]> git.ipfire.org Git - thirdparty/strongswan.git/history - src/libtls
Version bump to 6.0.2dr3
[thirdparty/strongswan.git] / src / libtls /
2025-03-19  Tobias Brunnercallback-job: Replace return_false() in constructors...
2023-11-06  Tobias Brunnertls-server: Also change DH group when selecting a diffe...
2023-05-16  Tobias BrunnerMerge branch 'debug-level-build'
2023-05-08  Tobias Brunnerlibtls: Fix build with DEBUG_LEVEL < 3
2023-03-21  Tobias Brunnertls: Only return EAP MSK if TLS handshake is complete
2023-02-22  Tobias Brunnereap-tls: Add support for TLS 1.3
2023-02-22  Tobias Brunnertls-crypto: Fix MSK calculation for TLS 1.3
2023-02-17  Tobias Brunnerlibtls: Fix double-free for untrusted peer certificates
2022-09-16  Tobias BrunnerMerge branch 'asan'
2022-09-15  Tobias Brunnerunit-tests: Don't use test data on stack for TLS socket...
2022-09-06  Tobias Brunnerunit-tests: Let the TLS server thread close its own...
2022-09-06  Tobias Brunnerunit-tests: Make TLS echo server cancelable
2022-09-06  Tobias Brunnerlibtls: Fix encoding of TLS 1.3 certificate extension...
2022-08-26  Andreas SteffenMerge branch 'pki-scep'
2022-08-26  Andreas Steffenlibtls: the signature unit tests use scheme-specific...
2022-08-26  Andreas Steffenlibtls: call create_public_enumerator() with key_type
2022-08-26  Andreas Steffenlibtls: enforce correct signature scheme for ECDSA...
2022-08-25  Andreas Steffenlibtls: Fixed encoding of TLS 1.3 certificate extension
2022-08-25  Andreas Steffenlibtls: unit tests run with default plugins
2022-08-25  Andreas Steffenlibtls: Send empty cert payload upon cert request
2022-06-29  Tobias BrunnerMerge branch 'multi-ke-backport'
2022-06-29  Andreas SteffenRename MODP_NONE to KE_NONE
2022-06-29  Tobias BrunnerRename diffie_hellman_t to key_exchange_t and change...
2022-06-28  Tobias BrunnerUpdate copyright headers after acquisition by secunet
2022-04-22  Tobias Brunnertls-crypto: Initialize cipher suites arrays to avoid...
2022-04-14  Tobias BrunnerMerge branch 'ikev2-kdf-modularization'
2022-04-14  Tobias Brunnertls-hkdf: Use plugin-provided prf+
2022-03-01  Tobias Brunnertls-server: Use correct error alerts if client doesn...
2022-02-15  Tobias Brunnertls-peer: Simplify identity check for server certificate
2022-02-15  Tobias Brunnerlibtls: Enforce client/server identity when looking...
2021-12-08  Tobias BrunnerMerge branch 'libtls-tests'
2021-12-08  Tobias Brunnerlibtls: Shutdown server socket in test teardown function
2021-12-08  Tobias Brunnertls-socket: Handle sending fatal errors better
2021-11-11  Andreas SteffenMerge branch 'rsa-oaep-encryption'
2021-11-09  Andreas Steffencredentials: Added void *params to public_key encrypt...
2021-06-25  Tobias BrunnerFixed some typos, courtesy of codespell
2021-02-18  Andreas SteffenMerge branch 'tls-fixes' 5.9.2rc1
2021-02-18  Tobias Brunnertls-server: Add flag that makes client authentication...
2021-02-18  Tobias Brunnerlibtls: Add control flags and replace GENERIC_NULLOK...
2021-02-18  Tobias Brunnertls-server: Use subject DN as peer identity if it was...
2021-02-18  Tobias Brunnertls-eap: Only servers conclude EAP method after process...
2021-02-16  Tobias Brunnertls-crypto: Fix potential memory leak
2021-02-12  Tobias BrunnerMerge branch 'tls13'
2021-02-12  Tobias Brunnertls-crypto: Simplify and extend cipher config filter
2021-02-12  Tobias Brunnertls-server: Support x25519/448 for TLS 1.2
2021-02-12  Tobias Brunnertls-crypto: Fallback to any supported ECDH group
2021-02-12  Tobias Brunnertls-crypto: Don't filter suites with specific ECDH...
2021-02-12  Pascal Knechttls-crypto: Add signature scheme config file filter
2021-02-12  Pascal Knechttls-crypto: Rename DH group/key exchange method config...
2021-02-12  Tobias Brunnerlibtls: Increase default min version to 1.2
2021-02-12  Tobias Brunnertls-peer: Verify server selects the same cipher suite...
2021-02-12  Tobias Brunnertls-server: Select cipher suite also when handling...
2021-02-12  Tobias Brunnertls-server: Remove unused variable
2021-02-12  Pascal Knechtlibtls: Add downgrade protection for TLS 1.3 and TLS 1.2
2021-02-12  Shmulik Ladkanitls-server: Optionally omit CAs in CertificateRequest...
2021-02-12  Tobias Brunnertls-eap: Conclude EAP method also after processing...
2021-02-12  Tobias Brunnerlibtls: Only run socket tests with EdDSA keys if they...
2021-02-12  Tobias Brunnertls-peer: Don't log anything if we are not sending...
2021-02-12  Tobias Brunnertls-crypto: Only log modified TLS versions if successfu...
2021-02-12  Tobias Brunnerlibtls: Reduce default max version to 1.2
2021-02-12  Tobias Brunnerlibtls: Make min/max TLS version configurable
2021-02-12  Pascal Knechttest-hkdf: Add two test cases and restructure all tests
2021-02-12  Pascal Knechttls-hkdf: Implement binder PSK generation
2021-02-12  Pascal Knechttls-hkdf: Implement resumption key generation
2021-02-12  Pascal Knechttls-peer: Mutual authentication support for TLS 1.3
2021-02-12  Pascal Knechttls-peer: Derive application traffic keys after server...
2021-02-12  Pascal Knechttls-peer: Use private key enumeration also in TLS versi...
2021-02-12  Pascal Knechttls-crypto: Share private key search between client...
2021-02-12  Pascal Knechttls-server: Mutual authentication support for TLS 1.3
2021-02-12  Pascal Knechttls-server: Terminate connection if peer certificate...
2021-02-12  Pascal Knechttls-server: Make CertificateRequest conditional in...
2021-02-12  Pascal Knechttls-server: Share trusted public key search between...
2021-02-12  Pascal Knechttls-crypto: Move AEAD ownership to the protection layer
2021-02-12  Pascal Knechttls-hkdf: Always use correct base key to derive finishe...
2021-02-12  Pascal Knechtlibtls: Add unit tests for Ed25519 and Ed448 keys
2021-02-12  Pascal Knechttls-crypto: Support EdDSA keys with ECDSA cipher suites
2021-02-12  Pascal Knechttls-server: Consider supported signature algorithms...
2021-02-12  Pascal Knechttls-crypto: Distinguish between signing and verifying...
2021-02-12  Pascal Knechttls-server: Check if peer sent hash and signature algor...
2021-02-12  Pascal Knechttls-crypto: Add missing signature scheme constants
2021-02-12  Pascal Knechttls-server: Fix invalid signature algorithm and support...
2021-02-12  Pascal Knechttls-server: Support multiple client key shares
2021-02-12  Pascal Knechtlibtls: Add TLS version negotiation test cases
2021-02-12  Pascal Knechttls-server: Support HelloRetryRequest (HRR)
2021-02-12  Pascal Knechttls-crypto: Add support to configure DH groups to use
2021-02-12  Pascal Knechttls-crypto: Generalizing DH group to TLS group mapping
2021-02-12  Pascal Knechttls-server: Support KeyUpdate requests and answers
2021-02-12  Pascal Knechttls-server: Refactor writing of key share extensions
2021-02-12  Pascal Knechttls-server: TLS 1.3 support for TLS server implementation
2021-02-12  Pascal Knechttls-crypto: Rename parameter to be more consistent
2021-02-12  Pascal Knechttls-crypto: Fix invalid signature algorithm list building
2021-02-12  Pascal Knechtlibtls: Add missing cipher suite and TLS extension...
2021-02-12  Pascal Knechttls-crypto: Rework cipher suite preference order
2021-02-12  Tobias Brunnertls-server: Determine supported/configured suites and...
2021-02-12  Pascal Knechttls-crypto: Check if TLS versions and cipher suites...
2021-02-12  Pascal Knechttls-peer: Don't initiate TLS connection if no cipher...
2021-02-12  Tobias Brunnertls-peer: Return INVALID_STATE after changing TLS 1...
2021-02-12  Tobias Brunnertls-crypto: Generate MSK for TLS 1.3
2021-02-12  Tobias Brunnertls-hkdf: Add method that allows exporting key material
2021-02-12  Tobias Brunnertls-hkdf: Handle label expansion inside expand_label()
next