aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Fix MacPorts linklloyd2013-01-301-1/+1
|
* Reorder download optionslloyd2013-01-221-14/+14
|
* Turn on zero as nullptr warning all the timelloyd2013-01-111-2/+2
|
* Initial 1.11.2 release noteslloyd2013-01-091-0/+21
|
* merge of 'cd6ac87e70c08d19a2628acaacc9c4f592dfd6fb'lloyd2013-01-093-3/+21
|\ | | | | | | and 'df16b54f0669e55f882c33d77641f76551f579ef'
| * Update docs for 1.10.4 releaselloyd2013-01-093-3/+21
| |
* | Error creating botan_version.py for release :(lloyd2012-12-271-1/+1
| |
* | Don't need to pass the sequence numbers struct in here, all we need islloyd2012-12-143-5/+3
|/ | | | the value we want to use this time.
* merge of '2a4d641c566916555a5127b4ba82a1fa9f9e2b0c'lloyd2012-12-105-90/+123
|\ | | | | | | and '59030896322f59cfd47ba0ff17993ccd263174c6'
| * Re-add support for reading SSLv2 client helloslloyd2012-12-102-11/+22
| |
| * Add a Record struct to combine the record contents, type, sequence #,lloyd2012-12-105-82/+104
| | | | | | | | and version into a single value.
* | Example compile fixeslloyd2012-12-084-5/+20
| |
* | merge of '89aeac10a9f26bde460f79731880bb728caf6312'lloyd2012-12-0756-88/+229
|\| | | | | | | and 'e13b86dad266d168e462d0f0fe87e9e5f94e36a6'
| * Add new helper zap which zeros a vector, clears it, and then callslloyd2012-11-2955-84/+224
| | | | | | | | shrink_to_fit to actually deallocate memory.
| * Compile fixlloyd2012-11-291-4/+5
| |
* | Avoid compile time incompatability with VC 2012lloyd2012-11-211-8/+2
|/
* Update for new cred APIlloyd2012-11-131-11/+6
|
* Change Credentials_Manager::trusted_certificate_authorities to returnlloyd2012-11-138-47/+78
| | | | | | | | | a list of Certificate_Stores instead of a list of actual certs, allowing for instance the ability to reference a DB cert store without actually pulling all the certs into memory. Add Certificate_Store::all_subjects which returns the DNs of all contained certificates.
* Changes so DTLS handshake can send messages under different epochs, eglloyd2012-11-127-55/+85
| | | | for retransmitting a flight.
* Move memory zeroing to a compiled function in a new source file. Castlloyd2012-11-123-11/+38
| | | | | | | | the pointer to volatile before writing to it. At least for various versions of GCC, Clang, and ICC on x86-64, this does cause the compiler to emit a simple byte-at-a-time loop, and at least in non-LTO builds the compiler won't optimize the call away. For dealing with LTO, probably would have to do some kind of complicated side-effect.
* Remove Channel::m_max_fragment. Instead derive it from the serverlloyd2012-11-074-29/+27
| | | | | | hello. This also fixes a bug where a client which sent the fragment limit would enforce it even for servers which did not support the extension.
* Store the maximum fragment value instead of the code, convert to thelloyd2012-11-072-37/+31
| | | | code on serialize/deserialize.
* Remove Channel::m_connection_closed, instead deriving it from other statelloyd2012-11-072-8/+11
|
* Offer DTLS if connecting over UDPlloyd2012-11-071-0/+6
|
* Pass read_record a callback mapping epoch to cipher state so it canlloyd2012-11-064-53/+38
| | | | read out of order messages in DTLS.
* Add Channel::pending_state and Channel::active_state, use where possiblelloyd2012-11-062-73/+84
|
* Store cipher states in Channel instead of Handshake_State. Keep alllloyd2012-11-067-66/+145
| | | | | around by default, expiring them as they are no longer needed. Expiration logic for DTLS needs some work.
* Rename asn1_int to asn1_obj as it actually declares ASN1_Objectlloyd2012-11-0616-13/+13
|
* merge of '61085e01f4099e38b7d9b3222172233fe47f3158'lloyd2012-11-0623-139/+210
|\ | | | | | | and 'e96eee61a4430bb3ae59b8727ac964d57dcfbd40'
| * Split asn1_obj.h into asn1_alt_name.h, asn1_attribute.h, andlloyd2012-11-0621-138/+208
| | | | | | | | asn1_time.h
| * We would fail to cache GOST-34.11 because name() did not match whatlloyd2012-11-062-1/+2
| | | | | | | | the engine was looking it up as. Fix that and add an alias.
* | Move to_u32bit to source file. Add map_remove_if helperlloyd2012-11-023-2/+19
| |
* | Make old-style-cast a non-error in maintainer mode as glibc macros bring it inlloyd2012-11-021-2/+2
|/
* Move Channel::is_{active,closed} to source filelloyd2012-11-012-2/+12
|
* Clarify meaning of Alert::is_fatallloyd2012-10-311-1/+3
|
* Fix wrong tag + syntax Sphinx can't handlelloyd2012-10-311-4/+4
|
* merge of '0d8168d68d428ec31702feaf6049b2e95b082088'lloyd2012-10-3110-12/+51
|\ | | | | | | and '46ad1751e2e23235d72acc155ac99b46557298dc'
| * Document TLS::Client constructor changelloyd2012-10-311-1/+30
| |
| * Slightly more detail herelloyd2012-10-301-3/+7
| |
| * Bump for 1.11.2lloyd2012-10-304-2/+5
| |
| * Fix setting release_vc_revlloyd2012-10-301-1/+1
| |
| * Update for 1.11.1 release1.11.1lloyd2012-10-303-6/+7
| |
| * Use OS X specific linker flagslloyd2012-10-301-0/+2
| |
* | Doxygenlloyd2012-10-303-3/+9
|/
* The GCC version check was previously used for -fpermissive but nowlloyd2012-10-301-39/+0
| | | | | we either compile (4.7+) or do not (anything prior to 4.7), so it's not too useful. Remove it.
* Add missing includes, noticed by OS X's Clang 4.1lloyd2012-10-303-0/+3
|
* Copy *.rst from doc instead of *.txt if sphinx is notlloyd2012-10-301-1/+1
| | | | | available, broken by e5320c3b5fc06faffc6900267279eb9886ff9786. Bug 216.
* merge of '415e0ca58c566cb2990758c1261d47d6b09fc76c'lloyd2012-10-1323-171/+302
|\ | | | | | | and 'e616da4002c659a5f5f6c16aecaafef7c37a5f96'
| * Add TLS::Policy::negotiate_heartbeat_support which controls if thelloyd2012-10-137-6/+31
| | | | | | | | | | | | client will offer heartbeats (or if a server will negotiate them if the client offers). Defaults to false, which is probably the right behavior in terms of minimizing surprise and attack surface.
| * Fix TLS doc formatting. Note removal of pref_versionlloyd2012-10-132-7/+11
| |