index
:
tteras/strongswan
master
tteras
tteras-release
tteras' strongSwan tree
gitolite
about
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
src
/
libtls
Commit message (
Collapse
)
Author
Age
Files
Lines
...
*
Added TLS extension identifiers from RFC 3546
Martin Willi
2010-09-06
2
-9
/
+34
|
*
Do not propose (EC)DHE suites if we do not support them
Martin Willi
2010-09-03
1
-1
/
+5
|
*
Offer only algorithms/suites we have a registered public key backend for
Martin Willi
2010-09-03
1
-3
/
+68
|
*
Fixed key type of ECDHE_RSA groups
Martin Willi
2010-09-03
1
-4
/
+4
|
*
Use a dynamic curve enumerator to list/convert TLS named curves
Martin Willi
2010-09-03
4
-77
/
+138
|
*
Use ECDH group check where appropriate
Martin Willi
2010-09-03
2
-69
/
+35
|
*
Add ECDHE enabled cipher suites, including ECDSA variants
Martin Willi
2010-09-03
1
-0
/
+60
|
*
Select private key based on received cipher suites
Martin Willi
2010-09-03
4
-50
/
+116
|
*
Support for EC curve Hello extension, EC curve fallback
Martin Willi
2010-09-03
6
-23
/
+143
|
*
Added server support for ECDHE key exchange
Martin Willi
2010-09-03
1
-14
/
+60
|
*
Added client support for ECDHE key exchange
Martin Willi
2010-09-03
1
-2
/
+103
|
*
Added TLS EC curve type and name identifiers
Martin Willi
2010-09-03
2
-0
/
+87
|
*
fixed typo
Andreas Steffen
2010-09-03
1
-1
/
+1
|
*
Check for queued TLS alerts after each handshake part
Martin Willi
2010-09-03
1
-0
/
+4
|
*
removed redundant debug output
Andreas Steffen
2010-09-02
1
-2
/
+0
|
*
Add DHE enabled RSA variants to the supported TLS suites
Martin Willi
2010-09-02
1
-0
/
+36
|
*
Added TLS server side support for DHE suites
Martin Willi
2010-09-02
1
-3
/
+116
|
*
Added TLS client side support for DHE suites
Martin Willi
2010-09-02
1
-25
/
+187
|
*
Store a MODP group we use for each TLS suite
Martin Willi
2010-09-02
2
-12
/
+34
|
*
Implemented "signature algorithm" hello extension
Martin Willi
2010-09-02
2
-1
/
+45
|
*
Added TLS extension identifiers
Martin Willi
2010-09-02
2
-0
/
+17
|
*
Added generic TLS data sign/verify, hash/sig algorithm construction
Martin Willi
2010-09-02
3
-97
/
+143
|
*
Continue with a randomized premaster if decryption failed / version mismatches
Martin Willi
2010-09-02
1
-9
/
+41
|
*
Support different hash/sig algorithms in handshake signing, including ECDSA
Martin Willi
2010-09-02
4
-41
/
+268
|
*
Added TLS ClientCertificateType identifiers
Martin Willi
2010-09-02
2
-0
/
+40
|
*
Added TLS specific Hash and Signature Algorithm identifiers
Martin Willi
2010-09-02
2
-0
/
+50
|
*
Fixed typos in tls_writer method descriptions
Martin Willi
2010-09-02
1
-2
/
+2
|
*
cosmetics in debug output
Andreas Steffen
2010-09-01
1
-2
/
+3
|
*
clarified debug output
Andreas Steffen
2010-08-31
1
-1
/
+1
|
*
fixed typo
Andreas Steffen
2010-08-31
1
-1
/
+1
|
*
Do not process any more TLS handshake messages on fatal alerts
Martin Willi
2010-08-31
1
-0
/
+4
|
*
Strictly check if the server certificate matches the TLS server identity
Martin Willi
2010-08-31
1
-0
/
+44
|
*
Added strongswan.conf options for EAP-TLS/TTLS fragment size
Martin Willi
2010-08-31
2
-5
/
+10
|
*
Support processing of partial TLS record headers
Martin Willi
2010-08-31
1
-15
/
+39
|
*
Implemented a generic TLS EAP helper to implement EAP-TLS, TTLS and other ↵
Martin Willi
2010-08-31
3
-0
/
+415
|
|
|
|
variants
*
Support output fragmentation of TLS records
Martin Willi
2010-08-31
3
-48
/
+117
|
*
Implemented buffering of partial records in TLS stack
Martin Willi
2010-08-31
1
-15
/
+65
|
*
Log TLS handshake subtypes as handshakes
Martin Willi
2010-08-31
1
-5
/
+5
|
*
Typo in doxygen comment fixed.
Tobias Brunner
2010-08-30
1
-1
/
+1
|
*
Prefer AES/Camellia suites over 3DES/NULL encryption
Martin Willi
2010-08-25
1
-16
/
+16
|
*
Send TLS alerts for errors in TLS handshake building
Martin Willi
2010-08-25
3
-0
/
+12
|
*
Refactored fragment building, use correct TLS content type for non-first ↵
Martin Willi
2010-08-25
1
-67
/
+82
|
|
|
|
fragments
*
Added a simple high level TLS wrapper for sockets
Martin Willi
2010-08-25
4
-0
/
+290
|
*
Initialize output chunk before appending data to it
Martin Willi
2010-08-25
1
-0
/
+1
|
*
Pass NULL peer identity to omit TLS peer authentication, added ↵
Martin Willi
2010-08-24
5
-47
/
+29
|
|
|
|
eap-ttls.request_peer_auth option
*
Skip the close notify if application layer completes successfully
Martin Willi
2010-08-24
2
-4
/
+11
|
*
removed some redundant debug output
Andreas Steffen
2010-08-24
2
-4
/
+0
|
*
Added generic TLS purposes
Martin Willi
2010-08-24
3
-6
/
+19
|
*
Check if the application layer has completed successfully
Martin Willi
2010-08-24
3
-16
/
+62
|
*
Moved TLS record parsing/generation to tls.c
Martin Willi
2010-08-24
2
-12
/
+70
|
[prev]
[next]