aboutsummaryrefslogtreecommitdiffstats
path: root/src/libtls/tls_peer.c
Commit message (Expand)AuthorAgeFilesLines
* Delegate tls_t.get_{peer,server}_id to handshake layerMartin Willi2013-02-281-2/+21
* Fixed encoding of TLS extensions (elliptic_curves and signature_algorithms)Tobias Brunner2012-11-281-0/+1
* Moved debug.[ch] to utils folderTobias Brunner2012-10-241-1/+1
* Check rng return value when generating secrets and IVs in libtlsTobias Brunner2012-07-161-6/+8
* Add a return value to tls_crypto_t.derive_secrets()Martin Willi2012-07-161-8/+17
* Implemented TLS session resumption both as client and as serverMartin Willi2011-12-311-17/+60
* Separated cipherspec checking and switching, allowing us to defer the secondMartin Willi2011-12-311-13/+19
* renamed tls_reader|writer to bio_* and moved to libstrongswanAndreas Steffen2011-05-311-30/+30
* Continue without client authentication if no matching certificate foundMartin Willi2011-04-141-19/+22
* Ignore TLS certificate requests as peer if peer authentication disabledMartin Willi2011-04-141-13/+14
* Send TLS Server Name Indication as peer if server identity is a FQDNMartin Willi2011-04-141-0/+14
* Include ec_point_format extension in ClientHelloMartin Willi2010-09-061-0/+6
* Renamed ecp_format to ansi_format, as point formats in TLS use different iden...Martin Willi2010-09-061-3/+3
* Prepend point format to ECDH public keyMartin Willi2010-09-061-4/+14
* Use a dynamic curve enumerator to list/convert TLS named curvesMartin Willi2010-09-031-24/+49
* Use ECDH group check where appropriateMartin Willi2010-09-031-27/+10
* Select private key based on received cipher suitesMartin Willi2010-09-031-1/+1
* Support for EC curve Hello extension, EC curve fallbackMartin Willi2010-09-031-1/+5
* Added client support for ECDHE key exchangeMartin Willi2010-09-031-2/+103
* Added TLS client side support for DHE suitesMartin Willi2010-09-021-25/+187
* Implemented "signature algorithm" hello extensionMartin Willi2010-09-021-0/+8
* Support different hash/sig algorithms in handshake signing, including ECDSAMartin Willi2010-09-021-7/+56
* Strictly check if the server certificate matches the TLS server identityMartin Willi2010-08-311-0/+44
* Send TLS alerts for errors in TLS handshake buildingMartin Willi2010-08-251-0/+6
* Pass NULL peer identity to omit TLS peer authentication, added eap-ttls.reque...Martin Willi2010-08-241-15/+19
* removed some redundant debug outputAndreas Steffen2010-08-241-2/+0
* Implemented TLS Alert handlingMartin Willi2010-08-231-17/+47
* Verify negotiated TLS versionMartin Willi2010-08-231-2/+4
* Introducing a dedicated debug message group for libtlsMartin Willi2010-08-231-23/+23
* Streamlined TLS debugging outputMartin Willi2010-08-231-7/+6
* Use a seperate section for each nested struct member in INIT macroMartin Willi2010-08-181-8/+9
* added generic TLS application data handler and specific EAP-TTLS instantiationAndreas Steffen2010-08-121-0/+7
* Added support for different encryption schemes to private/public keysMartin Willi2010-08-101-1/+2
* support server authentication only for EAP-TTLSAndreas Steffen2010-08-071-5/+23
* Use certificate subject to get a public key of the TLS serverMartin Willi2010-08-051-7/+11
* added some more TLS debug outputAndreas Steffen2010-08-051-7/+14
* log selected TLS version and cipher suiteAndreas Steffen2010-08-051-1/+6
* Moved TLS stack to its own libraryMartin Willi2010-08-031-0/+625