Rivoreo Source Code Repositories
src.rivoreo.one
/
security
/
mbedtls
/
f863485fea7222011154537519ffc881cc07a24a
/
library
/
ssl_srv.c
9e36f04
SHA2 renamed to SHA256, SHA4 renamed to SHA512 and functions accordingly
by Paul Bakker
· 12 years ago
5dc6b5f
Made supported curves configurable
by Paul Bakker
· 12 years ago
2fbefde
Client and server now filter sent and accepted ciphersuites on minimum
by Paul Bakker
· 12 years ago
59c28a2
SSL v2 handshake should also handle dynamic ciphersuites
by Paul Bakker
· 12 years ago
b6c5d2e
Cleanup up non-prototyped functions (static) and const-correctness
by Paul Bakker
· 12 years ago
2013950
Secure renegotiation extension should only be sent in case client supports secure renegotiation
by Paul Bakker
· 12 years ago
48f7a5d
DHE-PSK based ciphersuite support added and cleaner key exchange based
by Paul Bakker
· 12 years ago
ed27a04
More granular define selections within code to allow for smaller code sizes
by Paul Bakker
· 12 years ago
fbb1780
Added pre-shared key handling for the server side of SSL / TLS
by Paul Bakker
· 12 years ago
70df2fb
Split parts of ssl_parse_client_key_exchange() into separate functions
by Paul Bakker
· 12 years ago
f7abd42
Removed extra spaces on end of lines
by Paul Bakker
· 12 years ago
8f4ddae
Ability to specify allowed ciphersuites based on the protocol version.
by Paul Bakker
· 12 years ago
c70b982
OID functionality moved to a separate module.
by Paul Bakker
· 12 years ago
b7149bc
Corrected behaviour for CBC-based suites using the SHA384 MAC and PRF
by Paul Bakker
· 12 years ago
41c83d3
Added Ephemeral Elliptic Curve Diffie Hellman ciphersuites to SSL/TLS
by Paul Bakker
· 12 years ago
68884e3
Moved to advanced ciphersuite representation and more dynamic SSL code
by Paul Bakker
· 12 years ago
78a8c71
Re-added support for parsing and handling SSLv2 Client Hello messages
by Paul Bakker
· 12 years ago
1961b70
Added ssl_handshake_step() to allow single stepping the handshake process
by Paul Bakker
· 12 years ago
21dca69
Handle future version properly in ssl_write_certificate_request()
by Paul Bakker
· 12 years ago
bc3d984
Fixed multiple DN size
by Paul Bakker
· 12 years ago
78ce507
Fixed typo
by Paul Bakker
· 12 years ago
926af75
Fixed client certificate handling with TLS 1.2
by Paul Bakker
· 12 years ago
645ce3a
- Moved ciphersuite naming scheme to IANA reserved names
by Paul Bakker
· 12 years ago
35a7fe5
- Prevent compiler warning
by Paul Bakker
· 12 years ago
8611e73
- Fixed infinite loop
by Paul Bakker
· 12 years ago
81420ab
- properly print minimum version
by Paul Bakker
· 12 years ago
23f3680
- Added proper support for TLS 1.2 signature_algorithm extension on server
by Paul Bakker
· 12 years ago
1d29fb5
- Added option to add minimum accepted SSL/TLS protocol version
by Paul Bakker
· 12 years ago
5701cdc
- Added ServerName extension parsing (SNI) at server side
by Paul Bakker
· 13 years ago
eb2c658
- Generalized external private key implementation handling (like PKCS#11) in SSL/TLS
by Paul Bakker
· 13 years ago
0a59707
- Added simple SSL session cache implementation
by Paul Bakker
· 13 years ago
29b6476
- Added predefined DHM groups from RFC 5114
by Paul Bakker
· 13 years ago
d0f6fa7
- Sending of handshake_failures during renegotiation added
by Paul Bakker
· 13 years ago
48916f9
- Added Secure Renegotiation (RFC 5746)
by Paul Bakker
· 13 years ago
ec636f3
- Removed handling for SSLv2 Client Hello (as per RFC 5246 recommendation)
by Paul Bakker
· 13 years ago
2770fbd
- Added DEFLATE compression support as per RFC3749 (requires zlib)
by Paul Bakker
· 13 years ago
380da53
- Abstracted checksum updating during handshake
by Paul Bakker
· 13 years ago
ca4ab49
- Added GCM ciphersuites to TLS implementation
by Paul Bakker
· 13 years ago
10cd225
- Added support for the SHA256 ciphersuites of AES and Camellia
by Paul Bakker
· 13 years ago
bf63b36
- Updated comments
by Paul Bakker
· 13 years ago
1ef83d6
- Initial bare version of TLS 1.2
by Paul Bakker
· 13 years ago
fab5c82
- Added support for NULL cipher (POLARSSL_CIPHER_NULL_CIPHER) and weak ciphersuites (POLARSSL_ENABLE_WEAK_CIPHERSUITES). They are disabled by default!
by Paul Bakker
· 13 years ago
1c70d40
- Added better handling of missing session struct
by Paul Bakker
· 13 years ago
a3d195c
- Changed the used random function pointer to more flexible format. Renamed havege_rand() to havege_random() to prevent mistakes. Lots of changes as a consequence in library code and programs
by Paul Bakker
· 13 years ago
5690efc
- Fixed a whole bunch of dependencies on defines between files, examples and tests
by Paul Bakker
· 14 years ago
9d78140
- A error_strerror function() has been added to translate between error codes and their description.
by Paul Bakker
· 14 years ago
23986e5
- Major type rewrite of int to size_t for most variables and arguments used for buffer lengths and loops
by Paul Bakker
· 14 years ago
99a03af
- Fixed possible uninitialized values
by Paul Bakker
· 14 years ago
9dcc322
- Added support for PKCS#1 v2.1 encoding and thus support for the RSAES-OAEP and RSASSA-PSS operations (enabled by POLARSSL_PKCS1_V21)
by Paul Bakker
· 14 years ago
e3166ce
- Renamed ciphers member of ssl_context and cipher member of ssl_session to ciphersuites and ciphersuite respectively. This clarifies the difference with the generic cipher layer and is better naming altogether
by Paul Bakker
· 14 years ago
43b7e35
- Support for PKCS#11 through the use of the pkcs11-helper library
by Paul Bakker
· 14 years ago
61c324b
- Enabled TLSv1.1 support in server as well
by Paul Bakker
· 15 years ago
b96f154
- Fixed copyright message
by Paul Bakker
· 15 years ago
84f12b7
- Updated Copyright to correct entity
by Paul Bakker
· 15 years ago
77a4358
- Added support for the SSL_EDH_RSA_AES_128_SHA and SSL_EDH_RSA_CAMELLIA_128_SHA ciphersuites
by Paul Bakker
· 15 years ago
2908713
- Corrected behaviour
by Paul Bakker
· 15 years ago
fc8c436
- Updated copyright line to 2010
by Paul Bakker
· 15 years ago
1f3c39c
- Removed copyright line for Christophe Devine for clarity
by Paul Bakker
· 15 years ago
ff60ee6
- Added const-correctness to main codebase
by Paul Bakker
· 15 years ago
1f76115
- Fixed bug resulting in failure to send the last certificate in the chain in ssl_write_certificate() and ssl_write_certificate_request()
by Paul Bakker
· 15 years ago
77b385e
- Updated copyright messages on all relevant files
by Paul Bakker
· 16 years ago
fc22c44
- Renamed RSA_RAW to SIG_RSA_RAW for consistency in the code.
by Paul Bakker
· 16 years ago
785a9ee
- Added email address to header license information
by Paul Bakker
· 16 years ago
060c568
- Fixed possible heap overflow in pkcs1_decrypt on data larger than output
by Paul Bakker
· 16 years ago
b5ef0ba
- Added SSL_RSA_CAMELLIA_128_SHA, SSL_RSA_CAMELLIA_256_SHA, SSL_EDH_RSA_CAMELLIA_256_SHA ciphersuites to SSL
by Paul Bakker
· 16 years ago
e0ccd0a
- Updated Copyright notices
by Paul Bakker
· 16 years ago
40e4694
- First replacement of xyssl by polarssl where needed
by Paul Bakker
· 16 years ago
5121ce5
- Renamed include directory to polarssl
by Paul Bakker
· 16 years ago