Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | clarified format of sequence number in gnutls_record_recv_seq. | Nikos Mavrogiannopoulos | 2011-09-13 | 1 | -3/+2 |
| | |||||
* | documentation changes. | Nikos Mavrogiannopoulos | 2011-08-24 | 1 | -3/+5 |
| | |||||
* | AIX check moved to system.c. | Nikos Mavrogiannopoulos | 2011-08-22 | 1 | -4/+0 |
| | |||||
* | Added hack for AIX systems that may not set errno property on EAGAIN. | Nikos Mavrogiannopoulos | 2011-08-20 | 1 | -2/+8 |
| | |||||
* | documentation updates | Nikos Mavrogiannopoulos | 2011-08-13 | 1 | -1/+1 |
| | |||||
* | Clarify license and copyright. | Simon Josefsson | 2011-08-03 | 1 | -1/+1 |
| | |||||
* | writev_emu: stop on the first incomplete write | Sjoerd Simons | 2011-07-25 | 1 | -0/+3 |
| | | | | | | | | Just like standard writev, we should only move on to the next block if all the previous ones have been successfully written out. Otherwise there is a potential for data loss and/or confusing push functions. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org> | ||||
* | documentation fixes | Nikos Mavrogiannopoulos | 2011-07-23 | 1 | -1/+1 |
| | |||||
* | Upgraded to LGPLv3. | Nikos Mavrogiannopoulos | 2011-06-23 | 1 | -5/+3 |
| | |||||
* | Simplified the handling of handshake messages to be hashed. | Nikos Mavrogiannopoulos | 2011-06-03 | 1 | -57/+0 |
| | | | | | | | Instead of doing a hash during the handshake process we now keep the data until handshake is over and hash them on demand. This uses more memory but eliminates issues with TLS 1.2 and makes the handling simpler. | ||||
* | do not try to write to a socket when no data. | Nikos Mavrogiannopoulos | 2011-05-25 | 1 | -0/+6 |
| | |||||
* | Added gnutls_global_set_audit_log_function() that allows associating TLS ↵ | Nikos Mavrogiannopoulos | 2011-05-07 | 1 | -2/+2 |
| | | | | session with several important issues. | ||||
* | Corrected SSLv2 header parsing. | Nikos Mavrogiannopoulos | 2011-04-15 | 1 | -1/+1 |
| | |||||
* | removed text about select(). | Nikos Mavrogiannopoulos | 2011-04-14 | 1 | -6/+0 |
| | |||||
* | Corrected parsing error in TLS, when many handshake messages | Nikos Mavrogiannopoulos | 2011-04-11 | 1 | -5/+12 |
| | | | | were packed in a single record message. | ||||
* | initialized ret in _gnutls_writev_emu(). | Nikos Mavrogiannopoulos | 2011-04-08 | 1 | -1/+1 |
| | |||||
* | minor modification in write_emu(). | Nikos Mavrogiannopoulos | 2011-04-07 | 1 | -3/+2 |
| | |||||
* | Added support for non-blocking DTLS. | Nikos Mavrogiannopoulos | 2011-04-03 | 1 | -9/+22 |
| | | | | | Added mini-eagain-dtls to test its operation. Improved mini-eagain. | ||||
* | Avoided waiting for peer's retransmission to ensure receipt of finished ↵ | Nikos Mavrogiannopoulos | 2011-03-20 | 1 | -5/+9 |
| | | | | messages, and used a 'timer'-like to retransmit packets. | ||||
* | Check for rejected connections in system_recv_timeout(). | Nikos Mavrogiannopoulos | 2011-03-18 | 1 | -1/+1 |
| | |||||
* | renamed gnutls_handshake_buffer_* functions to ↵ | Nikos Mavrogiannopoulos | 2011-03-13 | 1 | -22/+5 |
| | | | | gnutls_handshake_hash_buffer_* to separate from new API functions and corrected its usage. | ||||
* | _gnutls_is_dtls() is no more. IS_DTLS() is being used instead. | Nikos Mavrogiannopoulos | 2011-03-12 | 1 | -2/+2 |
| | |||||
* | cleanups. Introduced gnutls_assert_val_fatal() that only prints | Nikos Mavrogiannopoulos | 2011-03-12 | 1 | -5/+1 |
| | | | | debugging messages on non-fatal errors. | ||||
* | Corrected SSL2 client hello handling. | Nikos Mavrogiannopoulos | 2011-03-12 | 1 | -19/+54 |
| | |||||
* | gnutls_transport_set_lowat() is no more. | Nikos Mavrogiannopoulos | 2011-03-12 | 1 | -106/+5 |
| | |||||
* | some cleanups | Nikos Mavrogiannopoulos | 2011-03-12 | 1 | -6/+3 |
| | |||||
* | properly re-generate headers of fragmented packets. | Nikos Mavrogiannopoulos | 2011-03-11 | 1 | -1/+5 |
| | |||||
* | Corrected behavior in normal TLS handshake. | Nikos Mavrogiannopoulos | 2011-03-10 | 1 | -9/+20 |
| | |||||
* | Added intermediate handshake layer that will order handshake packets and ↵ | Nikos Mavrogiannopoulos | 2011-03-06 | 1 | -89/+347 |
| | | | | drop duplicates. | ||||
* | removed GMAX | Nikos Mavrogiannopoulos | 2011-03-05 | 1 | -1/+1 |
| | |||||
* | combined all the record buffers in one. | Nikos Mavrogiannopoulos | 2011-03-02 | 1 | -58/+15 |
| | |||||
* | internal buffering for record and handshake data changed from gnutls_buffers ↵ | Nikos Mavrogiannopoulos | 2011-03-02 | 1 | -73/+63 |
| | | | | to gnutls_mbuffers. | ||||
* | Removed last pieces of inner application. | Nikos Mavrogiannopoulos | 2011-03-02 | 1 | -17/+0 |
| | |||||
* | Added gnutls_record_recv_seq() that can return the sequence number | Nikos Mavrogiannopoulos | 2011-02-22 | 1 | -1/+1 |
| | | | | of the record packet, in addition to data. | ||||
* | Implemented a sliding window-like thing to discard replayed packets. | Nikos Mavrogiannopoulos | 2011-02-20 | 1 | -1/+1 |
| | |||||
* | skip replays in handshake packets. | Nikos Mavrogiannopoulos | 2011-02-20 | 1 | -10/+36 |
| | |||||
* | removed unneeded variables. | Nikos Mavrogiannopoulos | 2011-02-20 | 1 | -6/+0 |
| | |||||
* | Cleanups in combination of DTLS and TLS buffers. | Nikos Mavrogiannopoulos | 2011-02-20 | 1 | -14/+11 |
| | |||||
* | reference counting in epochs is being done using functions. | Nikos Mavrogiannopoulos | 2011-02-20 | 1 | -1/+1 |
| | |||||
* | Combined DTLS buffers and normal TLS buffers. | Nikos Mavrogiannopoulos | 2011-02-20 | 1 | -4/+16 |
| | |||||
* | Changes to allow DTLS server side to operate. Added a simple UDP server on ↵ | Nikos Mavrogiannopoulos | 2011-02-19 | 1 | -143/+9 |
| | | | | | | gnutls-serv. Server other cleanups. | ||||
* | Several updates for DTLS (client side only) to work. | Nikos Mavrogiannopoulos | 2011-02-18 | 1 | -25/+65 |
| | |||||
* | use similar API when caching messages in DTLS or TLS. | Nikos Mavrogiannopoulos | 2011-02-18 | 1 | -3/+13 |
| | |||||
* | dtls: Read whole datagrams. | Jonathan Bastien-Filiatrault | 2011-02-17 | 1 | -9/+94 |
| | | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org> | ||||
* | Indented code. Use same indentation but with -nut to avoid usage of tabs. In ↵ | Nikos Mavrogiannopoulos | 2010-12-16 | 1 | -159/+159 |
| | | | | several editors tabs can be configured not to be 8 spaces and this produces artifacts with the current indentation that is a mixture of tabs and spaces. | ||||
* | Indent (using GNU indent 2.2.11). | Simon Josefsson | 2010-10-14 | 1 | -83/+91 |
| | |||||
* | Explicit symmetric cipher state versionning. | Jonathan Bastien-Filiatrault | 2010-09-17 | 1 | -0/+1 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This introduces the concept of a "cipher epoch". The epoch number is the number of successful handshakes and is incremented by one each time. This concept is native to DTLS and this patch makes the symmetric cipher state explicit for TLS in preparation for DTLS. This concept was implicit in plain TLS and ChangeCipherSpec messages triggered a "pending state copy". Now, we the current epoch number is simply incremented to the parameters negotiated by the handshake. The main side effects of this patch is a slightly more abstract internal API and, in some cases, simpler code. The session blob format is also changed a bit since this patch avoids storing information that is now redundant. If this breaks library users' expectations, this side effect can be negated. The cipher_specs structure has been removed. The conn_state has become record_state_st. Only symmetric cipher information is versioned. Things such as key exchange algorithm and the master secret are not versioned and their handling is unchanged. I have tested this patch as much as I could. It introduces no test suite regressions on my x64 Debian GNU/Linux system. Do not hesitate to point out shortcomings or suggest changes. Since this is a big diff, I am expecting this to be an iterative process. Signed-off-by: Jonathan Bastien-Filiatrault <joe@x2a.org> Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org> | ||||
* | Fully mbufferize _gnutls_read and _gnutls_read_buffered. | Jonathan Bastien-Filiatrault | 2010-09-09 | 1 | -40/+37 |
| | | | | | Signed-off-by: Jonathan Bastien-Filiatrault <joe@x2a.org> Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org> | ||||
* | mbuffers: make _gnutls_io_read_buffered use mbuffers. | Jonathan Bastien-Filiatrault | 2010-09-09 | 1 | -46/+39 |
| | | | | | | | | This will be needed by the DTLS code to make sure reads are stored in segments that correspond to datagram boundaries. Signed-off-by: Jonathan Bastien-Filiatrault <joe@x2a.org> Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org> | ||||
* | Doc fix. | Simon Josefsson | 2010-07-25 | 1 | -4/+4 |
| |