| Commit message (Expand) | Author | Age | Files | Lines |
* | Changes so DTLS handshake can send messages under different epochs, eg | lloyd | 2012-11-12 | 1 | -4/+1 |
* | Remove TLS::Policy::pref_version. Instead pass the version to offer to | lloyd | 2012-10-13 | 1 | -5/+0 |
* | No reason to pass a u16bit by reference | lloyd | 2012-09-10 | 1 | -1/+1 |
* | Fix DTLS version string. | lloyd | 2012-07-28 | 1 | -8/+10 |
* | Add a class that handles writing handshake messages instead of pushing | lloyd | 2012-07-16 | 1 | -5/+5 |
* | Changes to version handling in support of DTLS work. | lloyd | 2012-07-12 | 1 | -2/+5 |
* | Split TLS::Policy::allowed_hashes into allowed_signature_hashes and | lloyd | 2012-06-29 | 1 | -17/+26 |
* | Add TLS::Policy::minimum_dh_group_size, default 1024. Send an | lloyd | 2012-06-25 | 1 | -0/+5 |
* | Commented out entry for anon in default policy: | lloyd | 2012-06-17 | 1 | -0/+1 |
* | Profiling with valgrind shows that the 2**16 iteration for finding | lloyd | 2012-06-14 | 1 | -16/+6 |
* | Use initialize lists here, much cleaner | lloyd | 2012-06-09 | 1 | -53/+44 |
* | Compile fix | lloyd | 2012-04-20 | 1 | -1/+1 |
* | Put the implementation of Policy::dh_group in source so it's easier to | lloyd | 2012-04-19 | 1 | -0/+5 |
* | Finish up server side SRP support, a little ugly but it works. | lloyd | 2012-04-06 | 1 | -14/+8 |
* | Remove Policy::choose_compression and move to tls_server | lloyd | 2012-04-04 | 1 | -44/+30 |
* | Limit the lifetime of tickets to Policy::session_ticket_lifetime() | lloyd | 2012-04-04 | 1 | -40/+23 |
* | Add anonymous DH/ECDH ciphersuites to the cipher list. Interop checked | lloyd | 2012-04-02 | 1 | -3/+4 |
* | Remove the Ciphersuite_Code enum and move all ciphersuite | lloyd | 2012-03-30 | 1 | -6/+3 |
* | Move min_version and pref_version to the source file so they can be | lloyd | 2012-03-02 | 1 | -0/+10 |
* | Support getting ciphersuites by name as well as suite ID | lloyd | 2012-01-28 | 1 | -4/+5 |
* | Add Camellia ciphersuites from RFC 4132. | lloyd | 2012-01-28 | 1 | -1/+10 |
* | Change naming convention to match RFCs | lloyd | 2012-01-27 | 1 | -2/+2 |
* | Working though somewhat clumsy DHE_PSK and ECDHE_PSK. Tested against GnuTLS | lloyd | 2012-01-27 | 1 | -1/+2 |
* | Server side PSK kex | lloyd | 2012-01-27 | 1 | -1/+4 |
* | Add client-side support for PSK kex. Tested against OpenSSL. | lloyd | 2012-01-27 | 1 | -4/+8 |
* | Make Alert a first class object ala Version. Move the alert codes into | lloyd | 2012-01-26 | 1 | -0/+1 |
* | In earlier versions, key exchange == "RSA" meant export-style | lloyd | 2012-01-25 | 1 | -3/+5 |
* | Go back to choosing the ciphersuite based on the server's preferences. | lloyd | 2012-01-25 | 1 | -13/+9 |
* | s/tls_suites/tls_ciphersuite/ | lloyd | 2012-01-24 | 1 | -1/+1 |
* | Add support for the IDEA ciphersuite, though don't require it to be | lloyd | 2012-01-24 | 1 | -1/+7 |
* | Fix ECC curve negotiation on the server side. | lloyd | 2012-01-24 | 1 | -3/+8 |
* | We can now actually handle multiple certificate types in the server | lloyd | 2012-01-24 | 1 | -14/+8 |
* | ECDSA support. Only client side tested | lloyd | 2012-01-24 | 1 | -1/+1 |
* | Send the supported elliptic curves extension. Instead of hardcoding | lloyd | 2012-01-24 | 1 | -0/+31 |
* | Get the list of supported ECC curves out of the client hello, and | lloyd | 2012-01-24 | 1 | -3/+7 |
* | Allow ECDH negotiation by default | lloyd | 2012-01-24 | 1 | -4/+1 |
* | Cleanup | lloyd | 2012-01-24 | 1 | -10/+10 |
* | Since this branch is hugely API breaking already, go ahead and put | lloyd | 2012-01-23 | 1 | -13/+17 |
* | When generating a signature in TLS 1.2, respect the request of the | lloyd | 2012-01-20 | 1 | -0/+3 |
* | Ignore ECDH suites in replying | lloyd | 2012-01-20 | 1 | -0/+3 |
* | Instead of using a hardcoded value for signature_algothms, go with | lloyd | 2012-01-20 | 1 | -0/+3 |
* | New policy methods. User provides lists of ciphers, hashes, etc they | lloyd | 2012-01-20 | 1 | -81/+151 |
* | Various and sundry bug fixes | lloyd | 2012-01-19 | 1 | -2/+2 |
* | Add the AES/SHA-256 suites to the standard lists. Works under TLS 1.2 | lloyd | 2012-01-19 | 1 | -0/+13 |
* | Some basic infrastructure pieces for SRP (policy, etc) | lloyd | 2011-12-31 | 1 | -8/+29 |
* | Rename ssl module to tls | lloyd | 2011-12-23 | 1 | -0/+118 |