aboutsummaryrefslogtreecommitdiff
path: root/library/ssl_srv.c
AgeCommit message (Expand)AuthorFilesLines
2015-10-02Fix potential overflow in CertificateRequestManuel Pégourié-Gonnard1-2/+7
2015-04-10Fix version-major intolerance againManuel Pégourié-Gonnard1-3/+8
2015-04-10Revert "Fix verion-major intolerance"Manuel Pégourié-Gonnard1-24/+11
2015-02-13Update copyright line to 2015Paul Bakker1-1/+1
2015-01-28Fix urlManuel Pégourié-Gonnard1-1/+1
2015-01-26Update copyright noticeManuel Pégourié-Gonnard1-5/+2
2014-07-08Stricter check on SSL ClientHello internal sizes compared to actual packet sizePaul Bakker1-5/+7
2014-07-07Fix verion-major intoleranceManuel Pégourié-Gonnard1-11/+24
2014-07-07SSL now gracefully handles missing RNGPaul Bakker1-0/+6
2014-07-07Safer buffer comparisons in the SSL modulesManuel Pégourié-Gonnard1-1/+3
2013-09-23Do not allow SHA256/SHA384 ciphersuites in < TLS 1.2Paul Bakker1-1/+2
2013-09-23RSA blinding on CRT operations to counter timing attacksPaul Bakker1-2/+4
2013-06-21ssl_write_certificate_request() can handle empty ca_chainpolarssl-1.2.8Paul Bakker1-1/+1
2013-06-06Secure renegotiation extension should only be sent in case client supports se...Paul Bakker1-19/+22
2013-04-12Ability to specify allowed ciphersuites based on the protocol version.Paul Bakker1-6/+6
2013-03-06Re-added support for parsing and handling SSLv2 Client Hello messagesPaul Bakker1-0/+215
2013-01-25Added ssl_handshake_step() to allow single stepping the handshakePaul Bakker1-90/+82
2013-01-03Handle future version properly in ssl_write_certificate_request()Paul Bakker1-1/+1
2012-11-26Fixed multiple DN sizePaul Bakker1-2/+2
2012-11-23Fixed typoPaul Bakker1-1/+1
2012-11-23Fixed client certificate handling with TLS 1.2Paul Bakker1-16/+82
2012-10-31 - Moved ciphersuite naming scheme to IANA reserved namesPaul Bakker1-24/+24
2012-10-31 - Prevent compiler warningPaul Bakker1-5/+7
2012-10-30 - Fixed infinite loopPaul Bakker1-0/+4
2012-10-23 - properly print minimum versionPaul Bakker1-2/+2
2012-09-28 - Added proper support for TLS 1.2 signature_algorithm extension on serverPaul Bakker1-19/+166
2012-09-28 - Added option to add minimum accepted SSL/TLS protocol versionPaul Bakker1-0/+12
2012-09-27 - Added ServerName extension parsing (SNI) at server sidePaul Bakker1-0/+53
2012-09-27 - Generalized external private key implementation handling (like PKCS#11) in...Paul Bakker1-55/+15
2012-09-25 - Added simple SSL session cache implementationPaul Bakker1-15/+7
2012-09-25 - Added predefined DHM groups from RFC 5114Paul Bakker1-1/+3
2012-09-17 - Sending of handshake_failures during renegotiation addedPaul Bakker1-16/+41
2012-09-16 - Added Secure Renegotiation (RFC 5746)Paul Bakker1-83/+268
2012-09-09 - Removed handling for SSLv2 Client Hello (as per RFC 5246 recommendation)Paul Bakker1-262/+134
2012-07-03 - Added DEFLATE compression support as per RFC3749 (requires zlib)Paul Bakker1-2/+15
2012-04-18 - Abstracted checksum updating during handshakePaul Bakker1-10/+6
2012-04-18 - Added GCM ciphersuites to TLS implementationPaul Bakker1-3/+9
2012-04-12 - Added support for the SHA256 ciphersuites of AES and CamelliaPaul Bakker1-2/+10
2012-04-12 - Updated commentsPaul Bakker1-2/+4
2012-04-11 - Initial bare version of TLS 1.2Paul Bakker1-29/+67
2012-02-06 - Added support for NULL cipher (POLARSSL_CIPHER_NULL_CIPHER) and weak ciphe...Paul Bakker1-3/+5
2011-12-04 - Added better handling of missing session structPaul Bakker1-0/+6
2011-11-27 - Changed the used random function pointer to more flexible format. Renamed ...Paul Bakker1-8/+10
2011-05-26 - Fixed a whole bunch of dependencies on defines between files, examples and...Paul Bakker1-0/+2
2011-05-09 - A error_strerror function() has been added to translate between error code...Paul Bakker1-2/+2
2011-04-24 - Major type rewrite of int to size_t for most variables and arguments used ...Paul Bakker1-13/+18
2011-04-01 - Fixed possible uninitialized valuesPaul Bakker1-1/+1
2011-03-08 - Added support for PKCS#1 v2.1 encoding and thus support for the RSAES-OAEP...Paul Bakker1-1/+2
2011-01-27 - Renamed ciphers member of ssl_context and cipher member of ssl_session to ...Paul Bakker1-32/+32
2011-01-18 - Support for PKCS#11 through the use of the pkcs11-helper libraryPaul Bakker1-12/+73