aboutsummaryrefslogtreecommitdiffstats
path: root/src/lib/tls/info.txt
Commit message (Collapse)AuthorAgeFilesLines
* Remove "Dirty hack" for multiple defines in lex_me_harder()Simon Warta2017-04-021-1/+3
|
* Export tls_messages.h as a public headerRené Korthaus2016-12-231-2/+2
| | | | | | | TLS::Callbacks::inspect_handshake_message() allows applications to inspect all handshake messages, but this requires access to the types in tls_messages.h. As a matter of fact, this also exports tls_extensions.h as a public header.
* Make TLS CBC optionalJack Lloyd2016-10-081-1/+0
|
* TLS: Split CBC+HMAC modes to standalone AEAD_ModeJack Lloyd2016-10-071-0/+1
| | | | | Now record layer only deals with an AEAD, and the weird complications of CBC modes mostly hidden in tls_cbc.cpp
* Merge GH #567/GH #457 TLS refactoring and Callbacks interfaceJack Lloyd2016-08-311-0/+1
|\
| * Changes to TLS::Callbacks for GH PR #457Jack Lloyd2016-08-161-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Make TLS::Channel::m_callbacks a reference, so deriving from TLS::Callbacks works Split out the compat (std::function) based interface to Compat_Callbacks. This avoids the overhead of empty std::functions when using the virtual interface, and ensures the virtual interface works since there is no callback path that does not involve a vtable lookup. Rename the TLS::Callback functions. Since the idea is that often an owning class will pass *this as the callbacks argument, it is good to namespace the virtual functions so as not to conflict with other names chosen by the class. Specifically, prefixes all cb functions with tls_ Revert changes to use the old style alert callback (with no longer used data/len params) so no API changes are required for old code. The new Callbacks interface continues to just receive the alert code itself. Switch to virtual function interface in CLI tls_client for testing. Inline tls_server_handshake_state.h - only used in tls_server.cpp Fix tests - test looked like it was creating a new client object but it was not actually being used. And when enabled, it failed because the queues were not being emptied in between. So, fix that.
| * Added virtual Callback InterfaceMatthias Gierlings2016-06-191-0/+1
| | | | | | | | | | | | | | | | | | - extracted inner class TLS::Channel::Callbacks to stand-alone class TLS::Callbacks. - provided default implementations for TLS::Callbacks members executing calls to std::function members for backward compatibility. - applied changes to cli, tests and TLS::Channel related classes to be compatible with new interface.
| * Reduction of code complexity in TLS classes.Matthias Gierlings2016-06-191-0/+1
| | | | | | | | | | | | | | -reduced number of parameters in various methods -reduced cyclomatic complexity (McCabe-Metric) -removed "TLSEXT_HEARTBEAT_SUPPORT" from tls_extensions.h (leftover from heartbeat extension removal?)
* | Update info.txtDaniel Neus2016-08-161-2/+1
| |
* | add sha1_sse2 to the TLS module dependenciesDaniel Neus2016-08-151-0/+1
| |
* | Remove unused kdf2 dependency from tls moduleRené Korthaus2016-07-041-1/+0
| |
* | Various fixes with bsi module policyRené Korthaus2016-07-041-0/+1
|/
* Make SRP6 support optional in TLSJack Lloyd2016-02-071-1/+0
| | | | | | | | Remove SRP_SHA from the default policy, since normal applications do not need it. Removes nullptr initializers of unique_ptrs in the Server_Key_Exchange constructor, that's the default unique_ptr already.
* Remove TLS heartbeat support.Jack Lloyd2016-02-071-1/+0
| | | | | The signature of the alert callback remains unchanged to avoid breaking applications, though now the buffer parameter is never set.
* Move Credentials_Manager to TLSJack Lloyd2015-08-291-1/+1
|
* Add ALPN (RFC 7301) and remove NPNlloyd2015-03-201-33/+1
|
* Remove SSLv3 and handling of SSLv2 client hellos.lloyd2015-01-111-2/+0
|
* Change TLS session encryption to use AES-256/GCM instead of CBC+HMAClloyd2015-01-081-2/+0
|
* Rename the various pubkey padding schemes to match the common names.lloyd2014-01-181-2/+2
| | | | Way back when, following IEEE 1363 naming seemed like a good idea. But not so much.
* Split up docs into the reference manual, the website, and everything else.lloyd2014-01-101-0/+2
| | | | | | | | | | | Add `website` target to makefile. Some progress towards fixing minimized builds. TLS now hard requires ECDSA and GCM since otherwise a minimized build has only insecure options. Remove boost_thread dependency in command line tool
* Move lib into srclloyd2014-01-101-0/+90