summaryrefslogtreecommitdiff
path: root/lib/kx.c
Commit message (Collapse)AuthorAgeFilesLines
* handshake: reset cert request state on handshake initNikos Mavrogiannopoulos2017-03-211-4/+4
| | | | | | | | That addresses a bug which on client side on case of an initial handshake with a client certificate, we continue to send this certificate even if on rehandshake we were not requested with on. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* write_nss_key_log: write the premaster secret while it is still validNikos Mavrogiannopoulos2016-07-071-2/+2
|
* keylogfile: only consider the SSLKEYLOGFILE variableNikos Mavrogiannopoulos2016-06-061-2/+9
| | | | | | | In addition do not check the environment in the constructor but instead use static variables to save the key file name. The GNUTLS_KEYLOGFILE environment variable is no longer used since there is no reason to have a separate one.
* Append keys on keylogfileNikos Mavrogiannopoulos2016-05-271-24/+6
| | | | | Also consider the SSLKEYLOGFILE variable, since the format is identical and we are always appending keys.
* Amend the "Allow for conditional compilation of SSL 3.0 protocol patch"Nikos Mavrogiannopoulos2016-05-241-4/+4
| | | | | | | That is fix bug introduced by an incorrect #ifdef, and unconditionally provide access to certificate callbacks. This amends 89faab9e9e9123f39e8c0c6f8da1f67de423254a
* Amend: Allow for conditional compilation of SSL 3.0 protocolNikos Mavrogiannopoulos2016-05-201-4/+12
| | | | This patch makes conditional several more SSL 3.0-only parts of codebase.
* Write session keys into a file when GNUTLS_KEYLOGFILE is exportedNikos Mavrogiannopoulos2016-05-181-0/+43
| | | | | | | | | | | | | That is the file pointed from the variable is written to, and contain the session parameters in the following format (identical to NSS key log format): CLIENT_RANDOM <space> <64 bytes of hex encoded client_random> <space> <96 bytes of hex encoded master secret> and for the old RSA ciphersuites also in the format: RSA <space> <16 bytes of hex encoded encrypted pre master secret> <space> <96 bytes of hex encoded master secret> Resolves #64
* Allow for conditional compilation of SSL 3.0 protocolNikos Mavrogiannopoulos2016-05-141-2/+3
| | | | | | | This allows to completely remove SSL 3.0 support by calling configure with the '--disable-ssl3' option. Resolves #93
* Removed the 'gnutls_' prefix from files to simplify file namingNikos Mavrogiannopoulos2015-08-231-0/+705
View Lorry Controller Status