aboutsummaryrefslogtreecommitdiffstats
path: root/news.rst
Commit message (Collapse)AuthorAgeFilesLines
* Update news for 1.10.15 releaseJack Lloyd2017-01-121-0/+9
| | | | [ci skip]
* Update news for 2.0.1 release2.0.1Jack Lloyd2017-01-091-0/+19
|
* Update for 2.0.0 release2.0.0Jack Lloyd2017-01-061-1/+1
|
* Update release notesJack Lloyd2017-01-061-0/+22
| | | | [ci skip]
* Update roadmap, add support and versioning infoJack Lloyd2017-01-031-1/+1
| | | | [ci skip]
* Remove SRP6 file supportJack Lloyd2016-12-311-0/+6
| | | | | | | | | | | | | It turns out SRP6 files use a different base64 alphabet than standard, and additionally Botan's decoding of the group id seems wrong though I haven't verified this second was a bug. In any case this code couldn't parse anything it was supposed to and never could. I had already planned on adding a database backed SRP store and removing this code but the fact that it's actually not functional for purpose suggests it's best to remove this now rather than let someone chance upon it and be endlessly frustrated that it doesn't seem to work because all the verifiers are garbled.
* Increase default TLS DH min to 2048 bits, and add BSI policy class.Jack Lloyd2016-12-301-0/+4
| | | | | Moves BSI policy file to test data dir where it can be compared with what the hardcoded class outputs.
* Increase Path_Validation_Restrictions default min strength to 110Jack Lloyd2016-12-271-0/+6
| | | | | Effectively disables 1024 bit RSA as well as SHA-1. Edit the tests where required to enable it again.
* Add DL_Group testsJack Lloyd2016-12-231-11/+16
| | | | | | | | | Fix a bug in how the 6144 and 8192 IETF MODP groups were encoded; they have g and q values switched. Fixed by just switching the PEM header to match the actual encoded format. Rename DL_Group::X942_DH_PARAMETERS to ANSI_X9_42_DH_PARAMETERS to avoid a macro conflict with Windows cryptography headers (GH #482)
* Update release notesJack Lloyd2016-12-141-0/+8
| | | | [ci skip]
* Update 1.11.35 relnotes [ci skip]Jack Lloyd2016-12-111-2/+6
|
* Public_Key derived class ctors take an std::vector<byte>René Korthaus2016-12-111-0/+4
| | | | | | | Changes all the Public_Key derived classes ctors to take a std::vector instead of a secure_vector for the DER encoded public key bits. There is no point in transporting a public key in secure storage. (GH #768)
* Update news [ci skip]Jack Lloyd2016-12-081-1/+7
|
* Remove duplicate relnote item [ci skip]Jack Lloyd2016-12-051-2/+0
|
* Update relnotesJack Lloyd2016-12-051-3/+12
|
* Add Private_Key::private_key_info()René Korthaus2016-12-051-0/+4
| | | | | | | Adds new Private_Key::private_key_info() that returns a PKCS#8 PrivateKeyInfo structure. Renames the current Private_Key::pkcs8_private_key() to private_key_bits(). BER_encode() just invokes private_key_info().
* Add Public_Key::subject_public_key()René Korthaus2016-12-051-0/+3
| | | | | | | Adds new Public_Key::subject_public_key() that returns a X.509 SubjectPublicKey structure. Renames the current Public_Key::x509_subject_public_key() to public_key_bits(). BER_encode() just invokes subject_public_key().
* Bump version to 1.11.35-preJack Lloyd2016-12-041-0/+4
|
* Update for 1.10.14 and 1.11.34 releases1.11.34Jack Lloyd2016-11-281-1/+17
|
* Update newsJack Lloyd2016-11-281-0/+8
|
* Update relnotesJack Lloyd2016-11-251-3/+14
| | | | [ci skip]
* Update relnotes [ci skip]Jack Lloyd2016-11-201-5/+12
|
* Update newsJack Lloyd2016-11-191-0/+10
|
* Reword [ci skip]Jack Lloyd2016-11-161-1/+1
|
* Update/reorg 1.11.34 notesJack Lloyd2016-11-151-45/+42
| | | | [ci skip]
* Update newsJack Lloyd2016-11-121-6/+11
|
* Add SHAKE-128 and SHAKE-256 as hash functionsJack Lloyd2016-11-101-0/+3
|
* Fix version number typoJack Lloyd2016-11-091-1/+1
| | | | [ci skip]
* Fix Sphinx formatting errorsJack Lloyd2016-11-061-6/+5
| | | | [ci skip]
* Tweak readme textsJack Lloyd2016-11-051-0/+5
| | | | [ci skip]
* Update release notesJack Lloyd2016-11-041-0/+25
| | | | [ci skip]
* Rename zero_mem to secure_scrub_memoryJack Lloyd2016-11-031-1/+6
|
* Deprecate LibraryInitializerJack Lloyd2016-11-031-0/+3
| | | | | Now that #668 is landed I'm comfortable that we will not need any type of global init.
* Merge GH #360 Extend configure to output bakefilesJack Lloyd2016-11-021-0/+3
|\
| * Update release notesDaniel Neus2016-11-021-0/+3
| | | | | | | | [ci-skip]
* | Change TLS default policy to disable DSA, CCM-8, and static RSAJack Lloyd2016-11-021-0/+15
|/ | | | | | | | | | | | | | | Disables static RSA by default. The advantage here is twofold: enforcing forward security and protecting TLS servers from oracle attacks since by default they will never negotiate a suite which forces them to act as a decryption oracle. Some applications/users may be forced to enable RSA in order to speak with old or misconfigured peers, but these can be the exception not the default. Disable DSA and CCM-8 by default: if you need to enable these things, you know it. Adds TLS policy hooks to enforce DSA key sizes, default 2048 bits. Remove an incorrect warning about DTLS in the manual; the sequence number window check prevents this scenario from occuring.
* Update 1.11.34 release notesJack Lloyd2016-10-311-0/+14
|
* Move license and news to top level directoryJack Lloyd2016-10-311-0/+4165
These files are important so make them easy to find for someone unpacking the tarball for the first time.
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-29 18:40:04 +0000