Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Make eax_test example (which reads LTC's EAX test file) an actual | lloyd | 2013-12-31 | 3 | -881/+0 |
| | | | | | test. Update to new AEAD api. Currently requires boost_regex (for tests only), done via hardcoding in makefile template. | ||||
* | Add MSG_NOSIGNAL as 0 on platforms that don't have it. | lloyd | 2013-12-31 | 2 | -0/+8 |
| | | | | Patch from Uri Blumenthal <[email protected]> sent to the list. | ||||
* | Compile fix | lloyd | 2013-12-31 | 1 | -3/+9 |
| | |||||
* | Add CPUID::print | lloyd | 2013-12-31 | 1 | -33/+1 |
| | |||||
* | Make Boost easier to disable with minimal feature loss | lloyd | 2013-12-28 | 1 | -1/+1 |
| | |||||
* | Add CPUID check for AVX-512 | lloyd | 2013-12-25 | 1 | -1/+2 |
| | |||||
* | Fix TLS-SRP example | lloyd | 2013-12-21 | 1 | -1/+1 |
| | |||||
* | Add cpuid support for new x86 feature flags like AVX2 and RDSEED | lloyd | 2013-12-14 | 1 | -2/+5 |
| | |||||
* | Turn off asking for client cert in TLS server example | lloyd | 2013-12-05 | 1 | -2/+10 |
| | |||||
* | Have OCSP responses return an enum allowing a range of conditions to be ↵ | lloyd | 2013-11-29 | 1 | -14/+9 |
| | | | | | | | | | | expressed (good status, cert revoked, some other error, etc). Add a certificate store backed by files (requiring boost filesystem). Change Certificate_Store interface somewhat to support retrieval without copying. | ||||
* | Add OCSP example. Fix minor compile issues. | lloyd | 2013-11-28 | 5 | -4/+28 |
| | |||||
* | Split TLS callbacks into a data callback and an alert callback. | lloyd | 2013-11-05 | 3 | -40/+54 |
| | | | | | In practice applications treated these two cases completely differently, so there was no reason to combine them into a single callback. | ||||
* | Always include modules requiring ISA extensions as long as the | lloyd | 2013-04-17 | 1 | -1/+0 |
| | | | | | | | | | | | compiler and target platform might support it. For instance the AES SSSE3 code is now always in any x86 build, with just that specific file being compiled with -mssse3. Since we'll only call that code if cpuid confirms it works at runtime, we don't have portability issues, and it can be safely included in generic builds (eg for distributions). Tweak how machine specific compiler flags are generated to be a bit easier to maintain. | ||||
* | In examples makefile, trust that g++ is C++11 capable | lloyd | 2013-03-20 | 1 | -1/+1 |
| | |||||
* | Remove the Turing and WiderWAKE4+1 stream cipher implementations. | lloyd | 2013-03-19 | 1 | -1/+1 |
| | | | | Both never saw much deployment or analysis. | ||||
* | Example compile fixes | lloyd | 2012-12-08 | 3 | -3/+4 |
| | |||||
* | Update for new cred API | lloyd | 2012-11-13 | 1 | -11/+6 |
| | |||||
* | Offer DTLS if connecting over UDP | lloyd | 2012-11-07 | 1 | -0/+6 |
| | |||||
* | Add TLS::Server_Information to encapsulate the hostname/port pair. | lloyd | 2012-10-13 | 1 | -2/+1 |
| | | | | | | | Add a service identifier as well, to help out clients which may want to negotiate multiple protocols over a single port and need to keep the sessions disambiguated. Not sure if that is useful, but it might be. | ||||
* | secure_renegotiation isn't a session value anymore | lloyd | 2012-09-14 | 2 | -8/+0 |
| | |||||
* | This buffer size does not need to match TLS | lloyd | 2012-09-11 | 1 | -1/+1 |
| | |||||
* | Remove debug output | lloyd | 2012-09-09 | 1 | -1/+1 |
| | |||||
* | Support both TLS and DTLS in the tls_server example. | lloyd | 2012-09-09 | 2 | -410/+159 |
| | | | | Drop the fairly bogus socket wrapper layer. | ||||
* | Support DTLS in tls_client. Support client-initiated close_notify (via 'Q') | lloyd | 2012-09-09 | 1 | -98/+103 |
| | |||||
* | Turn on NPN | lloyd | 2012-08-06 | 1 | -1/+2 |
| | |||||
* | OpenSSL gets cranky if we send application data mid handshake | lloyd | 2012-07-28 | 1 | -3/+2 |
| | |||||
* | Add an optional parameter to TLS::Client specifying the port number. | lloyd | 2012-07-12 | 1 | -8/+9 |
| | | | | | | Pass this down into the session managers. Also document how to use session tickets with TLS servers. | ||||
* | Fix leak in read_ssh example, reported by Martin Olsson to the mailing list | lloyd | 2012-07-09 | 1 | -2/+3 |
| | |||||
* | Rename all text files that are actually reStructuredText to .rst | lloyd | 2012-07-01 | 2 | -4/+2 |
| | |||||
* | Use new header for sqlite session manager | lloyd | 2012-06-29 | 1 | -2/+2 |
| | |||||
* | Return existing certs fast if there is a match | lloyd | 2012-06-20 | 1 | -0/+15 |
| | |||||
* | Allow configurable # of threads, useful for scale testing | lloyd | 2012-06-20 | 1 | -2/+4 |
| | |||||
* | Reformat output on the TLS client on handshake completion. | lloyd | 2012-06-13 | 4 | -23/+49 |
| | | | | In ASN.1 print values as URL % escaped instead of all hex. | ||||
* | Various examples fixes, most notable updating cert_verify to the new API | lloyd | 2012-05-31 | 5 | -16/+26 |
| | |||||
* | Fix examples building | lloyd | 2012-05-30 | 1 | -2/+2 |
| | |||||
* | Remove the PRIVATE ASN.1 tag. Not being used outside of the pretty | lloyd | 2012-05-27 | 1 | -13/+24 |
| | | | | | | | | | | | | | | printer example, and really is just CONSTRUCTED | CONTEXT_SPECIFIC. Extend the ASN.1 printer to recurse into OCTET STRINGS that contain DER, and to print enumeration values. BOTAN_DLL export some OID operators (+, !=, <) Add an OID entry for 1.3.6.1.5.5.7.48.1.1 OCSP basic response. Correct the Certificate_Policies code, it was dumping policy OIDs into the extended key usage! | ||||
* | Fairly huge update that replaces the old secmem types with std::vector | lloyd | 2012-05-18 | 21 | -73/+64 |
| | | | | | | using a custom allocator. Currently our allocator just does new/delete with a memset before deletion, and the mmap and mlock allocators have been removed. | ||||
* | Huge pile of post merge fixups, mtn really fucked that merge | lloyd | 2012-04-25 | 5 | -53/+13 |
| | |||||
* | propagate from branch 'net.randombit.botan.tls-state-machine' (head ↵ | lloyd | 2012-04-25 | 4 | -29/+204 |
|\ | | | | | | | | | | | a4741cd07f50a9e1b29b0dd97c6fb8697c038ade) to branch 'net.randombit.botan.cxx11' (head 116e5ff139c07000be431e07d3472cc8f3919b91) | ||||
| * | Various hacks for testing client auth, SRP, etc | lloyd | 2012-04-20 | 3 | -10/+37 |
| | | |||||
| * | Finish up server side SRP support, a little ugly but it works. | lloyd | 2012-04-06 | 3 | -16/+129 |
| | | | | | | | | | | | | Add SRP hooks in the examples Fix next protocol support in the tls_server example. | ||||
| * | propagate from branch 'net.randombit.botan' (head ↵ | lloyd | 2012-04-05 | 3 | -4/+4 |
| |\ | | | | | | | | | | | | | | | | 91305e3daaae9ea8a1786daf058d961991c68251) to branch 'net.randombit.botan.tls-state-machine' (head 474a00b316f5b21a4e56033d4d990d87d9d3eed6) | ||||
* | | | propagate from branch 'net.randombit.botan.tls-state-machine' (head ↵ | lloyd | 2012-03-30 | 4 | -16/+41 |
|\| | | | | | | | | | | | | | | | | | 63b88a65b699c95ef839bc18336bceccfbfabd2e) to branch 'net.randombit.botan.cxx11' (head 1adcc46808b403b8f6bf1669f022e65f9c30e8ea) | ||||
| * | | Use the SQLite session manager if available | lloyd | 2012-03-23 | 1 | -0/+11 |
| | | | |||||
| * | | Call Credentials_Manager::psk for the session ticket key. | lloyd | 2012-03-22 | 1 | -3/+13 |
| | | | |||||
| * | | Add makefile dependency on credentials.h. Use 1024 bit keys for | lloyd | 2012-02-27 | 3 | -11/+19 |
| | | | | | | | | | | | | RSA/DSA. Add function for choosing thread count. | ||||
* | | | Enable TLS again (bad merge) | lloyd | 2012-02-20 | 4 | -43/+7 |
| | | | | | | | | | | | | | | | | | | | | | Fixes for examples. Remove locking from session manager in the asio example, now done by default in the lib. | ||||
* | | | Merge fixups | lloyd | 2012-02-20 | 1 | -8/+4 |
| | | | |||||
* | | | propagate from branch 'net.randombit.botan' (head ↵ | lloyd | 2012-02-20 | 3 | -3/+3 |
|\ \ \ | | |/ | |/| | | | | | | | | | | c247a55e7c0bcd239fcfc672139b59ef63d7ee84) to branch 'net.randombit.botan.cxx11' (head 16d7756c6b8933d0d543ebdda9c7e8f4908a4a33) | ||||
| * | | The benchmark examples ran very slowly because they were passing | lloyd | 2012-02-20 | 3 | -4/+4 |
| | | | | | | | | | | | | | | | | | | | | | 16*1024 to an argument that treated those values as KiB, it took the RNG ~3 seconds to create 16 MiB of data to randomize the input. Change to 16. Also cap the value that can be passed to --buf-size to 1024, for a 1 MiB buffer. |