Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Clean up close_notify handling in TLS | Jack Lloyd | 2019-08-01 | 2 | -20/+39 |
| | | | | | | Previously after sending or receiving a close_notify we would reset all handshake state and basically ignore anything the peer sent. Now we detect any garbage that might arrive after. | ||||
* | Split more carefully to exactly MTU in DTLS handshake fragmentation. | Jack Lloyd | 2019-07-18 | 1 | -14/+5 |
| | |||||
* | Improve error messages when reporting TLS state transition violations | Jack Lloyd | 2019-07-13 | 1 | -19/+18 |
| | |||||
* | Add TLS v1.3 downgrade indicator | Jack Lloyd | 2019-07-12 | 2 | -1/+3 |
| | |||||
* | Make the TLS OCSP callback not const. | Jack Lloyd | 2019-06-29 | 1 | -1/+1 |
| | | | | | As the impl may need to do side-effecting things in order to get the most recent response. | ||||
* | Add support for HelloVerifyRequest on server side | Jack Lloyd | 2019-06-18 | 1 | -0/+5 |
| | | | | Closes GH #1833 | ||||
* | Cleanup shim logic | Jack Lloyd | 2019-06-18 | 1 | -3/+7 |
| | |||||
* | Ask for certificate status even on a resumption attempt | Jack Lloyd | 2019-05-28 | 1 | -1/+0 |
| | | | | | This makes sense to do since if the server doesn't resume, we would like to see a updated status message. | ||||
* | Fix another warning in BoGo shim | Jack Lloyd | 2019-05-24 | 1 | -1/+1 |
| | | | | | On Linux x86-64 this complains because time_t is unsigned long not unsigned long long. Just cast it. | ||||
* | Bogo shim warning build fix | David Carlier | 2019-05-24 | 1 | -1/+1 |
| | |||||
* | Add support for supported versions extension from TLS 1.3 | Jack Lloyd | 2019-05-24 | 2 | -34/+33 |
| | |||||
* | Allow servers to prohibit renegotiation with fatal alert | Jack Lloyd | 2019-05-24 | 2 | -2/+3 |
| | |||||
* | Remove hack for signature preferences | Jack Lloyd | 2019-05-24 | 1 | -8/+1 |
| | |||||
* | Build fix | Jack Lloyd | 2019-05-24 | 1 | -2/+2 |
| | |||||
* | Avoid erroring out on a short read | Jack Lloyd | 2019-05-24 | 1 | -6/+22 |
| | | | | Can't replicate this locally but it just caused a failure on Travis. | ||||
* | Fix DTLS alerts | Jack Lloyd | 2019-05-23 | 2 | -20/+11 |
| | | | | | For some reason doing two writes here ends up with the second (the payload) being lost due to socket closure. | ||||
* | Some analysis of failing tests | Jack Lloyd | 2019-05-23 | 1 | -2/+5 |
| | |||||
* | Ignore large DTLS ciphertexts | Jack Lloyd | 2019-05-23 | 1 | -1/+0 |
| | |||||
* | Fix bugs when DTLS initial handshake messages are replayed | Jack Lloyd | 2019-05-23 | 1 | -1/+0 |
| | |||||
* | Fix some issues with DTLS version intolerance | Jack Lloyd | 2019-05-23 | 2 | -5/+8 |
| | |||||
* | Clarify disabled comment | Jack Lloyd | 2019-05-23 | 1 | -6/+6 |
| | |||||
* | Fix DTLS version settings in shim | Jack Lloyd | 2019-05-23 | 2 | -17/+8 |
| | |||||
* | Verify contents of DTLS CCS message | Jack Lloyd | 2019-05-23 | 1 | -1/+0 |
| | |||||
* | Shorten callback name | Jack Lloyd | 2019-05-22 | 1 | -2/+2 |
| | |||||
* | Add BoGo tests and fix resumption case | Jack Lloyd | 2019-05-22 | 2 | -10/+38 |
| | |||||
* | Fix more BoGo tests | Jack Lloyd | 2019-05-22 | 2 | -16/+60 |
| | | | | | Now all tests either pass or are known to fail for some reason. Disable -allow-unimplemented | ||||
* | Fix DTLS MTU splitting | Jack Lloyd | 2019-05-21 | 2 | -3/+11 |
| | | | | We could/would send packets somewhat larger than MTU | ||||
* | Disable some BoGo tests with problems not immediately debuggable | Jack Lloyd | 2019-05-21 | 1 | -0/+23 |
| | |||||
* | Start of support for DTLS in BoGo shim | Jack Lloyd | 2019-05-21 | 2 | -59/+142 |
| | |||||
* | More BoGo work | Jack Lloyd | 2019-05-21 | 2 | -28/+39 |
| | |||||
* | Fix some Clang warnings in the BoGo shim | Jack Lloyd | 2019-05-20 | 1 | -15/+16 |
| | |||||
* | Add a shim for testing Botan using BoGo | Jack Lloyd | 2019-05-20 | 2 | -0/+1591 |