Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Split TLS callbacks into a data callback and an alert callback. | lloyd | 2013-11-05 | 1 | -48/+36 |
| | | | | | In practice applications treated these two cases completely differently, so there was no reason to combine them into a single callback. | ||||
* | Add Brainpool curves to TLS, and prefer them by default. | lloyd | 2013-09-08 | 1 | -4/+5 |
| | | | | Remove 224-bit NIST curve from default parameter list. | ||||
* | Enable CCM ciphersuites in TLS. Disable SHA-1 for signatures in TLS v1.2 | lloyd | 2013-09-06 | 1 | -3/+5 |
| | |||||
* | Change default policy to prohibit DTLS to minimize surprise. | lloyd | 2013-07-10 | 1 | -6/+22 |
| | | | | | | | | | | Allow applications to send arbirary alert messages. Add a new optional parameter to Channel which specifies how large to make the IO buffers by default. Add Channel::reset_state, and reset the IO buffers and cipher specs after a fatal alert. | ||||
* | Some small TLS doc updates | lloyd | 2013-04-19 | 1 | -20/+29 |
| | |||||
* | Add TLS::Policy::server_uses_own_ciphersuite_preferences() | lloyd | 2013-03-21 | 1 | -2/+14 |
| | | | | | | Previously the server always took its most-preferred cipher out of the client's list, but this policy allows telling a server to follow the client's preferences insetad. | ||||
* | Correct RFC links | lloyd | 2013-02-06 | 1 | -1/+1 |
| | |||||
* | Small TLS doc clarifications | lloyd | 2013-02-02 | 1 | -7/+13 |
| | |||||
* | Clarify meaning of Alert::is_fatal | lloyd | 2012-10-31 | 1 | -1/+3 |
| | |||||
* | Fix wrong tag + syntax Sphinx can't handle | lloyd | 2012-10-31 | 1 | -4/+4 |
| | |||||
* | Document TLS::Client constructor change | lloyd | 2012-10-31 | 1 | -1/+30 |
| | |||||
* | Add TLS::Policy::negotiate_heartbeat_support which controls if the | lloyd | 2012-10-13 | 1 | -0/+8 |
| | | | | | | client will offer heartbeats (or if a server will negotiate them if the client offers). Defaults to false, which is probably the right behavior in terms of minimizing surprise and attack surface. | ||||
* | Fix TLS doc formatting. Note removal of pref_version | lloyd | 2012-10-13 | 1 | -7/+7 |
| | |||||
* | Remove TLS::Policy::pref_version. Instead pass the version to offer to | lloyd | 2012-10-13 | 1 | -7/+12 |
| | | | | | | | | the Client constructor. Defaults to the most recent version of TLS. Allows TLS or DTLS, and means that it's possible to back down on the offered version, without requiring a Policy implementation with mutable state. | ||||
* | Add TLS::Server_Information to encapsulate the hostname/port pair. | lloyd | 2012-10-13 | 1 | -19/+22 |
| | | | | | | | Add a service identifier as well, to help out clients which may want to negotiate multiple protocols over a single port and need to keep the sessions disambiguated. Not sure if that is useful, but it might be. | ||||
* | No reason to pass a u16bit by reference | lloyd | 2012-09-10 | 1 | -1/+1 |
| | |||||
* | Add support for key material export | lloyd | 2012-09-07 | 1 | -0/+15 |
| | |||||
* | TLS doc updates | lloyd | 2012-08-09 | 1 | -7/+8 |
| | |||||
* | More 1.11.1 notes. Update TLS docs | lloyd | 2012-08-09 | 1 | -7/+25 |
| | |||||
* | Add an optional parameter to TLS::Client specifying the port number. | lloyd | 2012-07-12 | 1 | -5/+13 |
| | | | | | | Pass this down into the session managers. Also document how to use session tickets with TLS servers. | ||||
* | Rename all text files that are actually reStructuredText to .rst | lloyd | 2012-07-01 | 1 | -0/+620 |