index
:
tteras/strongswan
master
tteras
tteras-release
tteras' strongSwan tree
gitolite
about
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
src
/
libtls
Commit message (
Collapse
)
Author
Age
Files
Lines
*
cast enumerated algorithm type as int
Andreas Steffen
2010-12-18
1
-3
/
+4
|
*
trace back crypto algorithms to the plugins that registered them
Andreas Steffen
2010-12-18
1
-2
/
+5
|
*
output TLS-independent error messages
Andreas Steffen
2010-12-05
1
-9
/
+9
|
*
call is_complete() if tls protocol returns with SUCCESS
Andreas Steffen
2010-11-16
1
-4
/
+8
|
*
set EAP-TTLS/TNC version also in acknowledgement packets
Andreas Steffen
2010-10-04
1
-0
/
+11
|
*
Do not change cipherspec while we have buffered handshake fragments pending
Martin Willi
2010-09-09
1
-6
/
+6
|
*
added explanatory comments
Andreas Steffen
2010-09-09
1
-5
/
+5
|
*
max max_message_count configurable and move it into tls_eap_t
Andreas Steffen
2010-09-08
2
-3
/
+25
|
*
handle TLS_PURPOSE_EAP_TNC
Andreas Steffen
2010-09-08
1
-0
/
+2
|
*
moved tls_t existance test into tls_eap_create() again
Andreas Steffen
2010-09-08
1
-0
/
+5
|
*
generalized tls_eap_t to support EAP_TNC wrapping the TNC_IF_TNCCS protocol
Andreas Steffen
2010-09-08
3
-36
/
+40
|
*
Read the compression type byte for EC groups, only
Martin Willi
2010-09-08
1
-6
/
+10
|
*
Include ec_point_format extension in ClientHello
Martin Willi
2010-09-06
1
-0
/
+6
|
*
Added TLS specific EC point formats
Martin Willi
2010-09-06
2
-0
/
+23
|
*
Renamed ecp_format to ansi_format, as point formats in TLS use different ↵
Martin Willi
2010-09-06
4
-15
/
+15
|
|
|
|
identifiers
*
Accept TLS records with zero-length plaintext
Martin Willi
2010-09-06
1
-1
/
+1
|
*
Added strongswan.conf option to filter for specific TLS suites
Martin Willi
2010-09-06
1
-0
/
+32
|
*
Added strongswan.conf options to filter cipher suites by specific algorithms
Martin Willi
2010-09-06
1
-0
/
+173
|
*
Fixed key type in TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
Martin Willi
2010-09-06
1
-1
/
+1
|
*
Prepend point format to ECDH public key
Martin Willi
2010-09-06
4
-8
/
+52
|
*
Log the selected (EC)DH group
Martin Willi
2010-09-06
1
-0
/
+2
|
*
Parse unsupported TLS Hello extensions properly
Martin Willi
2010-09-06
1
-10
/
+6
|
*
Added TLS extension identifiers from RFC 3546
Martin Willi
2010-09-06
2
-9
/
+34
|
*
Do not propose (EC)DHE suites if we do not support them
Martin Willi
2010-09-03
1
-1
/
+5
|
*
Offer only algorithms/suites we have a registered public key backend for
Martin Willi
2010-09-03
1
-3
/
+68
|
*
Fixed key type of ECDHE_RSA groups
Martin Willi
2010-09-03
1
-4
/
+4
|
*
Use a dynamic curve enumerator to list/convert TLS named curves
Martin Willi
2010-09-03
4
-77
/
+138
|
*
Use ECDH group check where appropriate
Martin Willi
2010-09-03
2
-69
/
+35
|
*
Add ECDHE enabled cipher suites, including ECDSA variants
Martin Willi
2010-09-03
1
-0
/
+60
|
*
Select private key based on received cipher suites
Martin Willi
2010-09-03
4
-50
/
+116
|
*
Support for EC curve Hello extension, EC curve fallback
Martin Willi
2010-09-03
6
-23
/
+143
|
*
Added server support for ECDHE key exchange
Martin Willi
2010-09-03
1
-14
/
+60
|
*
Added client support for ECDHE key exchange
Martin Willi
2010-09-03
1
-2
/
+103
|
*
Added TLS EC curve type and name identifiers
Martin Willi
2010-09-03
2
-0
/
+87
|
*
fixed typo
Andreas Steffen
2010-09-03
1
-1
/
+1
|
*
Check for queued TLS alerts after each handshake part
Martin Willi
2010-09-03
1
-0
/
+4
|
*
removed redundant debug output
Andreas Steffen
2010-09-02
1
-2
/
+0
|
*
Add DHE enabled RSA variants to the supported TLS suites
Martin Willi
2010-09-02
1
-0
/
+36
|
*
Added TLS server side support for DHE suites
Martin Willi
2010-09-02
1
-3
/
+116
|
*
Added TLS client side support for DHE suites
Martin Willi
2010-09-02
1
-25
/
+187
|
*
Store a MODP group we use for each TLS suite
Martin Willi
2010-09-02
2
-12
/
+34
|
*
Implemented "signature algorithm" hello extension
Martin Willi
2010-09-02
2
-1
/
+45
|
*
Added TLS extension identifiers
Martin Willi
2010-09-02
2
-0
/
+17
|
*
Added generic TLS data sign/verify, hash/sig algorithm construction
Martin Willi
2010-09-02
3
-97
/
+143
|
*
Continue with a randomized premaster if decryption failed / version mismatches
Martin Willi
2010-09-02
1
-9
/
+41
|
*
Support different hash/sig algorithms in handshake signing, including ECDSA
Martin Willi
2010-09-02
4
-41
/
+268
|
*
Added TLS ClientCertificateType identifiers
Martin Willi
2010-09-02
2
-0
/
+40
|
*
Added TLS specific Hash and Signature Algorithm identifiers
Martin Willi
2010-09-02
2
-0
/
+50
|
*
Fixed typos in tls_writer method descriptions
Martin Willi
2010-09-02
1
-2
/
+2
|
*
cosmetics in debug output
Andreas Steffen
2010-09-01
1
-2
/
+3
|
[next]