aboutsummaryrefslogtreecommitdiffstats
path: root/doc
Commit message (Collapse)AuthorAgeFilesLines
* Split log.txt into individual release notes. Integrate most of thelloyd2012-06-20175-2318/+2635
| | | | | | | | relevant contents from the pyblosxom news site into said relnotes. DRY suggests having only one form of release notes, and having it in the public source repo. Also some updates for the allocator changes.
* Return existing certs fast if there is a matchlloyd2012-06-201-0/+15
|
* Allow configurable # of threads, useful for scale testinglloyd2012-06-201-2/+4
|
* Doc updateslloyd2012-06-204-19/+28
|
* Update docs for new secure_vectorlloyd2012-06-201-73/+23
|
* Update links for 1.10.2lloyd2012-06-171-11/+11
|
* Port in 1.10.2 change noteslloyd2012-06-171-5/+10
|
* Reformat output on the TLS client on handshake completion.lloyd2012-06-134-23/+49
| | | | In ASN.1 print values as URL % escaped instead of all hex.
* Update copyright for 2012.lloyd2012-06-091-16/+15
| | | | | | | | | | In the disclaimer text, replace "AUTHOR(S)" and "AUTHOR(S) OR CONTRIBUTOR(S)" with "COPYRIGHT HOLDERS AND CONTRIBUTORS" and "COPYRIGHT HOLDER OR CONTRIBUTORS", resp. I thought in 38051c192886db139918c59d31c2e1faa9ea8cee I had made the license totally identical with the official BSD-2 text, however clearly I originally got the disclaimer text from somewhere else. Reindent.
* Various examples fixes, most notable updating cert_verify to the new APIlloyd2012-05-315-16/+26
|
* Fix examples buildinglloyd2012-05-301-2/+2
|
* Signature verification on OCSP responses. Still needs a bit of APIlloyd2012-05-271-0/+2
| | | | reworking I think, and a lot more testing, but it seems functional.
* Remove the PRIVATE ASN.1 tag. Not being used outside of the prettylloyd2012-05-271-13/+24
| | | | | | | | | | | | | | printer example, and really is just CONSTRUCTED | CONTEXT_SPECIFIC. Extend the ASN.1 printer to recurse into OCTET STRINGS that contain DER, and to print enumeration values. BOTAN_DLL export some OID operators (+, !=, <) Add an OID entry for 1.3.6.1.5.5.7.48.1.1 OCSP basic response. Correct the Certificate_Policies code, it was dumping policy OIDs into the extended key usage!
* Mention the vector changes as people will likely notice thoselloyd2012-05-261-0/+8
|
* Initial 1.11 noteslloyd2012-05-261-0/+37
|
* Fairly huge update that replaces the old secmem types with std::vectorlloyd2012-05-1821-73/+64
| | | | | | using a custom allocator. Currently our allocator just does new/delete with a memset before deletion, and the mmap and mlock allocators have been removed.
* propagate from branch 'net.randombit.botan' (head ↵lloyd2012-05-181-0/+11
|\ | | | | | | | | | | 6332543aa5a8a4cc13662008ff9ac0f0016d9a4d) to branch 'net.randombit.botan.cxx11' (head 5517c9f8f6d1990f269afb94f569a97a80c5a5f4)
| * Pipe::reset's requirement that a message be completed meant thatlloyd2012-05-181-0/+5
| | | | | | | | | | | | exceptions thrown in end_msg (for instance in CBC decryption when the padding is bad) more or less screwed up the pipe completely. Allowing reset here at least allows an escape hatch.
| * We were checking the wrong bit for rdrand support. Found using SDE'slloyd2012-05-101-0/+3
| | | | | | | | | | | | | | | | -ivb_rdrnd_cpuid option to toggle the bit off and on. Fortunately on Intel processors the bit we were actually checking is also enabled by Ivy Bridge. However it is also used on AMD Bulldozer processors to signal half-precision floating point support so we could false positive there.
| * Add support for the rdrand instruction, added in Intel's Ivy Bridgelloyd2012-04-261-0/+3
| | | | | | | | | | | | | | processors. Tested using SDE on Linux with GCC 4.6, Intel C++ 11.1, and Clang 3.0, all using the inline asm variant. I do not know if current Visual C++ has the intrinsics available or not, so it's only marked as available for those compilers at the moment.
* | Huge pile of post merge fixups, mtn really fucked that mergelloyd2012-04-255-53/+13
| |
* | propagate from branch 'net.randombit.botan.tls-state-machine' (head ↵lloyd2012-04-256-37/+215
|\ \ | | | | | | | | | | | | | | | a4741cd07f50a9e1b29b0dd97c6fb8697c038ade) to branch 'net.randombit.botan.cxx11' (head 116e5ff139c07000be431e07d3472cc8f3919b91)
| * \ propagate from branch 'net.randombit.botan' (head ↵lloyd2012-04-2413-329/+1162
| |\ \ | | |/ | |/| | | | | | | | | | 494c5d548ce3f370c2b771ca6b11e5f41e720da2) to branch 'net.randombit.botan.tls-state-machine' (head b2cd26ff6f093caa79aecb2d674205f45b6aadff)
| | * Various hacks for testing client auth, SRP, etclloyd2012-04-203-10/+37
| | |
| | * Finish up server side SRP support, a little ugly but it works.lloyd2012-04-064-24/+137
| | | | | | | | | | | | | | | | | | Add SRP hooks in the examples Fix next protocol support in the tls_server example.
| | * propagate from branch 'net.randombit.botan' (head ↵lloyd2012-04-054-4/+8
| | |\ | | | | | | | | | | | | | | | | | | | | 91305e3daaae9ea8a1786daf058d961991c68251) to branch 'net.randombit.botan.tls-state-machine' (head 474a00b316f5b21a4e56033d4d990d87d9d3eed6)
| * | | Patrick Pelletier pointed out the hook for Qt_Mutex in libstate.cpplloyd2012-04-231-0/+3
| | |/ | |/| | | | | | | | | | | | | | | | was broken, and after fixing that and trying to compile the module it becamse clear that the Qt mutex did not work at all with recent Qt versions. Taking this as a clear indicator that it is not being used, remove it.
* | | propagate from branch 'net.randombit.botan.tls-state-machine' (head ↵lloyd2012-03-305-17/+45
|\ \ \ | | |/ | |/| | | | | | | | | | 63b88a65b699c95ef839bc18336bceccfbfabd2e) to branch 'net.randombit.botan.cxx11' (head 1adcc46808b403b8f6bf1669f022e65f9c30e8ea)
| * | Revert the session_ticket callback in credentials manager. If a PSKlloyd2012-03-231-1/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | manager is being used, it could be easily used for session tickets as well, and if it's not the generate-on-first-call technique is easy to write. Avoid offering the session ticket extension if we know we don't have a key. For one thing it will cause us to avoid using stateful sessions, but additionally OpenSSL 1.0.1 is very intolerant of empty NewSessionTicket messages so definitely worth avoiding when we can.
| * | Use the SQLite session manager if availablelloyd2012-03-231-0/+11
| | |
| * | Call Credentials_Manager::psk for the session ticket key.lloyd2012-03-221-3/+13
| | |
| * | Add makefile dependency on credentials.h. Use 1024 bit keys forlloyd2012-02-273-11/+19
| | | | | | | | | | | | RSA/DSA. Add function for choosing thread count.
* | | Enable TLS again (bad merge)lloyd2012-02-204-43/+7
| | | | | | | | | | | | | | | | | | | | | Fixes for examples. Remove locking from session manager in the asio example, now done by default in the lib.
* | | Merge fixupslloyd2012-02-201-8/+4
| | |
* | | propagate from branch 'net.randombit.botan' (head ↵lloyd2012-02-204-3/+7
|\ \ \ | | |/ | |/| | | | | | | | | | c247a55e7c0bcd239fcfc672139b59ef63d7ee84) to branch 'net.randombit.botan.cxx11' (head 16d7756c6b8933d0d543ebdda9c7e8f4908a4a33)
| * | The benchmark examples ran very slowly because they were passinglloyd2012-02-203-4/+4
| | | | | | | | | | | | | | | | | | | | | 16*1024 to an argument that treated those values as KiB, it took the RNG ~3 seconds to create 16 MiB of data to randomize the input. Change to 16. Also cap the value that can be passed to --buf-size to 1024, for a 1 MiB buffer.
| * | Disable this version of the SSL code by defaultlloyd2012-02-011-0/+4
| | |
* | | Fix examples. Use crazy hack of compiling asio tls server using 4.6.0lloyd2012-02-207-30/+49
| | | | | | | | | | | | | | | | | | but linking using 4.7.0 - asio seems to have problems with the 4.7.0 libstdc++ in C++11 mode, mostly related to missing noexcept and trying to copy things that are move only.
* | | propagate from branch 'net.randombit.botan.tls-state-machine' (head ↵lloyd2012-02-206-40/+31
|\ \ \ | |_|/ |/| | | | | | | | | | | 0ceb9cde62a2b3614901ae85a53546d9fc641326) to branch 'net.randombit.botan.cxx11' (head 777e65950ef3706a82e5df20dcca7fcc999ca533)
| * | propagate from branch 'net.randombit.botan' (head ↵lloyd2011-12-184-9/+40
| |\ \ | | | | | | | | | | | | | | | | | | | | 39f53266912f33dc48e942b1b865ddcd6af66d8d) to branch 'net.randombit.botan.cxx11' (head 0bf26cec09f71e75c547b4ec53365748c6d80d86)
| * \ \ propagate from branch 'net.randombit.botan' (head ↵lloyd2011-11-102-2/+16
| |\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | f13cb517b63aed4fcc4ad7013e5c905fae85796b) to branch 'net.randombit.botan.cxx11' (head e330c6b33c4583b342a129336d27ce03c9e4e287)
| * \ \ \ propagate from branch 'net.randombit.botan' (head ↵lloyd2011-10-066-40/+31
| |\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 29dfb73a5efec220ebafcb9c1d7a32bb9d63461c) to branch 'net.randombit.botan.cxx11' (head a842d86b2b9593318fbce5868c3d1278f8b3a037)
| | * \ \ \ propagate from branch 'net.randombit.botan' (head ↵lloyd2011-07-213-23/+25
| | |\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | b49cf847fb6f62734b53874469be895ba89a8b17) to branch 'net.randombit.botan.cxx11' (head 64b6daff56452594958eed3805a9639db94bd333)
| | * \ \ \ \ propagate from branch 'net.randombit.botan' (head ↵lloyd2011-07-126-40/+31
| | |\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 23a326fa36a31dd39347a8864e1f5740669a905e) to branch 'net.randombit.botan.cxx11' (head 9d3ac8dd45f7673c85dca41968e7750acc90bdff)
| | | * \ \ \ \ propagate from branch 'net.randombit.botan' (head ↵lloyd2011-06-176-40/+31
| | | |\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 5dc30d88afdeec4896b5065f9260e66d52b1a730) to branch 'net.randombit.botan.cxx11' (head 8d42792537db92fab3136f5696ee1eba3e73fa76)
| | | | * \ \ \ \ propagate from branch 'net.randombit.botan' (head ↵lloyd2011-06-131-0/+2
| | | | |\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | b200c1f710e56d39764e567c005eec43448d865d) to branch 'net.randombit.botan.c++0x' (head 527546a7d65baf5315c947602ad0937b65950cf1)
| | | | * \ \ \ \ \ propagate from branch 'net.randombit.botan' (head ↵lloyd2011-06-136-40/+31
| | | | |\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 150bd11dd8090559ee1e83394b8283bf93a018de) to branch 'net.randombit.botan.c++0x' (head 7480693bb3f1e8a4e039a3e7ba3d9a7007f9730e)
| | | | | * \ \ \ \ \ propagate from branch 'net.randombit.botan' (head ↵lloyd2011-03-083-1/+91
| | | | | |\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | dd068808e5bf87c982765a8bcc314996053a5bdd) to branch 'net.randombit.botan.c++0x' (head 34696d52a8148d64f7021b3e193fc56f051b9dd2)
| | | | | * \ \ \ \ \ \ propagate from branch 'net.randombit.botan' (head ↵lloyd2011-02-1112-767/+55
| | | | | |\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 13a0d36dac3709f3cb88e830ed7f8cab9e7433ab) to branch 'net.randombit.botan.c++0x' (head 2221ad8796466e7e096645de77ba856a9c902d14)
| | | | | | * \ \ \ \ \ \ propagate from branch 'net.randombit.botan' (head ↵lloyd2010-11-299-164/+83
| | | | | | |\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | fc8daa606ab7954eab48778d7236986747b719e4) to branch 'net.randombit.botan.c++0x' (head 2bf71b0a2e0e468d7eb3631e4ca284234f554729)