Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Fix MacPorts link | lloyd | 2013-01-30 | 1 | -1/+1 | |
| | ||||||
* | Reorder download options | lloyd | 2013-01-22 | 1 | -14/+14 | |
| | ||||||
* | Turn on zero as nullptr warning all the time | lloyd | 2013-01-11 | 1 | -2/+2 | |
| | ||||||
* | Initial 1.11.2 release notes | lloyd | 2013-01-09 | 1 | -0/+21 | |
| | ||||||
* | merge of 'cd6ac87e70c08d19a2628acaacc9c4f592dfd6fb' | lloyd | 2013-01-09 | 3 | -3/+21 | |
|\ | | | | | | | and 'df16b54f0669e55f882c33d77641f76551f579ef' | |||||
| * | Update docs for 1.10.4 release | lloyd | 2013-01-09 | 3 | -3/+21 | |
| | | ||||||
* | | Error creating botan_version.py for release :( | lloyd | 2012-12-27 | 1 | -1/+1 | |
| | | ||||||
* | | Don't need to pass the sequence numbers struct in here, all we need is | lloyd | 2012-12-14 | 3 | -5/+3 | |
|/ | | | | the value we want to use this time. | |||||
* | merge of '2a4d641c566916555a5127b4ba82a1fa9f9e2b0c' | lloyd | 2012-12-10 | 5 | -90/+123 | |
|\ | | | | | | | and '59030896322f59cfd47ba0ff17993ccd263174c6' | |||||
| * | Re-add support for reading SSLv2 client hellos | lloyd | 2012-12-10 | 2 | -11/+22 | |
| | | ||||||
| * | Add a Record struct to combine the record contents, type, sequence #, | lloyd | 2012-12-10 | 5 | -82/+104 | |
| | | | | | | | | and version into a single value. | |||||
* | | Example compile fixes | lloyd | 2012-12-08 | 4 | -5/+20 | |
| | | ||||||
* | | merge of '89aeac10a9f26bde460f79731880bb728caf6312' | lloyd | 2012-12-07 | 56 | -88/+229 | |
|\| | | | | | | | and 'e13b86dad266d168e462d0f0fe87e9e5f94e36a6' | |||||
| * | Add new helper zap which zeros a vector, clears it, and then calls | lloyd | 2012-11-29 | 55 | -84/+224 | |
| | | | | | | | | shrink_to_fit to actually deallocate memory. | |||||
| * | Compile fix | lloyd | 2012-11-29 | 1 | -4/+5 | |
| | | ||||||
* | | Avoid compile time incompatability with VC 2012 | lloyd | 2012-11-21 | 1 | -8/+2 | |
|/ | ||||||
* | Update for new cred API | lloyd | 2012-11-13 | 1 | -11/+6 | |
| | ||||||
* | Change Credentials_Manager::trusted_certificate_authorities to return | lloyd | 2012-11-13 | 8 | -47/+78 | |
| | | | | | | | | | a list of Certificate_Stores instead of a list of actual certs, allowing for instance the ability to reference a DB cert store without actually pulling all the certs into memory. Add Certificate_Store::all_subjects which returns the DNs of all contained certificates. | |||||
* | Changes so DTLS handshake can send messages under different epochs, eg | lloyd | 2012-11-12 | 7 | -55/+85 | |
| | | | | for retransmitting a flight. | |||||
* | Move memory zeroing to a compiled function in a new source file. Cast | lloyd | 2012-11-12 | 3 | -11/+38 | |
| | | | | | | | | the pointer to volatile before writing to it. At least for various versions of GCC, Clang, and ICC on x86-64, this does cause the compiler to emit a simple byte-at-a-time loop, and at least in non-LTO builds the compiler won't optimize the call away. For dealing with LTO, probably would have to do some kind of complicated side-effect. | |||||
* | Remove Channel::m_max_fragment. Instead derive it from the server | lloyd | 2012-11-07 | 4 | -29/+27 | |
| | | | | | | hello. This also fixes a bug where a client which sent the fragment limit would enforce it even for servers which did not support the extension. | |||||
* | Store the maximum fragment value instead of the code, convert to the | lloyd | 2012-11-07 | 2 | -37/+31 | |
| | | | | code on serialize/deserialize. | |||||
* | Remove Channel::m_connection_closed, instead deriving it from other state | lloyd | 2012-11-07 | 2 | -8/+11 | |
| | ||||||
* | Offer DTLS if connecting over UDP | lloyd | 2012-11-07 | 1 | -0/+6 | |
| | ||||||
* | Pass read_record a callback mapping epoch to cipher state so it can | lloyd | 2012-11-06 | 4 | -53/+38 | |
| | | | | read out of order messages in DTLS. | |||||
* | Add Channel::pending_state and Channel::active_state, use where possible | lloyd | 2012-11-06 | 2 | -73/+84 | |
| | ||||||
* | Store cipher states in Channel instead of Handshake_State. Keep all | lloyd | 2012-11-06 | 7 | -66/+145 | |
| | | | | | around by default, expiring them as they are no longer needed. Expiration logic for DTLS needs some work. | |||||
* | Rename asn1_int to asn1_obj as it actually declares ASN1_Object | lloyd | 2012-11-06 | 16 | -13/+13 | |
| | ||||||
* | merge of '61085e01f4099e38b7d9b3222172233fe47f3158' | lloyd | 2012-11-06 | 23 | -139/+210 | |
|\ | | | | | | | and 'e96eee61a4430bb3ae59b8727ac964d57dcfbd40' | |||||
| * | Split asn1_obj.h into asn1_alt_name.h, asn1_attribute.h, and | lloyd | 2012-11-06 | 21 | -138/+208 | |
| | | | | | | | | asn1_time.h | |||||
| * | We would fail to cache GOST-34.11 because name() did not match what | lloyd | 2012-11-06 | 2 | -1/+2 | |
| | | | | | | | | the engine was looking it up as. Fix that and add an alias. | |||||
* | | Move to_u32bit to source file. Add map_remove_if helper | lloyd | 2012-11-02 | 3 | -2/+19 | |
| | | ||||||
* | | Make old-style-cast a non-error in maintainer mode as glibc macros bring it in | lloyd | 2012-11-02 | 1 | -2/+2 | |
|/ | ||||||
* | Move Channel::is_{active,closed} to source file | lloyd | 2012-11-01 | 2 | -2/+12 | |
| | ||||||
* | Clarify meaning of Alert::is_fatal | lloyd | 2012-10-31 | 1 | -1/+3 | |
| | ||||||
* | Fix wrong tag + syntax Sphinx can't handle | lloyd | 2012-10-31 | 1 | -4/+4 | |
| | ||||||
* | merge of '0d8168d68d428ec31702feaf6049b2e95b082088' | lloyd | 2012-10-31 | 10 | -12/+51 | |
|\ | | | | | | | and '46ad1751e2e23235d72acc155ac99b46557298dc' | |||||
| * | Document TLS::Client constructor change | lloyd | 2012-10-31 | 1 | -1/+30 | |
| | | ||||||
| * | Slightly more detail here | lloyd | 2012-10-30 | 1 | -3/+7 | |
| | | ||||||
| * | Bump for 1.11.2 | lloyd | 2012-10-30 | 4 | -2/+5 | |
| | | ||||||
| * | Fix setting release_vc_rev | lloyd | 2012-10-30 | 1 | -1/+1 | |
| | | ||||||
| * | Update for 1.11.1 release1.11.1 | lloyd | 2012-10-30 | 3 | -6/+7 | |
| | | ||||||
| * | Use OS X specific linker flags | lloyd | 2012-10-30 | 1 | -0/+2 | |
| | | ||||||
* | | Doxygen | lloyd | 2012-10-30 | 3 | -3/+9 | |
|/ | ||||||
* | The GCC version check was previously used for -fpermissive but now | lloyd | 2012-10-30 | 1 | -39/+0 | |
| | | | | | we either compile (4.7+) or do not (anything prior to 4.7), so it's not too useful. Remove it. | |||||
* | Add missing includes, noticed by OS X's Clang 4.1 | lloyd | 2012-10-30 | 3 | -0/+3 | |
| | ||||||
* | Copy *.rst from doc instead of *.txt if sphinx is not | lloyd | 2012-10-30 | 1 | -1/+1 | |
| | | | | | available, broken by e5320c3b5fc06faffc6900267279eb9886ff9786. Bug 216. | |||||
* | merge of '415e0ca58c566cb2990758c1261d47d6b09fc76c' | lloyd | 2012-10-13 | 23 | -171/+302 | |
|\ | | | | | | | and 'e616da4002c659a5f5f6c16aecaafef7c37a5f96' | |||||
| * | Add TLS::Policy::negotiate_heartbeat_support which controls if the | lloyd | 2012-10-13 | 7 | -6/+31 | |
| | | | | | | | | | | | | client will offer heartbeats (or if a server will negotiate them if the client offers). Defaults to false, which is probably the right behavior in terms of minimizing surprise and attack surface. | |||||
| * | Fix TLS doc formatting. Note removal of pref_version | lloyd | 2012-10-13 | 2 | -7/+11 | |
| | |