aboutsummaryrefslogtreecommitdiffstats
path: root/src/libtls
Commit message (Collapse)AuthorAgeFilesLines
...
* Fixed typos in tls_writer method descriptionsMartin Willi2010-09-021-2/+2
|
* cosmetics in debug outputAndreas Steffen2010-09-011-2/+3
|
* clarified debug outputAndreas Steffen2010-08-311-1/+1
|
* fixed typoAndreas Steffen2010-08-311-1/+1
|
* Do not process any more TLS handshake messages on fatal alertsMartin Willi2010-08-311-0/+4
|
* Strictly check if the server certificate matches the TLS server identityMartin Willi2010-08-311-0/+44
|
* Added strongswan.conf options for EAP-TLS/TTLS fragment sizeMartin Willi2010-08-312-5/+10
|
* Support processing of partial TLS record headersMartin Willi2010-08-311-15/+39
|
* Implemented a generic TLS EAP helper to implement EAP-TLS, TTLS and other ↵Martin Willi2010-08-313-0/+415
| | | | variants
* Support output fragmentation of TLS recordsMartin Willi2010-08-313-48/+117
|
* Implemented buffering of partial records in TLS stackMartin Willi2010-08-311-15/+65
|
* Log TLS handshake subtypes as handshakesMartin Willi2010-08-311-5/+5
|
* Typo in doxygen comment fixed.Tobias Brunner2010-08-301-1/+1
|
* Prefer AES/Camellia suites over 3DES/NULL encryptionMartin Willi2010-08-251-16/+16
|
* Send TLS alerts for errors in TLS handshake buildingMartin Willi2010-08-253-0/+12
|
* Refactored fragment building, use correct TLS content type for non-first ↵Martin Willi2010-08-251-67/+82
| | | | fragments
* Added a simple high level TLS wrapper for socketsMartin Willi2010-08-254-0/+290
|
* Initialize output chunk before appending data to itMartin Willi2010-08-251-0/+1
|
* Pass NULL peer identity to omit TLS peer authentication, added ↵Martin Willi2010-08-245-47/+29
| | | | eap-ttls.request_peer_auth option
* Skip the close notify if application layer completes successfullyMartin Willi2010-08-242-4/+11
|
* removed some redundant debug outputAndreas Steffen2010-08-242-4/+0
|
* Added generic TLS purposesMartin Willi2010-08-243-6/+19
|
* Check if the application layer has completed successfullyMartin Willi2010-08-243-16/+62
|
* Moved TLS record parsing/generation to tls.cMartin Willi2010-08-242-12/+70
|
* Added a TLS purpose for EAP-TTLS with client authenticationMartin Willi2010-08-233-0/+4
|
* Implemented TLS Alert handlingMartin Willi2010-08-2315-80/+643
|
* Verify negotiated TLS versionMartin Willi2010-08-234-8/+27
|
* Introducing a dedicated debug message group for libtlsMartin Willi2010-08-236-74/+74
|
* Streamlined TLS debugging outputMartin Willi2010-08-232-12/+12
|
* fixed build_cipher_suite_list()Andreas Steffen2010-08-211-6/+6
|
* Introducing simple purposes for the TLS stack, switches various optionsMartin Willi2010-08-207-24/+98
|
* Added more TLS cipher suites we already supportMartin Willi2010-08-201-30/+36
|
* Build TLS cipher suite list in a generic fashionMartin Willi2010-08-201-74/+51
|
* removed debug output for TLS application dataAndreas Steffen2010-08-191-5/+0
|
* add TLS handshake packet size to debug outputAndreas Steffen2010-08-181-5/+7
|
* Use a seperate section for each nested struct member in INIT macroMartin Willi2010-08-182-15/+18
|
* Only include certificates with CA flag in TLS cert requestMartin Willi2010-08-161-2/+8
|
* optional certificate-based peer authentication on TLS server sideAndreas Steffen2010-08-154-19/+45
|
* do not dump tls application data any moreAndreas Steffen2010-08-131-9/+6
|
* Use IV length of a crypter instead of block size for IV calculationsMartin Willi2010-08-132-11/+13
|
* set TLS record type before state change to STATE_FINISHED_SENTAndreas Steffen2010-08-131-2/+2
|
* fixed sequence numbering and iv of TLS protection layerAndreas Steffen2010-08-121-3/+3
|
* added generic TLS application data handler and specific EAP-TTLS instantiationAndreas Steffen2010-08-129-26/+181
|
* Added support for different encryption schemes to private/public keysMartin Willi2010-08-102-2/+4
|
* EAP-TLS and EAP-TTLS use different constant MSK PRF labelAndreas Steffen2010-08-074-7/+16
|
* support server authentication only for EAP-TTLSAndreas Steffen2010-08-071-5/+23
|
* Whitespace cleanupsMartin Willi2010-08-052-10/+10
|
* Use certificate subject to get a public key of the TLS serverMartin Willi2010-08-051-7/+11
|
* Some Doxygen fixes.Tobias Brunner2010-08-051-1/+1
|
* added some more TLS debug outputAndreas Steffen2010-08-052-9/+29
|