| Commit message (Expand) | Author | Age | Files | Lines |
* | Various and sundry bug fixes | lloyd | 2012-01-19 | 9 | -11/+31 |
* | Add the AES/SHA-256 suites to the standard lists. Works under TLS 1.2 | lloyd | 2012-01-19 | 1 | -0/+13 |
* | Kinda maybe working TLS 1.2 for clients. Not well tested at all, but a | lloyd | 2012-01-19 | 21 | -88/+172 |
* | Remove Handshake_Message::deserialize which was an unnecessary hook. | lloyd | 2012-01-19 | 10 | -153/+132 |
* | I'm not sure if I like this asthetically, but passing around the | lloyd | 2012-01-19 | 15 | -311/+219 |
* | Fix RSA client cert verification for SSLv3 | lloyd | 2012-01-19 | 1 | -3/+14 |
* | Support SSLv3 client auth on the client side. | lloyd | 2012-01-19 | 6 | -15/+53 |
* | Also fix encoding | lloyd | 2012-01-19 | 1 | -4/+5 |
* | Fix decoding of certificate request message | lloyd | 2012-01-19 | 1 | -5/+14 |
* | Read only support for signature_algorithms extension used in TLS 1.2 | lloyd | 2012-01-18 | 5 | -54/+239 |
* | The leading zeros of a DH pre master secret are supposed to be | lloyd | 2012-01-18 | 1 | -2/+23 |
* | Rename queue_for_sending just send | lloyd | 2012-01-16 | 2 | -4/+4 |
* | Change TLS feature macro, major API changes. Start documenting | lloyd | 2012-01-16 | 1 | -2/+2 |
* | Kill stray char | lloyd | 2012-01-10 | 1 | -1/+1 |
* | If we send the close notify alert, don't reset the reader because the | lloyd | 2012-01-08 | 4 | -20/+30 |
* | In the reader preallocate the buffer that we'll store the computed MAC | lloyd | 2012-01-06 | 2 | -21/+22 |
* | The server would incorrectly send a server key exchange message when a | lloyd | 2012-01-06 | 7 | -90/+85 |
* | Remove the version getter in TLS_Channel - caller should use the | lloyd | 2012-01-06 | 5 | -61/+31 |
* | Cleanups | lloyd | 2012-01-05 | 1 | -17/+10 |
* | Make record reading faster (less copying, no queue at all), at the | lloyd | 2012-01-05 | 3 | -73/+138 |
* | If the maximum fragment extension was negotiated, enforce it. Also | lloyd | 2012-01-05 | 4 | -2/+32 |
* | propagate from branch 'net.randombit.botan' (head 423204c45c686bfba0058cdc65b... | lloyd | 2012-01-05 | 4 | -52/+143 |
|\ |
|
| * | Remove the autheticator generation from the SRP code as it's not used | lloyd | 2011-12-31 | 4 | -52/+143 |
| * | A bad decrypt on a TLS 1.0/1.1 message would cause a mostly infinite | lloyd | 2011-12-31 | 1 | -1/+6 |
* | | Less buffer movement in the record reader | lloyd | 2012-01-04 | 3 | -73/+83 |
* | | Add a hook in TLS_Channel that is called when an alert is received. | lloyd | 2012-01-04 | 6 | -2/+34 |
* | | Have Record_Writer use a single persistent buffer for outbound | lloyd | 2012-01-04 | 2 | -13/+15 |
* | | Compile fix | lloyd | 2012-01-04 | 1 | -1/+1 |
* | | Remove the support for writing application data before the handshake | lloyd | 2012-01-04 | 2 | -14/+3 |
* | | As someone pointed out on the TLS list, NPN isn't really a negotiation | lloyd | 2012-01-04 | 8 | -23/+23 |
* | | The first 4 bytes of the client and server randoms are supposed to be | lloyd | 2012-01-04 | 3 | -4/+16 |
* | | Split hello.cpp into c_hello.cpp and s_hello.cpp | lloyd | 2012-01-04 | 8 | -223/+271 |
* | | Add support for next protocol negotiation. Client only currently; | lloyd | 2012-01-04 | 12 | -104/+362 |
* | | Fix unused param warnings. Comments in header | lloyd | 2012-01-03 | 2 | -25/+32 |
* | | If the handshake_fn returns false explicitly remove the session from | lloyd | 2012-01-03 | 2 | -0/+4 |
* | | Assume handshake_fn exists | lloyd | 2012-01-03 | 1 | -6/+1 |
* | | Make handshake completion function non-optional. Now returns a bool | lloyd | 2012-01-03 | 6 | -17/+16 |
* | | Add Credentials_Manager which is an interface to something that knows | lloyd | 2012-01-03 | 12 | -73/+202 |
* | | Code for NewSessionTicket handshake message | lloyd | 2012-01-03 | 1 | -0/+1 |
* | | Some basic infrastructure pieces for SRP (policy, etc) | lloyd | 2011-12-31 | 6 | -23/+46 |
* | | Add support for client-side session resumption | lloyd | 2011-12-31 | 10 | -101/+228 |
* | | Better names on the session manager. Plausible client lookup support, | lloyd | 2011-12-30 | 3 | -23/+57 |
* | | Rename the session type to 'TLS_Session'. Split the manager out into | lloyd | 2011-12-30 | 13 | -164/+215 |
* | | Add a function for getting the version number of an active connection. | lloyd | 2011-12-30 | 16 | -39/+85 |
* | | Add support for the maximum fragment length extension. No hooks for it | lloyd | 2011-12-30 | 9 | -141/+288 |
* | | Prevent ping-ponging of close alerts by tracking both if a handshake | lloyd | 2011-12-30 | 4 | -18/+31 |
* | | Full support for renegotiation including RFC 5746 extensions for | lloyd | 2011-12-30 | 8 | -42/+133 |
* | | Server side handling of the secure renegotiation extension. | lloyd | 2011-12-30 | 3 | -2/+26 |
* | | Many renegotiation fixes. Add support for the secure renegotiation | lloyd | 2011-12-30 | 13 | -36/+209 |
* | | Reset the sequence numbers when we activate a connection state. This | lloyd | 2011-12-30 | 2 | -0/+9 |