<feed xmlns='http://www.w3.org/2005/Atom'>
<title>otp.git/lib/ssl, branch KennethL-patch-1</title>
<subtitle>Mirror of Erlang/OTP repository.
</subtitle>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/'/>
<entry>
<title>Merge pull request #1709 from dumbbell/dumbbell/ssl/fix-active-once-dropped-when-handling-alert/ERL-562</title>
<updated>2018-02-12T08:16:44+00:00</updated>
<author>
<name>Ingela Andin</name>
<email>ingela@erlang.org</email>
</author>
<published>2018-02-12T08:16:44+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=ee477c8d88d2139035c503e97e42e88fe500170f'/>
<id>ee477c8d88d2139035c503e97e42e88fe500170f</id>
<content type='text'>
ssl: Fix alert handling so that unexpected messages are logged and alerted correctly</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
ssl: Fix alert handling so that unexpected messages are logged and alerted correctly</pre>
</div>
</content>
</entry>
<entry>
<title>ssl: Add the unexpected message to #alert{}</title>
<updated>2018-02-09T09:42:47+00:00</updated>
<author>
<name>Jean-Sébastien Pédron</name>
<email>jean-sebastien.pedron@dumbbell.fr</email>
</author>
<published>2018-02-06T12:59:22+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=a5eb5642b84c6843611f718cfd105557f8a7a406'/>
<id>a5eb5642b84c6843611f718cfd105557f8a7a406</id>
<content type='text'>
... in handle_common_event(), instead of passing it to
handle_own_alert() after wrapping it in a tuple with `StateName` (i.e.
`{StateName, Msg}`).

The `StateName` is passed to handle_normal_shutdown() and to
alert_user(). The latter has a clause matching it against `connection`.
Unfortunately, when the argument was in fact `{StateName, Msg}`, another
clause was executed which dropped the `active` flag value and forced it
to `false`, even if the state was actually `connection`. It meant that
later in send_or_reply(), the alert was not propagated to the user, even
though it should (`active` set to `true` or `once`).

Now that handle_common_event() always passes the actual `StateName`, the
problem is fixed.

ERL-562
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
... in handle_common_event(), instead of passing it to
handle_own_alert() after wrapping it in a tuple with `StateName` (i.e.
`{StateName, Msg}`).

The `StateName` is passed to handle_normal_shutdown() and to
alert_user(). The latter has a clause matching it against `connection`.
Unfortunately, when the argument was in fact `{StateName, Msg}`, another
clause was executed which dropped the `active` flag value and forced it
to `false`, even if the state was actually `connection`. It meant that
later in send_or_reply(), the alert was not propagated to the user, even
though it should (`active` set to `true` or `once`).

Now that handle_common_event() always passes the actual `StateName`, the
problem is fixed.

ERL-562
</pre>
</div>
</content>
</entry>
<entry>
<title>ssl: Make sure anonymous suites are handled separately</title>
<updated>2018-02-07T10:55:44+00:00</updated>
<author>
<name>Ingela Anderton Andin</name>
<email>ingela@erlang.org</email>
</author>
<published>2018-02-01T13:28:22+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=b16d7d7e4cfa15ab00e5ce43f50619d02bc2f986'/>
<id>b16d7d7e4cfa15ab00e5ce43f50619d02bc2f986</id>
<content type='text'>
Preferably customized cipher suites will be based on the default value.
But all may be used as base and hence it will be good to
handle anonymous suites separately as they are intended for testing purposes.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Preferably customized cipher suites will be based on the default value.
But all may be used as base and hence it will be good to
handle anonymous suites separately as they are intended for testing purposes.
</pre>
</div>
</content>
</entry>
<entry>
<title>ssl: Add UG examles</title>
<updated>2018-02-05T14:03:54+00:00</updated>
<author>
<name>Ingela Anderton Andin</name>
<email>ingela@erlang.org</email>
</author>
<published>2018-01-30T15:53:54+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=cece38b7dccf8563b44eb095ba202f55e07e807f'/>
<id>cece38b7dccf8563b44eb095ba202f55e07e807f</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>ssl: Uses aead as mac value in AEAD cipher suites</title>
<updated>2018-02-05T14:03:53+00:00</updated>
<author>
<name>Ingela Anderton Andin</name>
<email>ingela@erlang.org</email>
</author>
<published>2018-01-29T13:37:30+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=2ce6be54915587d2c14f95b9f65197bd8c86554e'/>
<id>2ce6be54915587d2c14f95b9f65197bd8c86554e</id>
<content type='text'>
Authenticated encryption (AE) and authenticated encryption with
associated data (AEAD, variant of AE) is a form of encryption which
simultaneously provides confidentiality, integrity, and authenticity
assurances on the data.

This is more logical value then null that was used, this happened to
work as the AEAD property was derived form other data, but it is confusing!
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Authenticated encryption (AE) and authenticated encryption with
associated data (AEAD, variant of AE) is a form of encryption which
simultaneously provides confidentiality, integrity, and authenticity
assurances on the data.

This is more logical value then null that was used, this happened to
work as the AEAD property was derived form other data, but it is confusing!
</pre>
</div>
</content>
</entry>
<entry>
<title>ssl: Add new API functions for cipher suite handling</title>
<updated>2018-02-05T14:03:53+00:00</updated>
<author>
<name>Ingela Anderton Andin</name>
<email>ingela@erlang.org</email>
</author>
<published>2018-01-12T15:04:26+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=7ba4144d71899fa7eb9e1f35c50e3633772aa283'/>
<id>7ba4144d71899fa7eb9e1f35c50e3633772aa283</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>ssl: Check OpenSSL version for DSS (DSA) support</title>
<updated>2018-01-25T15:23:06+00:00</updated>
<author>
<name>Ingela Anderton Andin</name>
<email>ingela@erlang.org</email>
</author>
<published>2018-01-25T09:50:29+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=c0dd8fa1446b276d35557ede18199c629b2ed590'/>
<id>c0dd8fa1446b276d35557ede18199c629b2ed590</id>
<content type='text'>
LibreSSL-2.6.3 dropped DSS (DSA) support
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
LibreSSL-2.6.3 dropped DSS (DSA) support
</pre>
</div>
</content>
</entry>
<entry>
<title>ssl: Add record version sanity check</title>
<updated>2018-01-23T09:20:24+00:00</updated>
<author>
<name>Ingela Anderton Andin</name>
<email>ingela@erlang.org</email>
</author>
<published>2018-01-04T16:17:50+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=a3d68814e1cd1ef062582901e0102f60a323bae5'/>
<id>a3d68814e1cd1ef062582901e0102f60a323bae5</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge branch 'ingela/ssl/test-cuddle' into maint</title>
<updated>2018-01-15T09:24:34+00:00</updated>
<author>
<name>Ingela Anderton Andin</name>
<email>ingela@erlang.org</email>
</author>
<published>2018-01-15T09:24:34+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=6770fa479205c7eb468cb854ae087859b6603bcd'/>
<id>6770fa479205c7eb468cb854ae087859b6603bcd</id>
<content type='text'>
* ingela/ssl/test-cuddle:
  ssl: Call clean version function
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
* ingela/ssl/test-cuddle:
  ssl: Call clean version function
</pre>
</div>
</content>
</entry>
<entry>
<title>ssl: Call clean version function</title>
<updated>2018-01-15T09:23:46+00:00</updated>
<author>
<name>Ingela Anderton Andin</name>
<email>ingela@erlang.org</email>
</author>
<published>2018-01-11T16:24:42+00:00</published>
<link rel='alternate' type='text/html' href='http://git.ninenines.eu/otp.git/commit/?id=c32bccee999976f2a56e0d34f3f88d6c6febc0e1'/>
<id>c32bccee999976f2a56e0d34f3f88d6c6febc0e1</id>
<content type='text'>
Make sure tests are run with intended version settings.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Make sure tests are run with intended version settings.
</pre>
</div>
</content>
</entry>
</feed>
