git.strongswan.org Git - strongswan.git/history

[strongswan.git] / src / libtls / tls_peer.c

2021-02-12	Pascal Knecht	tls-peer: Use private key enumeration also in TLS versi...	blob \| commitdiff
2021-02-12	Pascal Knecht	tls-crypto: Share private key search between client...	blob \| commitdiff \| diff to current
2021-02-12	Pascal Knecht	tls-server: Share trusted public key search between...	blob \| commitdiff \| diff to current
2021-02-12	Pascal Knecht	tls-crypto: Generalizing DH group to TLS group mapping	blob \| commitdiff \| diff to current
2021-02-12	Pascal Knecht	tls-server: Refactor writing of key share extensions	blob \| commitdiff \| diff to current
2021-02-12	Pascal Knecht	tls-crypto: Fix invalid signature algorithm list building	blob \| commitdiff \| diff to current
2021-02-12	Pascal Knecht	tls-crypto: Check if TLS versions and cipher suites...	blob \| commitdiff \| diff to current
2021-02-12	Pascal Knecht	tls-peer: Don't initiate TLS connection if no cipher...	blob \| commitdiff \| diff to current
2021-02-12	Tobias Brunner	tls-peer: Return INVALID_STATE after changing TLS 1...	blob \| commitdiff \| diff to current
2021-02-12	Tobias Brunner	tls-crypto: Add support for RSA-PSS signatures	blob \| commitdiff \| diff to current
2021-02-12	Tobias Brunner	tls-peer: Support answering KeyUpdate requests	blob \| commitdiff \| diff to current
2021-02-12	Tobias Brunner	tls-peer: Add support to handle KeyUpdate message	blob \| commitdiff \| diff to current
2021-02-12	Tobias Brunner	tls-peer: Correctly handle classic ECDH key-share format	blob \| commitdiff \| diff to current
2021-02-12	Tobias Brunner	tls: Allow setting both minimum and maximum TLS versions	blob \| commitdiff \| diff to current
2021-02-12	Tobias Brunner	tls-peer: Handle HelloRetryRequest	blob \| commitdiff \| diff to current
2021-02-12	Tobias Brunner	tls-peer: Refactor writing of extensions and use less...	blob \| commitdiff \| diff to current
2021-02-12	Tobias Brunner	tls-peer: Refactor sending/processing finished message	blob \| commitdiff \| diff to current
2021-02-12	Tobias Brunner	tls-peer: Simply ignore certificate request context	blob \| commitdiff \| diff to current
2021-02-12	Tobias Brunner	tls-peer: Use existing code to verify certificate and...	blob \| commitdiff \| diff to current
2021-02-12	Tobias Brunner	tls-peer: Refactor parsing of TLS extensions	blob \| commitdiff \| diff to current
2021-02-12	Tobias Brunner	tls-peer: Fix parsing of encrypted extensions	blob \| commitdiff \| diff to current
2021-02-12	Tobias Brunner	tls-peer: Fix parsing of intermediate CA certificates	blob \| commitdiff \| diff to current
2021-02-12	Tobias Brunner	tls-crypto: Rename methods to calculate finished message	blob \| commitdiff \| diff to current
2021-02-12	Tobias Brunner	tls-crypto: Simplify handshake/application key derivati...	blob \| commitdiff \| diff to current
2021-02-12	Tobias Brunner	tls-peer: Support x25519/448 for TLS 1.2	blob \| commitdiff \| diff to current
2021-02-12	Tobias Brunner	libtls: Some code style fixes	blob \| commitdiff \| diff to current
2021-02-12	bytinbit	libtls: Implement TLS 1.3 handshake on client-side	blob \| commitdiff \| diff to current
2018-06-28	Tobias Brunner	Merge branch 'ike-proposal-switch'	blob \| commitdiff \| diff to current
2018-06-28	Tobias Brunner	Replace 'inacceptable' with the more common 'unacceptable'	blob \| commitdiff \| diff to current
2016-03-24	Andreas Steffen	Use standard unsigned integer types	blob \| commitdiff \| diff to current
2016-03-10	Tobias Brunner	Merge branch 'mbb-reauth-online-revocation'	blob \| commitdiff \| diff to current
2016-03-10	Tobias Brunner	credential-manager: Make online revocation checks optio...	blob \| commitdiff \| diff to current
2015-05-26	Martin Willi	libtls: As client, reject DH exchanges using primes...	blob \| commitdiff \| diff to current
2015-04-14	Martin Willi	Merge branch 'const-memeq'	blob \| commitdiff \| diff to current
2015-04-14	Martin Willi	utils: Use chunk_equals_const() for all cryptographic...	blob \| commitdiff \| diff to current
2015-03-23	Martin Willi	Merge branch 'dh-checks'	blob \| commitdiff \| diff to current
2015-03-23	Martin Willi	diffie-hellman: Add a bool return value to set_other_pu...	blob \| commitdiff \| diff to current
2015-03-23	Martin Willi	diffie-hellman: Add a bool return value to get_my_publi...	blob \| commitdiff \| diff to current
2015-03-23	Martin Willi	diffie-hellman: Use bool instead of status_t as get_sha...	blob \| commitdiff \| diff to current
2015-03-09	Tobias Brunner	tls-peer: Make sure to use the right trusted public...	blob \| commitdiff \| diff to current
2015-03-03	Martin Willi	Merge branch 'eap-constraints'	blob \| commitdiff \| diff to current
2015-03-03	Martin Willi	libtls: Add getters for TLS handshake authentication...	blob \| commitdiff \| diff to current
2015-03-03	Martin Willi	libtls: Merge trustchain auth verification details...	blob \| commitdiff \| diff to current
2014-03-31	Martin Willi	Merge branch 'tls-aead'	blob \| commitdiff \| diff to current
2014-03-31	Martin Willi	tls: Include TLS version announced in Client Hello...	blob \| commitdiff \| diff to current
2013-03-18	Martin Willi	Merge branch 'stroke-counters'	blob \| commitdiff \| diff to current
2013-03-18	Martin Willi	Merge branch 'stroke-timeout'	blob \| commitdiff \| diff to current
2013-03-07	Martin Willi	Merge branch 'pt-tls'	blob \| commitdiff \| diff to current
2013-02-28	Martin Willi	Delegate tls_t.get_{peer,server}_id to handshake layer	blob \| commitdiff \| diff to current
2012-11-28	Tobias Brunner	Fixed encoding of TLS extensions (elliptic_curves and...	blob \| commitdiff \| diff to current
2012-10-24	Tobias Brunner	Moved debug.[ch] to utils folder	blob \| commitdiff \| diff to current
2012-07-16	Tobias Brunner	Check rng return value when generating secrets and...	blob \| commitdiff \| diff to current
2012-07-16	Martin Willi	Add a return value to tls_crypto_t.derive_secrets()	blob \| commitdiff \| diff to current
2012-03-20	Martin Willi	Merge branch 'ikev1-clean' into ikev1-master	blob \| commitdiff \| diff to current
2011-12-31	Martin Willi	Implemented TLS session resumption both as client and...	blob \| commitdiff \| diff to current
2011-12-31	Martin Willi	Separated cipherspec checking and switching, allowing...	blob \| commitdiff \| diff to current
2011-05-31	Andreas Steffen	renamed tls_reader\|writer to bio_* and moved to libstro...	blob \| commitdiff \| diff to current
2011-04-14	Martin Willi	Continue without client authentication if no matching...	blob \| commitdiff \| diff to current
2011-04-14	Martin Willi	Ignore TLS certificate requests as peer if peer authent...	blob \| commitdiff \| diff to current
2011-04-14	Martin Willi	Send TLS Server Name Indication as peer if server ident...	blob \| commitdiff \| diff to current
2010-09-06	Martin Willi	Include ec_point_format extension in ClientHello	blob \| commitdiff \| diff to current
2010-09-06	Martin Willi	Renamed ecp_format to ansi_format, as point formats...	blob \| commitdiff \| diff to current
2010-09-06	Martin Willi	Prepend point format to ECDH public key	blob \| commitdiff \| diff to current
2010-09-03	Martin Willi	Use a dynamic curve enumerator to list/convert TLS...	blob \| commitdiff \| diff to current
2010-09-03	Martin Willi	Use ECDH group check where appropriate	blob \| commitdiff \| diff to current
2010-09-03	Martin Willi	Select private key based on received cipher suites	blob \| commitdiff \| diff to current
2010-09-03	Martin Willi	Support for EC curve Hello extension, EC curve fallback	blob \| commitdiff \| diff to current
2010-09-03	Martin Willi	Added client support for ECDHE key exchange	blob \| commitdiff \| diff to current
2010-09-02	Martin Willi	Added TLS client side support for DHE suites	blob \| commitdiff \| diff to current
2010-09-02	Martin Willi	Implemented "signature algorithm" hello extension	blob \| commitdiff \| diff to current
2010-09-02	Martin Willi	Support different hash/sig algorithms in handshake...	blob \| commitdiff \| diff to current
2010-08-31	Martin Willi	Strictly check if the server certificate matches the...	blob \| commitdiff \| diff to current
2010-08-25	Martin Willi	Send TLS alerts for errors in TLS handshake building	blob \| commitdiff \| diff to current
2010-08-24	Martin Willi	Pass NULL peer identity to omit TLS peer authentication...	blob \| commitdiff \| diff to current
2010-08-24	Andreas Steffen	removed some redundant debug output	blob \| commitdiff \| diff to current
2010-08-23	Martin Willi	Implemented TLS Alert handling	blob \| commitdiff \| diff to current
2010-08-23	Martin Willi	Verify negotiated TLS version	blob \| commitdiff \| diff to current
2010-08-23	Martin Willi	Introducing a dedicated debug message group for libtls	blob \| commitdiff \| diff to current
2010-08-23	Martin Willi	Streamlined TLS debugging output	blob \| commitdiff \| diff to current
2010-08-18	Martin Willi	Use a seperate section for each nested struct member...	blob \| commitdiff \| diff to current
2010-08-12	Andreas Steffen	added generic TLS application data handler and specific...	blob \| commitdiff \| diff to current
2010-08-10	Martin Willi	Added support for different encryption schemes to priva...	blob \| commitdiff \| diff to current
2010-08-07	Andreas Steffen	support server authentication only for EAP-TTLS	blob \| commitdiff \| diff to current
2010-08-05	Martin Willi	Use certificate subject to get a public key of the...	blob \| commitdiff \| diff to current
2010-08-05	Andreas Steffen	added some more TLS debug output	blob \| commitdiff \| diff to current
2010-08-04	Andreas Steffen	log selected TLS version and cipher suite	blob \| commitdiff \| diff to current
2010-08-03	Martin Willi	Moved TLS stack to its own library	blob \| commitdiff \| diff to current

strongSwan - IPsec VPN

RSS Atom