Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Kinda maybe working TLS 1.2 for clients. Not well tested at all, but a | lloyd | 2012-01-19 | 1 | -1/+1 |
| | | | | | | | | basic connection with a GnuTLS server does work. Currently we don't respect the signature_algorithms extension at all, and using SHA-256 with a 12-byte finished value is hardcoded though the spec is that it can depend on the ciphersuite (likely relevant for GOST ciphersuites in particular). | ||||
* | Some cleanups, use cout instead of printf | lloyd | 2012-01-19 | 1 | -21/+53 |
| | |||||
* | s/queue_for_sending/send | lloyd | 2012-01-18 | 1 | -2/+2 |
| | |||||
* | Small fixes | lloyd | 2012-01-16 | 4 | -17/+7 |
| | |||||
* | Rename queue_for_sending just send | lloyd | 2012-01-16 | 1 | -4/+4 |
| | |||||
* | More TLS documentation | lloyd | 2012-01-16 | 1 | -51/+77 |
| | |||||
* | Change TLS feature macro, major API changes. Start documenting | lloyd | 2012-01-16 | 2 | -58/+122 |
| | |||||
* | Avoid overlapping writes. Pretend to be an HTTP server | lloyd | 2012-01-07 | 1 | -19/+79 |
| | |||||
* | Various example updates. Add a new TLS server example that uses asio | lloyd | 2012-01-06 | 4 | -26/+296 |
| | |||||
* | Add support for next protocol negotiation. Client only currently; | lloyd | 2012-01-04 | 1 | -2/+15 |
| | | | | tested with google.com:443 | ||||
* | Example fixes | lloyd | 2012-01-03 | 2 | -3/+9 |
| | |||||
* | Add Credentials_Manager which is an interface to something that knows | lloyd | 2012-01-03 | 1 | -18/+48 |
| | | | | | what certs, keys, etc are available to the app. Needs polishing but it seems like it should be sound. | ||||
* | Add support for client-side session resumption | lloyd | 2011-12-31 | 1 | -66/+77 |
| | |||||
* | Rename the session type to 'TLS_Session'. Split the manager out into | lloyd | 2011-12-30 | 2 | -2/+4 |
| | | | | its own file. Rename tls_state to tls_handshake_state. | ||||
* | Add a function for getting the version number of an active connection. | lloyd | 2011-12-30 | 2 | -1/+33 |
| | | | | | | | | Add a new callback that is called with the session info when a handshake completes. Currently only called on the server side as the client doesn't have session resumption yet. Rename CipherSuite to TLS_Cipher_Suite. | ||||
* | New more interesting client, pipes stdin<->remote box via TLS ala | lloyd | 2011-12-30 | 1 | -74/+122 |
| | | | | OpenSSL's s_client instead of just doing a one-shot request. | ||||
* | Add support for sending server name indicator in client hello | lloyd | 2011-12-29 | 2 | -5/+8 |
| | | | | | | | | Add support for sending and reading the SRP identifier extension. Add some helper classes for managing TLS extensions Add ciphersuite codes for SRP key exchange. | ||||
* | Just print printable | lloyd | 2011-12-28 | 1 | -2/+0 |
| | |||||
* | Don't stall on error | lloyd | 2011-12-28 | 1 | -3/+6 |
| | |||||
* | Additional bits for SSLv3 client auth | lloyd | 2011-12-28 | 1 | -1/+4 |
| | |||||
* | Working though hacking client verify (server side only). Only supports | lloyd | 2011-12-28 | 2 | -3/+8 |
| | | | | | TLS 1.0/1.1, SSLv3 uses a different hash format. Only RSA certs tested so far. | ||||
* | Make the server example less fragile, write a class that emulates the | lloyd | 2011-12-27 | 1 | -30/+118 |
| | | | | old blocking interface and use that. | ||||
* | Initial hooks for session resumption | lloyd | 2011-12-23 | 1 | -0/+3 |
| | |||||
* | Centralize a lot of the handshaking and message parsing in TLS_Channel | lloyd | 2011-12-23 | 5 | -196/+36 |
| | | | | Also delete the obsolete/never worked CMS examples | ||||
* | First stab at an event driven TLS client. | lloyd | 2011-12-23 | 2 | -37/+92 |
| | |||||
* | Initial run at an SRP-6a implementation. Not entirely sure about the | lloyd | 2011-12-17 | 1 | -0/+3 |
| | | | | | interface but it's a plausible start. Will probably have more insights after adding TLS hooks. | ||||
* | Basic instructions for building the docs | lloyd | 2011-12-17 | 1 | -5/+17 |
| | |||||
* | Add TCHead to list of users | lloyd | 2011-12-17 | 1 | -0/+3 |
| | |||||
* | Add basic NaCl target | lloyd | 2011-12-08 | 1 | -0/+2 |
| | |||||
* | Warn the user if targetting for GCC on Windows without an explicit | lloyd | 2011-12-02 | 1 | -0/+5 |
| | | | | | --os=windows since likely they actually wanted either --os=cygwin or --os=mingw | ||||
* | GCC doesn't like casting a function pointer to void* without an | lloyd | 2011-12-02 | 1 | -0/+2 |
| | | | | explicit cast. | ||||
* | Add AltiVec detection on OpenBSD, contributed by Brad Smith in PR 162 | lloyd | 2011-11-28 | 1 | -0/+2 |
| | |||||
* | Fix PGP key link | lloyd | 2011-11-28 | 1 | -1/+1 |
| | |||||
* | Fix link, and use sphinx to generate | lloyd | 2011-11-28 | 1 | -3/+2 |
| | |||||
* | Poll clock_gettime in High_Resolution_Timestamp::poll with whatever | lloyd | 2011-11-11 | 1 | -0/+3 |
| | | | | clock types we know about that have macros defined for them. | ||||
* | Add AltiVec detection for POWER7 processors | lloyd | 2011-11-02 | 1 | -0/+2 |
| | |||||
* | Include the needed sub in the log notes | lloyd | 2011-11-01 | 1 | -1/+2 |
| | |||||
* | Mention the 1.8 branch | lloyd | 2011-10-18 | 1 | -2/+3 |
| | |||||
* | Switch to the Python 3 syntax in configure.py. A Perl one-liner in the | lloyd | 2011-10-18 | 1 | -0/+5 |
| | | | | header shows how to return it to 2.5 compatability. | ||||
* | Don't set the soname on OpenBSD (PR 158) | lloyd | 2011-10-11 | 1 | -0/+5 |
| | |||||
* | Note --cpu fix, bump version | lloyd | 2011-09-01 | 1 | -0/+8 |
| | |||||
* | Add the start of Python docs | lloyd | 2011-08-06 | 5 | -6/+42 |
| | | | | | | Describe how to build a universal binary on OS X Fix tr1::function syntax so Sphinx is happy. | ||||
* | Move reading list to its own file | lloyd | 2011-07-14 | 3 | -23/+25 |
| | |||||
* | 1.10.1 release1.10.1 | lloyd | 2011-07-11 | 2 | -23/+44 |
| | |||||
* | merge of '040da681d3a04ab0caf2f9ba7f8492d296fd7c0c' | lloyd | 2011-07-06 | 1 | -1/+1 |
|\ | | | | | | | and '1c92abc37682d4589f50d23cb4fe86b69ed294c1' | ||||
| * | Fix link | lloyd | 2011-06-20 | 1 | -1/+1 |
| | | |||||
* | | The Algorithm_Factory has this logic on looking for an object: | lloyd | 2011-07-05 | 1 | -0/+5 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Check the cache; if found, return value - Populate cache, if the value is already there, delete the old object and save the new one. - Recheck the cache value Raja <[email protected]> pointed out on the list that this could race if multiple threads called a lookup function in close succession while the cache was cold. All of them would fail the lookup, then each of them would add it, but the values returned would be deleted by other threads. Instead, declare that first write wins. Then, the cache stays consistent even if there is a race, the only issue is an extra search and delete. Modify GOST and Skein, as their name() function did not roundtrip properly which caused failures otherwise. | ||||
* | | Tick to 1.10.1 unreleased. | lloyd | 2011-06-30 | 1 | -0/+3 |
|/ | | | | | Try to detect the mtn revision (by shelling out to mtn automate), and including it in build.h as BOTAN_VERSION_VC_REVISION. | ||||
* | Update with info on 1.8.12 release | lloyd | 2011-06-20 | 2 | -17/+33 |
| | |||||
* | Tick version to 1.10.0 release1.10.0 | lloyd | 2011-06-20 | 2 | -2/+5 |
| |