* | Implemented TLS session resumption both as client and as server | Martin Willi | 2011-12-31 | 1 | -23/+81 |
* | In TLS 1.2, PRF and HASH function use at least SHA-256, not the MAC hash func... | Martin Willi | 2011-12-24 | 1 | -20/+20 |
* | Fixed common misspellings. | Tobias Brunner | 2011-07-20 | 1 | -1/+1 |
* | renamed tls_reader|writer to bio_* and moved to libstrongswan | Andreas Steffen | 2011-05-31 | 1 | -9/+9 |
* | Revert alloc_str changes | Martin Willi | 2011-04-21 | 1 | -8/+4 |
* | Use thread save settings alloc_str function where appropriate | Martin Willi | 2011-04-21 | 1 | -4/+8 |
* | added TLS_PURPOSE_EAP_PEAP | Andreas Steffen | 2011-04-05 | 1 | -0/+1 |
* | cast enumerated algorithm type as int | Andreas Steffen | 2010-12-18 | 1 | -3/+4 |
* | trace back crypto algorithms to the plugins that registered them | Andreas Steffen | 2010-12-18 | 1 | -2/+5 |
* | handle TLS_PURPOSE_EAP_TNC | Andreas Steffen | 2010-09-08 | 1 | -0/+2 |
* | Added TLS specific EC point formats | Martin Willi | 2010-09-06 | 1 | -0/+7 |
* | Renamed ecp_format to ansi_format, as point formats in TLS use different iden... | Martin Willi | 2010-09-06 | 1 | -1/+1 |
* | Added strongswan.conf option to filter for specific TLS suites | Martin Willi | 2010-09-06 | 1 | -0/+32 |
* | Added strongswan.conf options to filter cipher suites by specific algorithms | Martin Willi | 2010-09-06 | 1 | -0/+173 |
* | Fixed key type in TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA | Martin Willi | 2010-09-06 | 1 | -1/+1 |
* | Prepend point format to ECDH public key | Martin Willi | 2010-09-06 | 1 | -0/+8 |
* | Do not propose (EC)DHE suites if we do not support them | Martin Willi | 2010-09-03 | 1 | -1/+5 |
* | Offer only algorithms/suites we have a registered public key backend for | Martin Willi | 2010-09-03 | 1 | -3/+68 |
* | Fixed key type of ECDHE_RSA groups | Martin Willi | 2010-09-03 | 1 | -4/+4 |
* | Use a dynamic curve enumerator to list/convert TLS named curves | Martin Willi | 2010-09-03 | 1 | -11/+47 |
* | Add ECDHE enabled cipher suites, including ECDSA variants | Martin Willi | 2010-09-03 | 1 | -0/+60 |
* | Select private key based on received cipher suites | Martin Willi | 2010-09-03 | 1 | -36/+58 |
* | Support for EC curve Hello extension, EC curve fallback | Martin Willi | 2010-09-03 | 1 | -0/+14 |
* | Added TLS EC curve type and name identifiers | Martin Willi | 2010-09-03 | 1 | -0/+34 |
* | Add DHE enabled RSA variants to the supported TLS suites | Martin Willi | 2010-09-02 | 1 | -0/+36 |
* | Store a MODP group we use for each TLS suite | Martin Willi | 2010-09-02 | 1 | -12/+27 |
* | Added generic TLS data sign/verify, hash/sig algorithm construction | Martin Willi | 2010-09-02 | 1 | -34/+104 |
* | Support different hash/sig algorithms in handshake signing, including ECDSA | Martin Willi | 2010-09-02 | 1 | -26/+146 |
* | Added TLS ClientCertificateType identifiers | Martin Willi | 2010-09-02 | 1 | -0/+19 |
* | Added TLS specific Hash and Signature Algorithm identifiers | Martin Willi | 2010-09-02 | 1 | -0/+16 |
* | Prefer AES/Camellia suites over 3DES/NULL encryption | Martin Willi | 2010-08-25 | 1 | -16/+16 |
* | Pass NULL peer identity to omit TLS peer authentication, added eap-ttls.reque... | Martin Willi | 2010-08-24 | 1 | -2/+0 |
* | Added generic TLS purposes | Martin Willi | 2010-08-24 | 1 | -6/+13 |
* | Added a TLS purpose for EAP-TTLS with client authentication | Martin Willi | 2010-08-23 | 1 | -0/+1 |
* | Introducing a dedicated debug message group for libtls | Martin Willi | 2010-08-23 | 1 | -11/+11 |
* | fixed build_cipher_suite_list() | Andreas Steffen | 2010-08-21 | 1 | -6/+6 |
* | Introducing simple purposes for the TLS stack, switches various options | Martin Willi | 2010-08-20 | 1 | -5/+39 |
* | Added more TLS cipher suites we already support | Martin Willi | 2010-08-20 | 1 | -30/+36 |
* | Build TLS cipher suite list in a generic fashion | Martin Willi | 2010-08-20 | 1 | -74/+51 |
* | Use IV length of a crypter instead of block size for IV calculations | Martin Willi | 2010-08-13 | 1 | -1/+1 |
* | EAP-TLS and EAP-TTLS use different constant MSK PRF label | Andreas Steffen | 2010-08-07 | 1 | -3/+9 |
* | Whitespace cleanups | Martin Willi | 2010-08-05 | 1 | -6/+6 |
* | fixed type in cipher suite list build | Andreas Steffen | 2010-08-05 | 1 | -1/+1 |
* | log selected TLS version and cipher suite | Andreas Steffen | 2010-08-05 | 1 | -0/+221 |
* | Moved TLS stack to its own library | Martin Willi | 2010-08-03 | 1 | -0/+691 |