| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Use monitor for the listen socket instead of a monitor for the process that opened
the listen socket for all connection processes, this is a better solution as
ownership of the socket can be transfered and listen socket could be closed
without the process that opened it terminating.
Provide backwards compatible solution for TCP upgrade TLS servers
We like to later introduce an option for them to to provide a listen
socket so that the server instance may be properly identified and handled.
For now we keep at most one session table that will be Erlang node global
for TCP upgrade TLS servers, such as the Erlang distribution servers.
|
|
|
|
| |
Turn the ssl option max_early_data_size into an application variable.
|
|
|
|
|
|
| |
The first cert must be the peer cert. For optimal performance the chain
should be ordered. However the option will be used for testing that also
unordered or chains with extraneous cert can be handled.
|
| |
|
| |
|
|\
| |
| |
| |
| |
| |
| |
| |
| | |
* maint-20:
Updated OTP version
Prepare release
ssl: Engine key trumps certfile option
inets: Prepare for release
inets: Improve error handling
|
| |\
| | |
| | |
| | |
| | | |
* ingela/ssl/engine-vs-certfile/ERLERL-211/OTP-15193:
ssl: Engine key trumps certfile option
|
| | | |
|
| |/ |
|
| | |
|
|/ |
|
| |
|
| |
|
|
|
|
|
|
| |
Use map instead of large tuple, which was not an option when the code
was written originally. More simplifications along these lines may
be done later to the state record.
|
|
|
|
|
|
| |
Move of PEM cache to own process was flawed and not all PEM files
where cached properly. We must properly handle both the ditributed
and the normal mode of the ssl application.
|
|
|
|
| |
The PEM cache handling has proven to be too disruptive of the manager process.
|
| |
|
| |
|
|
|