aboutsummaryrefslogtreecommitdiffstats
path: root/src/lib/tls/tls_channel.h
Commit message (Collapse)AuthorAgeFilesLines
* TLS improvementsJack Lloyd2015-10-251-3/+14
| | | | | | | | | | | | | | Use constant time operations when checking CBC padding in TLS decryption Fix a bug in decoding ClientHellos that prevented DTLS rehandshakes from working: on decode the session id and hello cookie would be swapped, causing confusion between client and server. Various changes in the service of finding the above DTLS bug that should have been done before now anyway - better control of handshake timeouts (via TLS::Policy), better reporting of handshake state in the case of an error, and finally expose the facility for per-message application callbacks.
* lib/tls: Convert &vec[0] to vec.data()Simon Warta2015-06-231-1/+1
|
* Add typedefs for function signatures/types used in TLS for easier readinglloyd2015-01-271-8/+13
|
* Ensure all files have copyright and license info.lloyd2015-01-101-1/+1
| | | | | Update license header line to specify the terms and refer to the file, neither of which it included before.
* Support setting the number of pad bytes in a heartbeat message. Uselloyd2015-01-071-47/+49
| | | | | random instead of all-zero padding. Check on sanity of received pads to the extent possible. Bugzilla 269.
* A TLS Server can now process either TLS or DTLS but not either,lloyd2014-11-151-0/+3
| | | | | with the setting set in the constructor. This prevents various surprising things from happening to applications and simplifies record processing.
* Add support for DTLS handshake timeouts and retransmissions.lloyd2014-10-061-2/+13
|
* Avoid initializer lists here, VC2013 doesn't like it. Github #18lloyd2014-05-011-5/+3
|
* Guess I won't be needing theselloyd2014-01-181-1/+0
|
* Move lib into srclloyd2014-01-101-0/+259