aboutsummaryrefslogtreecommitdiffstats
path: root/src/tls/tls_server.cpp
Commit message (Expand)AuthorAgeFilesLines
* Split TLS callbacks into a data callback and an alert callback.lloyd2013-11-051-3/+4
* Change default policy to prohibit DTLS to minimize surprise.lloyd2013-07-101-2/+3
* Add Channel::send_warning_alert and send_fatal_alertlloyd2013-05-301-1/+1
* Make ciphersuite_list a virtual member of TLS::Policylloyd2013-04-101-4/+2
* Add TLS::Policy::server_uses_own_ciphersuite_preferences()lloyd2013-03-211-5/+10
* Move assert.h from internal to very public (included in types.h)lloyd2013-03-131-1/+0
* Change Credentials_Manager::trusted_certificate_authorities to returnlloyd2012-11-131-1/+11
* Remove Channel::m_max_fragment. Instead derive it from the serverlloyd2012-11-071-6/+0
* Add TLS::Policy::negotiate_heartbeat_support which controls if thelloyd2012-10-131-0/+2
* Add TLS::Server_Information to encapsulate the hostname/port pair.lloyd2012-10-131-9/+8
* Update creators of Session to new constructorlloyd2012-09-121-1/+0
* It seems other implementations define the secure renegotiation flag tolloyd2012-09-121-2/+2
* Spellinglloyd2012-09-121-6/+5
* Remove redundant Channel::m_current_versionlloyd2012-09-091-1/+1
* Create the IO in Channel and then pass it down to new_handshake_statelloyd2012-09-091-11/+3
* Also hide Channel::m_handshake_fnlloyd2012-09-091-2/+2
* Hide Channel::m_rng and Channel::m_session_manager, add getterslloyd2012-09-091-10/+10
* Per Google's spec the client is not supposed to include a NPNlloyd2012-09-071-0/+4
* Remove Channel::m_peer_certs, instead retrieve directly from the state.lloyd2012-09-071-4/+13
* Just dynamic_cast once at the start of process_handshake_msglloyd2012-09-071-4/+6
* Inline Secure_Renegotiation_State into Channel as so much of the datelloyd2012-09-071-9/+9
* Channel::heartbeat_support was removedlloyd2012-09-071-3/+0
* Pass the current active state as well as the pending state which islloyd2012-09-071-11/+11
* Keep two handshake states around, swap them whenlloyd2012-09-071-1/+1
* Make Channel::m_state privatelloyd2012-09-061-7/+4
* Pass process_handshake_msg a reference to the Handshake_Statelloyd2012-09-061-119/+116
* Add Channel::send_recordlloyd2012-09-061-2/+5
* Add more functions to Channel, hiding Record_Reader entirely and mostlloyd2012-09-061-28/+14
* Make a number of members of Channel private instead of protectedlloyd2012-09-061-17/+3
* Hoist m_rng to Channellloyd2012-09-061-1/+0
* Use a std::function so handshake_io only has access Record_Writer'slloyd2012-09-041-1/+6
* Make the CCS message a Handshake_Msg and send it through the handshakelloyd2012-08-101-2/+2
* Expose Handshake_Message as an API type.lloyd2012-08-061-0/+2
* Move server-specific parts of the handshake state to a server subclass.lloyd2012-08-061-5/+23
* Make the handshake hash privatelloyd2012-08-061-14/+14
* Make handshake session keys private with get/setlloyd2012-08-061-9/+6
* Make the handshake Ciphersuite only available by const reference.lloyd2012-08-061-10/+6
* Have all the TLS handshake messages stored in unique_ptrs with onlylloyd2012-08-061-114/+132
* Remove Channel::read_handshake. Have the server set expected next msglloyd2012-08-051-18/+4
* Combine Handshake_Writer and Handshake_Reader into Handshake_IO.lloyd2012-08-031-19/+18
* Rename activate to more descriptive change_cipher_speclloyd2012-07-291-6/+12
* Use unique_ptr for handshake state, avoid lots of delete+nullptr assignlloyd2012-07-291-19/+22
* If we're going to reject an insecure renegotiation, do it immediately,lloyd2012-07-291-41/+45
* Fix DTLS version string.lloyd2012-07-281-4/+13
* Add format() hook to Handshake_Writer, so that Handshake_Hash does notlloyd2012-07-281-3/+3
* Add a class that handles writing handshake messages instead of pushinglloyd2012-07-161-24/+45
* Hook creating just the handshake reader vs the entire statelloyd2012-07-121-4/+4
* Changes to version handling in support of DTLS work.lloyd2012-07-121-8/+13
* Add TLS::Channel::new_handshake_state which abstracts creating thelloyd2012-07-091-2/+7
* Record_Writer needs a PRNG for the IV generation. Share the referencelloyd2012-07-051-1/+1