| Commit message (Expand) | Author | Age | Files | Lines |
* | Read ECDH client key exchange messages | lloyd | 2012-01-24 | 1 | -25/+26 |
* | Working ECDH key exchange. Only tested on client side but seems good | lloyd | 2012-01-24 | 3 | -37/+95 |
* | Cleanup | lloyd | 2012-01-24 | 1 | -10/+10 |
* | Expose the named curve ID/string conversion functions, needed for server key ... | lloyd | 2012-01-24 | 2 | -9/+8 |
* | Convert Internal_Error exceptions into the cooresponding alert. | lloyd | 2012-01-24 | 2 | -4/+7 |
* | Formatting and comment fix | lloyd | 2012-01-24 | 1 | -5/+5 |
* | Don't assume the server key exchange consists of a series of BigInts. | lloyd | 2012-01-24 | 3 | -31/+25 |
* | Add comments for the Policy class. Make the allowed_* calls virtual so | lloyd | 2012-01-24 | 1 | -16/+42 |
* | PEM encoding. Fix BER decoding. Encode the entire cert chain in the | lloyd | 2012-01-24 | 2 | -23/+68 |
* | New helpers taking a string | lloyd | 2012-01-24 | 2 | -0/+28 |
* | This should always have reported what it saw and expected | lloyd | 2012-01-24 | 1 | -1/+5 |
* | Better documentation in this header | lloyd | 2012-01-24 | 1 | -11/+34 |
* | The credentials manager interface seems a much better place for cert | lloyd | 2012-01-23 | 5 | -16/+76 |
* | Add Ciphersuite::to_string | lloyd | 2012-01-23 | 7 | -20/+110 |
* | Make the version number a proper class, makes many things much easier | lloyd | 2012-01-23 | 26 | -168/+304 |
* | Since this branch is hugely API breaking already, go ahead and put | lloyd | 2012-01-23 | 38 | -277/+429 |
* | Remove the key() method on server key exchange - instead leave it to | lloyd | 2012-01-23 | 3 | -21/+18 |
* | Have the client key exchange examine the server key exchange message | lloyd | 2012-01-23 | 6 | -52/+59 |
* | Basic outline of the supported curves extension from RFC 4492 | lloyd | 2012-01-22 | 2 | -14/+167 |
* | Reorder for readability | lloyd | 2012-01-22 | 1 | -46/+48 |
* | When generating a signature in TLS 1.2, respect the request of the | lloyd | 2012-01-20 | 8 | -57/+73 |
* | Report the length of the pre master secret. Who knows if when this | lloyd | 2012-01-20 | 1 | -1/+2 |
* | Missing a space | lloyd | 2012-01-20 | 1 | -1/+1 |
* | Increase the max key length of HMAC to 512 bytes. Previously we would | lloyd | 2012-01-20 | 2 | -2/+9 |
* | A change to Finished in 687c3c7dccdd2f5e4825bdb60155c7bfba22339f broke | lloyd | 2012-01-20 | 1 | -3/+5 |
* | Helps if you return the right type | lloyd | 2012-01-20 | 1 | -1/+1 |
* | Support lookup of the SSLv3 PRF | lloyd | 2012-01-20 | 1 | -0/+5 |
* | Ignore ECDH suites in replying | lloyd | 2012-01-20 | 1 | -0/+3 |
* | Fix decoding of signature_algorithms if we say something we don't recognize | lloyd | 2012-01-20 | 1 | -4/+4 |
* | Strangely you can negotiate using only MD5 in TLS 1.2. Just ignore it | lloyd | 2012-01-20 | 1 | -5/+2 |
* | Instead of using a hardcoded value for signature_algothms, go with | lloyd | 2012-01-20 | 7 | -20/+32 |
* | New policy methods. User provides lists of ciphers, hashes, etc they | lloyd | 2012-01-20 | 5 | -144/+231 |
* | Convert to using a switch statement here. It's faster, and offers | lloyd | 2012-01-20 | 1 | -83/+88 |
* | If the client sent something > TLS 1.2, we sould respond as TLS 1.1 | lloyd | 2012-01-20 | 1 | -16/+10 |
* | Somewhat contorted, but fixes the issue with sending hash/sig ids with | lloyd | 2012-01-20 | 5 | -18/+40 |
* | TLS_Ciphersuite_Algos was just a strange level of indirection between | lloyd | 2012-01-20 | 18 | -506/+254 |
* | Basic processing for signature_algorithms extension in client hello | lloyd | 2012-01-20 | 2 | -1/+35 |
* | Initialize values once in constructor instead of in each branch | lloyd | 2012-01-20 | 2 | -14/+13 |
* | Many fixes for TLS 1.2 though some things in particular client auth | lloyd | 2012-01-20 | 13 | -150/+251 |
* | Various and sundry bug fixes | lloyd | 2012-01-19 | 9 | -11/+31 |
* | Add the AES/SHA-256 suites to the standard lists. Works under TLS 1.2 | lloyd | 2012-01-19 | 1 | -0/+13 |
* | Kinda maybe working TLS 1.2 for clients. Not well tested at all, but a | lloyd | 2012-01-19 | 21 | -88/+172 |
* | Remove Handshake_Message::deserialize which was an unnecessary hook. | lloyd | 2012-01-19 | 10 | -153/+132 |
* | I'm not sure if I like this asthetically, but passing around the | lloyd | 2012-01-19 | 15 | -311/+219 |
* | Fix RSA client cert verification for SSLv3 | lloyd | 2012-01-19 | 1 | -3/+14 |
* | Support SSLv3 client auth on the client side. | lloyd | 2012-01-19 | 6 | -15/+53 |
* | Also fix encoding | lloyd | 2012-01-19 | 1 | -4/+5 |
* | Fix decoding of certificate request message | lloyd | 2012-01-19 | 1 | -5/+14 |
* | Read only support for signature_algorithms extension used in TLS 1.2 | lloyd | 2012-01-18 | 5 | -54/+239 |
* | The leading zeros of a DH pre master secret are supposed to be | lloyd | 2012-01-18 | 1 | -2/+23 |