aboutsummaryrefslogtreecommitdiffstats
path: root/doc/tls.rst
Commit message (Collapse)AuthorAgeFilesLines
* Split TLS callbacks into a data callback and an alert callback.lloyd2013-11-051-48/+36
| | | | | In practice applications treated these two cases completely differently, so there was no reason to combine them into a single callback.
* Add Brainpool curves to TLS, and prefer them by default.lloyd2013-09-081-4/+5
| | | | Remove 224-bit NIST curve from default parameter list.
* Enable CCM ciphersuites in TLS. Disable SHA-1 for signatures in TLS v1.2lloyd2013-09-061-3/+5
|
* Change default policy to prohibit DTLS to minimize surprise.lloyd2013-07-101-6/+22
| | | | | | | | | | Allow applications to send arbirary alert messages. Add a new optional parameter to Channel which specifies how large to make the IO buffers by default. Add Channel::reset_state, and reset the IO buffers and cipher specs after a fatal alert.
* Some small TLS doc updateslloyd2013-04-191-20/+29
|
* Add TLS::Policy::server_uses_own_ciphersuite_preferences()lloyd2013-03-211-2/+14
| | | | | | Previously the server always took its most-preferred cipher out of the client's list, but this policy allows telling a server to follow the client's preferences insetad.
* Correct RFC linkslloyd2013-02-061-1/+1
|
* Small TLS doc clarificationslloyd2013-02-021-7/+13
|
* Clarify meaning of Alert::is_fatallloyd2012-10-311-1/+3
|
* Fix wrong tag + syntax Sphinx can't handlelloyd2012-10-311-4/+4
|
* Document TLS::Client constructor changelloyd2012-10-311-1/+30
|
* Add TLS::Policy::negotiate_heartbeat_support which controls if thelloyd2012-10-131-0/+8
| | | | | | client will offer heartbeats (or if a server will negotiate them if the client offers). Defaults to false, which is probably the right behavior in terms of minimizing surprise and attack surface.
* Fix TLS doc formatting. Note removal of pref_versionlloyd2012-10-131-7/+7
|
* Remove TLS::Policy::pref_version. Instead pass the version to offer tolloyd2012-10-131-7/+12
| | | | | | | | the Client constructor. Defaults to the most recent version of TLS. Allows TLS or DTLS, and means that it's possible to back down on the offered version, without requiring a Policy implementation with mutable state.
* Add TLS::Server_Information to encapsulate the hostname/port pair.lloyd2012-10-131-19/+22
| | | | | | | Add a service identifier as well, to help out clients which may want to negotiate multiple protocols over a single port and need to keep the sessions disambiguated. Not sure if that is useful, but it might be.
* No reason to pass a u16bit by referencelloyd2012-09-101-1/+1
|
* Add support for key material exportlloyd2012-09-071-0/+15
|
* TLS doc updateslloyd2012-08-091-7/+8
|
* More 1.11.1 notes. Update TLS docslloyd2012-08-091-7/+25
|
* Add an optional parameter to TLS::Client specifying the port number.lloyd2012-07-121-5/+13
| | | | | | Pass this down into the session managers. Also document how to use session tickets with TLS servers.
* Rename all text files that are actually reStructuredText to .rstlloyd2012-07-011-0/+620