aboutsummaryrefslogtreecommitdiffstats
path: root/src/lib/tls
Commit message (Expand)AuthorAgeFilesLines
* Merge GH #1275 Avoid needless throw/catch during TLS handshakeJack Lloyd2017-10-261-1/+2
|\
| * Added missing include.Frank Schoenmann2017-10-251-0/+1
| * Perform OIDS lookup before to prevent a guaranteed exception in EC_Group.Frank Schoenmann2017-10-251-1/+1
* | Avoid sending OCSP status request on resumption client helloJack Lloyd2017-10-251-2/+0
|/
* Convert http:// links to https:// where possibleJack Lloyd2017-10-241-1/+1
* Merge GH #1263 Support FFDHE negotiation in TLSJack Lloyd2017-10-229-28/+206
|\
| * Remove check for negotiated DH group in TLS clientRené Korthaus2017-10-201-29/+0
| * Fall back to default group if client does not send any DH groupsRené Korthaus2017-10-202-2/+19
| * Add allowed values for allowed groupsRené Korthaus2017-10-181-3/+13
| * Add supported groups TLS extension (RFC 7919)René Korthaus2017-10-1710-27/+207
* | Remove redundant checkJack Lloyd2017-10-201-3/+0
* | Use base CBC modes to implement TLS CBC ciphersuitesJack Lloyd2017-10-193-49/+36
|/
* Additional final annotationsJack Lloyd2017-10-151-2/+2
* Add comments explaining why its ok to rely on deprecated features here.Jack Lloyd2017-10-092-0/+8
* Add a special Compat_Callbacks constructor to silence deprecation warnings.Jack Lloyd2017-10-093-7/+24
* Address various GCC warningsJack Lloyd2017-10-062-5/+5
* Avoid empty methods, use =default or add a commentJack Lloyd2017-10-033-3/+3
* Add wrappers for reinterpret_cast between char* and uint8_t*Jack Lloyd2017-10-033-8/+6
* Remove redundant parensJack Lloyd2017-10-031-1/+1
* Remove various unused variablesJack Lloyd2017-10-021-2/+0
* Make TLS::Blocking_Client non-finalJack Lloyd2017-10-021-1/+1
* Make kv in TLS_Text_Policy private, add protected setterJack Lloyd2017-10-022-0/+14
* Use class instead of struct for objects with member functionsJack Lloyd2017-09-301-3/+4
* In TLS CBC padding check, only need to verify last 256 bytesJack Lloyd2017-09-291-8/+16
* Add a test of TLS CBC padding verificationJack Lloyd2017-09-292-9/+12
* Fixes for MSVCJack Lloyd2017-09-281-2/+1
* Further header cleanupsJack Lloyd2017-09-282-0/+3
* More build fixesJack Lloyd2017-09-241-1/+2
* Avoid deprecated warning in tls_blocking.cppJack Lloyd2017-09-221-0/+6
* Apply final annotations to the library alsoJack Lloyd2017-09-2218-25/+25
* De-inline TLS::Text_PolicyJack Lloyd2017-09-214-122/+302
* More include header cleanupsJack Lloyd2017-09-2132-30/+19
* Header file cleanupsJack Lloyd2017-09-214-0/+4
* Change header guard format to BOTAN_FOO_H_Jack Lloyd2017-09-2028-56/+56
* More annotationsJack Lloyd2017-09-192-9/+9
* Add API stability annotations.Jack Lloyd2017-09-1920-35/+35
* Merge GH #872 Add ability for TLS servers to prohibit renegotiationJack Lloyd2017-09-193-2/+16
|\
| * Fix logic of renegotiation checkJack Lloyd2017-02-203-4/+6
| * Add TLS::Policy::allow_client_initiated_renegotiationJack Lloyd2017-02-193-2/+14
* | Use constant_time_compare instead of same_memJack Lloyd2017-09-162-3/+3
* | Correct TLS::Policy::latest_supported_versionJack Lloyd2017-09-041-2/+16
* | De-inline accessor functions in Client_Hello typeJack Lloyd2017-09-012-93/+130
* | Don't try enforcing the hash policy for PSK ciphersuitesJack Lloyd2017-09-011-1/+1
* | Enforce signature hash policy properlyJack Lloyd2017-08-314-17/+61
* | More MSVC warnings fixesJack Lloyd2017-08-312-6/+6
* | Fix various MSVC warningsJack Lloyd2017-08-312-4/+7
* | Avoid false positive valgrind in TLS CBC decryptionJack Lloyd2017-08-291-2/+2
* | Add support for ECDHE_PSK AEAD ciphersuitesJack Lloyd2017-08-221-2/+6
* | Initialize member var in Certificate_Status_RequestJack Lloyd2017-08-031-1/+2
* | Correct failure when renegotiating with old serverJack Lloyd2017-06-041-1/+1