TrustedFirmware Git Browser
Code Review
Sign In
review.trustedfirmware.org
/
mirror
/
mbed-tls
/
4087c47043cb7b8b51e69f1de47ab6a2bccead3d
/
library
/
ssl_srv.c
7c3c389
Secure renegotiation extension should only be sent in case client supports secure renegotiation
by Paul Bakker
· 12 years ago
a627298
Ability to specify allowed ciphersuites based on the protocol version.
by Paul Bakker
· 12 years ago
78a8c71
Re-added support for parsing and handling SSLv2 Client Hello messages
by Paul Bakker
· 12 years ago
1961b70
Added ssl_handshake_step() to allow single stepping the handshake process
by Paul Bakker
· 12 years ago
21dca69
Handle future version properly in ssl_write_certificate_request()
by Paul Bakker
· 13 years ago
bc3d984
Fixed multiple DN size
by Paul Bakker
· 13 years ago
78ce507
Fixed typo
by Paul Bakker
· 13 years ago
926af75
Fixed client certificate handling with TLS 1.2
by Paul Bakker
· 13 years ago
645ce3a
- Moved ciphersuite naming scheme to IANA reserved names
by Paul Bakker
· 13 years ago
35a7fe5
- Prevent compiler warning
by Paul Bakker
· 13 years ago
8611e73
- Fixed infinite loop
by Paul Bakker
· 13 years ago
81420ab
- properly print minimum version
by Paul Bakker
· 13 years ago
23f3680
- Added proper support for TLS 1.2 signature_algorithm extension on server
by Paul Bakker
· 13 years ago
1d29fb5
- Added option to add minimum accepted SSL/TLS protocol version
by Paul Bakker
· 13 years ago
5701cdc
- Added ServerName extension parsing (SNI) at server side
by Paul Bakker
· 13 years ago
eb2c658
- Generalized external private key implementation handling (like PKCS#11) in SSL/TLS
by Paul Bakker
· 13 years ago
0a59707
- Added simple SSL session cache implementation
by Paul Bakker
· 13 years ago
29b6476
- Added predefined DHM groups from RFC 5114
by Paul Bakker
· 13 years ago
d0f6fa7
- Sending of handshake_failures during renegotiation added
by Paul Bakker
· 13 years ago
48916f9
- Added Secure Renegotiation (RFC 5746)
by Paul Bakker
· 13 years ago
ec636f3
- Removed handling for SSLv2 Client Hello (as per RFC 5246 recommendation)
by Paul Bakker
· 13 years ago
2770fbd
- Added DEFLATE compression support as per RFC3749 (requires zlib)
by Paul Bakker
· 13 years ago
380da53
- Abstracted checksum updating during handshake
by Paul Bakker
· 13 years ago
ca4ab49
- Added GCM ciphersuites to TLS implementation
by Paul Bakker
· 13 years ago
10cd225
- Added support for the SHA256 ciphersuites of AES and Camellia
by Paul Bakker
· 13 years ago
bf63b36
- Updated comments
by Paul Bakker
· 13 years ago
1ef83d6
- Initial bare version of TLS 1.2
by Paul Bakker
· 13 years ago
fab5c82
- Added support for NULL cipher (POLARSSL_CIPHER_NULL_CIPHER) and weak ciphersuites (POLARSSL_ENABLE_WEAK_CIPHERSUITES). They are disabled by default!
by Paul Bakker
· 13 years ago
1c70d40
- Added better handling of missing session struct
by Paul Bakker
· 14 years ago
a3d195c
- Changed the used random function pointer to more flexible format. Renamed havege_rand() to havege_random() to prevent mistakes. Lots of changes as a consequence in library code and programs
by Paul Bakker
· 14 years ago
5690efc
- Fixed a whole bunch of dependencies on defines between files, examples and tests
by Paul Bakker
· 14 years ago
9d78140
- A error_strerror function() has been added to translate between error codes and their description.
by Paul Bakker
· 14 years ago
23986e5
- Major type rewrite of int to size_t for most variables and arguments used for buffer lengths and loops
by Paul Bakker
· 14 years ago
99a03af
- Fixed possible uninitialized values
by Paul Bakker
· 14 years ago
9dcc322
- Added support for PKCS#1 v2.1 encoding and thus support for the RSAES-OAEP and RSASSA-PSS operations (enabled by POLARSSL_PKCS1_V21)
by Paul Bakker
· 14 years ago
e3166ce
- Renamed ciphers member of ssl_context and cipher member of ssl_session to ciphersuites and ciphersuite respectively. This clarifies the difference with the generic cipher layer and is better naming altogether
by Paul Bakker
· 14 years ago
43b7e35
- Support for PKCS#11 through the use of the pkcs11-helper library
by Paul Bakker
· 15 years ago
61c324b
- Enabled TLSv1.1 support in server as well
by Paul Bakker
· 15 years ago
b96f154
- Fixed copyright message
by Paul Bakker
· 15 years ago
84f12b7
- Updated Copyright to correct entity
by Paul Bakker
· 15 years ago
77a4358
- Added support for the SSL_EDH_RSA_AES_128_SHA and SSL_EDH_RSA_CAMELLIA_128_SHA ciphersuites
by Paul Bakker
· 15 years ago
2908713
- Corrected behaviour
by Paul Bakker
· 15 years ago
fc8c436
- Updated copyright line to 2010
by Paul Bakker
· 15 years ago
1f3c39c
- Removed copyright line for Christophe Devine for clarity
by Paul Bakker
· 15 years ago
ff60ee6
- Added const-correctness to main codebase
by Paul Bakker
· 15 years ago
1f76115
- Fixed bug resulting in failure to send the last certificate in the chain in ssl_write_certificate() and ssl_write_certificate_request()
by Paul Bakker
· 15 years ago
77b385e
- Updated copyright messages on all relevant files
by Paul Bakker
· 16 years ago
fc22c44
- Renamed RSA_RAW to SIG_RSA_RAW for consistency in the code.
by Paul Bakker
· 16 years ago
785a9ee
- Added email address to header license information
by Paul Bakker
· 16 years ago
060c568
- Fixed possible heap overflow in pkcs1_decrypt on data larger than output
by Paul Bakker
· 17 years ago
b5ef0ba
- Added SSL_RSA_CAMELLIA_128_SHA, SSL_RSA_CAMELLIA_256_SHA, SSL_EDH_RSA_CAMELLIA_256_SHA ciphersuites to SSL
by Paul Bakker
· 17 years ago
e0ccd0a
- Updated Copyright notices
by Paul Bakker
· 17 years ago
40e4694
- First replacement of xyssl by polarssl where needed
by Paul Bakker
· 17 years ago
5121ce5
- Renamed include directory to polarssl
by Paul Bakker
· 17 years ago