aboutsummaryrefslogtreecommitdiffstats
path: root/src/libtls
Commit message (Collapse)AuthorAgeFilesLines
...
* Added TLS extension identifiers from RFC 3546Martin Willi2010-09-062-9/+34
|
* Do not propose (EC)DHE suites if we do not support themMartin Willi2010-09-031-1/+5
|
* Offer only algorithms/suites we have a registered public key backend forMartin Willi2010-09-031-3/+68
|
* Fixed key type of ECDHE_RSA groupsMartin Willi2010-09-031-4/+4
|
* Use a dynamic curve enumerator to list/convert TLS named curvesMartin Willi2010-09-034-77/+138
|
* Use ECDH group check where appropriateMartin Willi2010-09-032-69/+35
|
* Add ECDHE enabled cipher suites, including ECDSA variantsMartin Willi2010-09-031-0/+60
|
* Select private key based on received cipher suitesMartin Willi2010-09-034-50/+116
|
* Support for EC curve Hello extension, EC curve fallbackMartin Willi2010-09-036-23/+143
|
* Added server support for ECDHE key exchangeMartin Willi2010-09-031-14/+60
|
* Added client support for ECDHE key exchangeMartin Willi2010-09-031-2/+103
|
* Added TLS EC curve type and name identifiersMartin Willi2010-09-032-0/+87
|
* fixed typoAndreas Steffen2010-09-031-1/+1
|
* Check for queued TLS alerts after each handshake partMartin Willi2010-09-031-0/+4
|
* removed redundant debug outputAndreas Steffen2010-09-021-2/+0
|
* Add DHE enabled RSA variants to the supported TLS suitesMartin Willi2010-09-021-0/+36
|
* Added TLS server side support for DHE suitesMartin Willi2010-09-021-3/+116
|
* Added TLS client side support for DHE suitesMartin Willi2010-09-021-25/+187
|
* Store a MODP group we use for each TLS suiteMartin Willi2010-09-022-12/+34
|
* Implemented "signature algorithm" hello extensionMartin Willi2010-09-022-1/+45
|
* Added TLS extension identifiersMartin Willi2010-09-022-0/+17
|
* Added generic TLS data sign/verify, hash/sig algorithm constructionMartin Willi2010-09-023-97/+143
|
* Continue with a randomized premaster if decryption failed / version mismatchesMartin Willi2010-09-021-9/+41
|
* Support different hash/sig algorithms in handshake signing, including ECDSAMartin Willi2010-09-024-41/+268
|
* Added TLS ClientCertificateType identifiersMartin Willi2010-09-022-0/+40
|
* Added TLS specific Hash and Signature Algorithm identifiersMartin Willi2010-09-022-0/+50
|
* Fixed typos in tls_writer method descriptionsMartin Willi2010-09-021-2/+2
|
* cosmetics in debug outputAndreas Steffen2010-09-011-2/+3
|
* clarified debug outputAndreas Steffen2010-08-311-1/+1
|
* fixed typoAndreas Steffen2010-08-311-1/+1
|
* Do not process any more TLS handshake messages on fatal alertsMartin Willi2010-08-311-0/+4
|
* Strictly check if the server certificate matches the TLS server identityMartin Willi2010-08-311-0/+44
|
* Added strongswan.conf options for EAP-TLS/TTLS fragment sizeMartin Willi2010-08-312-5/+10
|
* Support processing of partial TLS record headersMartin Willi2010-08-311-15/+39
|
* Implemented a generic TLS EAP helper to implement EAP-TLS, TTLS and other ↵Martin Willi2010-08-313-0/+415
| | | | variants
* Support output fragmentation of TLS recordsMartin Willi2010-08-313-48/+117
|
* Implemented buffering of partial records in TLS stackMartin Willi2010-08-311-15/+65
|
* Log TLS handshake subtypes as handshakesMartin Willi2010-08-311-5/+5
|
* Typo in doxygen comment fixed.Tobias Brunner2010-08-301-1/+1
|
* Prefer AES/Camellia suites over 3DES/NULL encryptionMartin Willi2010-08-251-16/+16
|
* Send TLS alerts for errors in TLS handshake buildingMartin Willi2010-08-253-0/+12
|
* Refactored fragment building, use correct TLS content type for non-first ↵Martin Willi2010-08-251-67/+82
| | | | fragments
* Added a simple high level TLS wrapper for socketsMartin Willi2010-08-254-0/+290
|
* Initialize output chunk before appending data to itMartin Willi2010-08-251-0/+1
|
* Pass NULL peer identity to omit TLS peer authentication, added ↵Martin Willi2010-08-245-47/+29
| | | | eap-ttls.request_peer_auth option
* Skip the close notify if application layer completes successfullyMartin Willi2010-08-242-4/+11
|
* removed some redundant debug outputAndreas Steffen2010-08-242-4/+0
|
* Added generic TLS purposesMartin Willi2010-08-243-6/+19
|
* Check if the application layer has completed successfullyMartin Willi2010-08-243-16/+62
|
* Moved TLS record parsing/generation to tls.cMartin Willi2010-08-242-12/+70
|