]> git.ipfire.org Git - people/ms/strongswan.git/history - src/libtls/tls_server.c
traffic-selector: Avoid out-of-bound array access when calculating range
[people/ms/strongswan.git] / src / libtls / tls_server.c
2022-03-01  Tobias Brunnertls-server: Use correct error alerts if client doesn...
2022-02-15  Tobias Brunnerlibtls: Enforce client/server identity when looking...
2021-11-11  Andreas SteffenMerge branch 'rsa-oaep-encryption'
2021-11-09  Andreas Steffencredentials: Added void *params to public_key encrypt...
2021-02-18  Andreas SteffenMerge branch 'tls-fixes'
2021-02-18  Tobias Brunnertls-server: Add flag that makes client authentication...
2021-02-18  Tobias Brunnertls-server: Use subject DN as peer identity if it was...
2021-02-12  Tobias BrunnerMerge branch 'tls13'
2021-02-12  Tobias Brunnertls-server: Support x25519/448 for TLS 1.2
2021-02-12  Tobias Brunnertls-server: Select cipher suite also when handling...
2021-02-12  Tobias Brunnertls-server: Remove unused variable
2021-02-12  Pascal Knechtlibtls: Add downgrade protection for TLS 1.3 and TLS 1.2
2021-02-12  Shmulik Ladkanitls-server: Optionally omit CAs in CertificateRequest...
2021-02-12  Pascal Knechttls-crypto: Share private key search between client...
2021-02-12  Pascal Knechttls-server: Mutual authentication support for TLS 1.3
2021-02-12  Pascal Knechttls-server: Terminate connection if peer certificate...
2021-02-12  Pascal Knechttls-server: Make CertificateRequest conditional in...
2021-02-12  Pascal Knechttls-server: Share trusted public key search between...
2021-02-12  Pascal Knechttls-server: Consider supported signature algorithms...
2021-02-12  Pascal Knechttls-server: Check if peer sent hash and signature algor...
2021-02-12  Pascal Knechttls-server: Fix invalid signature algorithm and support...
2021-02-12  Pascal Knechttls-server: Support multiple client key shares
2021-02-12  Pascal Knechttls-server: Support HelloRetryRequest (HRR)
2021-02-12  Pascal Knechttls-crypto: Generalizing DH group to TLS group mapping
2021-02-12  Pascal Knechttls-server: Support KeyUpdate requests and answers
2021-02-12  Pascal Knechttls-server: Refactor writing of key share extensions
2021-02-12  Pascal Knechttls-server: TLS 1.3 support for TLS server implementation
2021-02-12  Tobias Brunnertls-server: Determine supported/configured suites and...
2021-02-12  Tobias Brunnertls-crypto: Add support for RSA-PSS signatures
2021-02-12  Tobias Brunnertls: Allow setting both minimum and maximum TLS versions
2021-02-12  Tobias Brunnertls-crypto: Rename methods to calculate finished message
2021-02-12  bytinbitlibtls: Implement TLS 1.3 handshake on client-side
2018-06-28  Tobias BrunnerMerge branch 'ike-proposal-switch'
2018-06-28  Tobias BrunnerReplace 'inacceptable' with the more common 'unacceptable'
2016-03-24  Andreas SteffenUse standard unsigned integer types
2016-03-10  Tobias BrunnerMerge branch 'mbb-reauth-online-revocation'
2016-03-10  Tobias Brunnercredential-manager: Make online revocation checks optio...
2015-04-14  Martin WilliMerge branch 'const-memeq'
2015-04-14  Martin Williutils: Use chunk_equals_const() for all cryptographic...
2015-03-23  Martin WilliMerge branch 'dh-checks'
2015-03-23  Martin Willidiffie-hellman: Add a bool return value to set_other_pu...
2015-03-23  Martin Willidiffie-hellman: Add a bool return value to get_my_publi...
2015-03-23  Martin Willidiffie-hellman: Use bool instead of status_t as get_sha...
2015-03-03  Martin WilliMerge branch 'eap-constraints'
2015-03-03  Martin Willilibtls: Add getters for TLS handshake authentication...
2015-03-03  Martin Willilibtls: Merge trustchain auth verification details...
2013-03-18  Martin WilliMerge branch 'stroke-counters'
2013-03-18  Martin WilliMerge branch 'stroke-timeout'
2013-03-07  Martin WilliMerge branch 'pt-tls'
2013-03-06  Martin WilliIf TLS peer authentication not required, the client...
2013-02-28  Martin WilliRequest a TLS client certificate even if no peer identi...
2013-02-28  Martin WilliDelegate tls_t.get_{peer,server}_id to handshake layer
2012-10-24  Tobias BrunnerMoved debug.[ch] to utils folder
2012-07-16  Martin WilliCheck rng return value when generating TLS session...
2012-07-16  Tobias BrunnerCheck rng return value when generating secrets and...
2012-07-16  Martin WilliAdd a return value to tls_crypto_t.derive_secrets()
2012-03-20  Martin WilliMerge branch 'ikev1-clean' into ikev1-master
2011-12-31  Martin WilliImplemented TLS session resumption both as client and...
2011-12-31  Martin WilliSeparated cipherspec checking and switching, allowing...
2011-12-24  Martin WilliBe less verbose about TLS extensions
2011-05-31  Andreas Steffenrenamed tls_reader|writer to bio_* and moved to libstro...
2010-09-08  Martin WilliRead the compression type byte for EC groups, only
2010-09-06  Martin WilliRenamed ecp_format to ansi_format, as point formats...
2010-09-06  Martin WilliPrepend point format to ECDH public key
2010-09-06  Martin WilliLog the selected (EC)DH group
2010-09-06  Martin WilliParse unsupported TLS Hello extensions properly
2010-09-03  Martin WilliUse a dynamic curve enumerator to list/convert TLS...
2010-09-03  Martin WilliUse ECDH group check where appropriate
2010-09-03  Martin WilliSelect private key based on received cipher suites
2010-09-03  Martin WilliSupport for EC curve Hello extension, EC curve fallback
2010-09-03  Martin WilliAdded server support for ECDHE key exchange
2010-09-03  Andreas Steffenfixed typo
2010-09-02  Martin WilliAdded TLS server side support for DHE suites
2010-09-02  Martin WilliImplemented "signature algorithm" hello extension
2010-09-02  Martin WilliAdded generic TLS data sign/verify, hash/sig algorithm...
2010-09-02  Martin WilliContinue with a randomized premaster if decryption...
2010-09-02  Martin WilliSupport different hash/sig algorithms in handshake...
2010-08-25  Martin WilliSend TLS alerts for errors in TLS handshake building
2010-08-24  Martin WilliPass NULL peer identity to omit TLS peer authentication...
2010-08-24  Andreas Steffenremoved some redundant debug output
2010-08-24  Martin WilliAdded generic TLS purposes
2010-08-23  Martin WilliAdded a TLS purpose for EAP-TTLS with client authentication
2010-08-23  Martin WilliImplemented TLS Alert handling
2010-08-23  Martin WilliVerify negotiated TLS version
2010-08-23  Martin WilliIntroducing a dedicated debug message group for libtls
2010-08-23  Martin WilliStreamlined TLS debugging output
2010-08-20  Martin WilliIntroducing simple purposes for the TLS stack, switches...
2010-08-18  Martin WilliUse a seperate section for each nested struct member...
2010-08-16  Martin WilliOnly include certificates with CA flag in TLS cert...
2010-08-15  Andreas Steffenoptional certificate-based peer authentication on TLS...
2010-08-12  Andreas Steffenadded generic TLS application data handler and specific...
2010-08-10  Martin WilliAdded support for different encryption schemes to priva...
2010-08-05  Andreas Steffenadded some more TLS debug output
2010-08-03  Martin WilliMoved TLS stack to its own library