<feed xmlns='http://www.w3.org/2005/Atom'>
<title>otp.git/lib/ssl/src, branch OTP-19.2.3.1</title>
<subtitle>Mirror of Erlang/OTP repository.
</subtitle>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/'/>
<entry>
<title>Update copyright-year</title>
<updated>2016-12-07T12:15:31+00:00</updated>
<author>
<name>Erlang/OTP</name>
<email>otp@erlang.org</email>
</author>
<published>2016-12-07T12:15:31+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=3eddb0f762de248d3230b38bc9d478bfbc8e7331'/>
<id>3eddb0f762de248d3230b38bc9d478bfbc8e7331</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>ssl: Implement DTLS state machine</title>
<updated>2016-12-05T09:59:51+00:00</updated>
<author>
<name>Ingela Anderton Andin</name>
<email>ingela@erlang.org</email>
</author>
<published>2016-09-20T18:58:34+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=1e6942e97339ff39a0436834c260bf50c3d3a481'/>
<id>1e6942e97339ff39a0436834c260bf50c3d3a481</id>
<content type='text'>
Beta DTLS, not production ready. Only very basically tested, and
not everything in the SPEC is implemented and some things
are hard coded that should not be, so this implementation can not be consider
secure.

Refactor "TLS connection state" and socket handling, to facilitate
DTLS implementation.

Create dtls "listner" (multiplexor) process that spawns
DTLS connection process handlers.

Handle DTLS fragmentation.

Framework for handling retransmissions.

Replay Detection is not implemented yet.

Alerts currently always handled as in TLS.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Beta DTLS, not production ready. Only very basically tested, and
not everything in the SPEC is implemented and some things
are hard coded that should not be, so this implementation can not be consider
secure.

Refactor "TLS connection state" and socket handling, to facilitate
DTLS implementation.

Create dtls "listner" (multiplexor) process that spawns
DTLS connection process handlers.

Handle DTLS fragmentation.

Framework for handling retransmissions.

Replay Detection is not implemented yet.

Alerts currently always handled as in TLS.
</pre>
</div>
</content>
</entry>
<entry>
<title>Add ECC curve selection order config in TLS server</title>
<updated>2016-11-02T14:47:28+00:00</updated>
<author>
<name>Fred Hebert</name>
<email>mononcqc@ferd.ca</email>
</author>
<published>2016-10-20T17:55:45+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=bd0f19c6fa1944365edf03febf75354642fc2240'/>
<id>bd0f19c6fa1944365edf03febf75354642fc2240</id>
<content type='text'>
As per RFC 4492 Sec 5.1, the preferred order of selection of named
curves is based on client preferences.

Currently, the SSL application only picks entries according to the
absolute order of entries as tracked in a hardcoded list in code.

This patch changes things so that the client-specified order is
preferred. It also allows a mode where the server can be configured to
override the client's preferred order with its own, although the chosen
ECC must still be within both lists.

The configuration is done through the following options:

- `eccs`, shared by clients and servers alike, allows the specification
  of the supported named curves, in their preferred order, and may
  eventually support more values for explicit primes and so on.
- `honor_ecc_order`, a server-only option, is similar to
  `honor_cipher_order` and will, by default let the server pick the
  client-preferred ECC, and otherwise pick the server-preferred one.

The default value for `eccs` is the same as before, although the
server-chosen ECC now defaults to the client rather than previous
choice.

A function `ssl:eccs()` has been added that returns the highest
supported ECCs for the library.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
As per RFC 4492 Sec 5.1, the preferred order of selection of named
curves is based on client preferences.

Currently, the SSL application only picks entries according to the
absolute order of entries as tracked in a hardcoded list in code.

This patch changes things so that the client-specified order is
preferred. It also allows a mode where the server can be configured to
override the client's preferred order with its own, although the chosen
ECC must still be within both lists.

The configuration is done through the following options:

- `eccs`, shared by clients and servers alike, allows the specification
  of the supported named curves, in their preferred order, and may
  eventually support more values for explicit primes and so on.
- `honor_ecc_order`, a server-only option, is similar to
  `honor_cipher_order` and will, by default let the server pick the
  client-preferred ECC, and otherwise pick the server-preferred one.

The default value for `eccs` is the same as before, although the
server-chosen ECC now defaults to the client rather than previous
choice.

A function `ssl:eccs()` has been added that returns the highest
supported ECCs for the library.
</pre>
</div>
</content>
</entry>
<entry>
<title>Properly filter ssl cipher suites reported as supported</title>
<updated>2016-10-10T09:31:48+00:00</updated>
<author>
<name>Dániel Szoboszlay</name>
<email>dszoboszlay@gmail.com</email>
</author>
<published>2014-05-06T13:11:40+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=7980bced99e4c00b8b0d8a7f589723c2f7fd8873'/>
<id>7980bced99e4c00b8b0d8a7f589723c2f7fd8873</id>
<content type='text'>
Adapted from commit 675ee6860d2c273bcc6c6a0536634a107e2a3d9f.

Conflicts:
	lib/ssl/src/ssl_cipher.erl
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Adapted from commit 675ee6860d2c273bcc6c6a0536634a107e2a3d9f.

Conflicts:
	lib/ssl/src/ssl_cipher.erl
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge branch 'ingela/ssl/cipher-type-spec' into maint</title>
<updated>2016-10-07T08:15:13+00:00</updated>
<author>
<name>Ingela Anderton Andin</name>
<email>ingela@erlang.org</email>
</author>
<published>2016-10-07T08:15:13+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=992bc0dad066bdec66996acae40b370b5377a161'/>
<id>992bc0dad066bdec66996acae40b370b5377a161</id>
<content type='text'>
* ingela/ssl/cipher-type-spec:
  ssl: Adjust cipher type to conform to implementation
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
* ingela/ssl/cipher-type-spec:
  ssl: Adjust cipher type to conform to implementation
</pre>
</div>
</content>
</entry>
<entry>
<title>ssl: Adjust cipher type to conform to implementation</title>
<updated>2016-10-05T07:09:09+00:00</updated>
<author>
<name>Ingela Anderton Andin</name>
<email>ingela@erlang.org</email>
</author>
<published>2016-10-05T07:09:09+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=510e1a43f2d540c234a3d3672d80b07216c0eb0a'/>
<id>510e1a43f2d540c234a3d3672d80b07216c0eb0a</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge branch 'RoadRunnr/crypto/no-rc4/PR-1169/OTP-13896' into maint</title>
<updated>2016-10-04T13:22:00+00:00</updated>
<author>
<name>Raimo Niskanen</name>
<email>raimo@erlang.org</email>
</author>
<published>2016-10-04T13:16:55+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=634d26929bb5852958870a7b18f67b4b8702bfa2'/>
<id>634d26929bb5852958870a7b18f67b4b8702bfa2</id>
<content type='text'>
* RoadRunnr/crypto/no-rc4/PR-1169/OTP-13896:
  disable RC4 in SSL when crypto doesn't support it
  Fix compilation when OpenSSL doesn't support RC4

Conflicts:
	lib/crypto/c_src/crypto.c
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
* RoadRunnr/crypto/no-rc4/PR-1169/OTP-13896:
  disable RC4 in SSL when crypto doesn't support it
  Fix compilation when OpenSSL doesn't support RC4

Conflicts:
	lib/crypto/c_src/crypto.c
</pre>
</div>
</content>
</entry>
<entry>
<title>ssl: Correct anonymous suite handling</title>
<updated>2016-09-30T13:16:15+00:00</updated>
<author>
<name>Ingela Anderton Andin</name>
<email>ingela@erlang.org</email>
</author>
<published>2016-09-30T13:16:15+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=7755c254032c28fb5ad3e7577031c2ef3d7a7858'/>
<id>7755c254032c28fb5ad3e7577031c2ef3d7a7858</id>
<content type='text'>
Test suite did not take TLS-version in to account. Also
some anonymous suites where included incorrectly in some TLS versions.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Test suite did not take TLS-version in to account. Also
some anonymous suites where included incorrectly in some TLS versions.
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge branch 'ingela/ssl/ECC-selection-fix/OTP-13918' into maint-19</title>
<updated>2016-09-28T08:21:06+00:00</updated>
<author>
<name>Erlang/OTP</name>
<email>otp@erlang.org</email>
</author>
<published>2016-09-28T08:21:06+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=83281b7c911abc34ba6359e88be39bada31073d8'/>
<id>83281b7c911abc34ba6359e88be39bada31073d8</id>
<content type='text'>
* ingela/ssl/ECC-selection-fix/OTP-13918:
  ssl: Correct ECC curve selection, the error could cause default to always be selected.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
* ingela/ssl/ECC-selection-fix/OTP-13918:
  ssl: Correct ECC curve selection, the error could cause default to always be selected.
</pre>
</div>
</content>
</entry>
<entry>
<title>ssl: Correct ECC curve selection, the error could cause default to always be selected.</title>
<updated>2016-09-28T08:05:57+00:00</updated>
<author>
<name>Ingela Anderton Andin</name>
<email>ingela@erlang.org</email>
</author>
<published>2016-09-27T10:28:28+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=ca78bf1500c5f3c68d72214bd06fcc1b66a52c38'/>
<id>ca78bf1500c5f3c68d72214bd06fcc1b66a52c38</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
</feed>
