aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2017-02-06Revert "ssh: removed 'ssh-dss' from default list"Hans Nilsson
This reverts commit 6847d9223420fb86cdf72f0e608a5f41a2673053. The removal of ssh-dss seems to give a too high risk of failing customer systems. Needs to be properly deprecated.
2017-02-02ssh: document new and retired algorithmsHans Nilsson
2017-02-01ssh: Enable usage of supported but not default host key algorithmsHans Nilsson
2017-02-01ssh: minor code unfoldingHans Nilsson
2017-02-01ssh: clearer hash calculationHans Nilsson
2017-02-01ssh: update tests for removed algorithmsHans Nilsson
2017-01-31ssh: better error msg at kex failureHans Nilsson
2017-01-31ssh: removed 'ssh-dss' from default listHans Nilsson
Reason: insecure
2017-01-31ssh: removed 'diffie-hellman-group1-sha1' from default listHans Nilsson
Reason: very insecure
2017-01-31ssh: added stronger diffie-hellman groupsHans Nilsson
diffie-hellman-group16-sha512 diffie-hellman-group18-sha512 diffie-hellman-group14-sha256
2017-01-31ssh: reordered default algorithms listHans Nilsson
2017-01-31Merge branch 'maint'Hans Nilsson
Conflicts: lib/crypto/c_src/crypto.c lib/crypto/src/crypto.erl
2017-01-31Merge branch 'hans/ssh/speed_dh_keygen/OTP-14169' into maintHans Nilsson
2017-01-31Merge branch 'maint'Hans Nilsson
2017-01-31Merge branch 'hans/ssh/increase_benchmark_timetrap' into maintHans Nilsson
2017-01-30ssh: increase timetrap for ssh_benchmark_SUITEHans Nilsson
2017-01-30ssh: optimize kex dh_gex using new crypto functionalityHans Nilsson
2017-01-27crypto: Added optional length to paramlist in generate_keyHans Nilsson
2017-01-27Merge branch 'maint'Ingela Anderton Andin
2017-01-27Merge branch 'ingela/ssl/key-ext-validate/ERL-338/OTP-14141' into maintIngela Anderton Andin
* ingela/ssl/key-ext-validate/ERL-338/OTP-14141: ssl: The certificate path may be used as a source to find intermediate CAs for the CRL ssl: Handle more than one DistributionPoint ssl: Correct ssl_certificate:validate/3
2017-01-26ssl: The certificate path may be used as a source to find intermediate CAs ↵Ingela Anderton Andin
for the CRL
2017-01-26Merge branch 'maint'Hans Nilsson
2017-01-26Merge branch 'hans/public_key/verify_hostname/OTP-13009' into maintHans Nilsson
2017-01-26Merge branch 'hans/ssh/bad_hostkey_sign_kex_dh_gex/OTP-14166' into maintHans Nilsson
2017-01-26Merge pull request #1289 from richcarl/intensity-tuning-docSiri Hansen
Add restart intensity howto section to design principles doc OTP-14168
2017-01-26Merge branch 'maint'Siri Hansen
2017-01-26Fix observer application crash (#1296)visciang
Fix observer application crash When clicking an HTML-link to a port before the port tab has been opened for the first time, observer would crash since port info is not initiated. This is now corrected. Also, when clicking on an HTML link to a port, and the port does not exist, then pop up an info dialog saying "No such port". OTP-14151
2017-01-26Merge branch 'egil/erts/remove-broken-hash/OTP-13827'Björn-Egil Dahlberg
* egil/erts/remove-broken-hash/OTP-13827: Update test cases for erlang:hash/2 removal mnesia: Remove mnesia_frag_old_hash hash module stdlib: Produce correct warning for erlang:hash/2 erts: Remove erlang:hash/2 from documentation erts: Remove broken hash from Erlang
2017-01-25public_key: pkix_verify_hostname (RFC 6125)Hans Nilsson
2017-01-25ssh: correct host key signature calculationHans Nilsson
2017-01-25Merge branch 'rickard/ds-20-fix'Rickard Green
* rickard/ds-20-fix: Fix unused warning Change exception for enif_schedule_nif() with dirty flags Remove double check of NifExport when checking process code
2017-01-25Merge branch 'maint'Rickard Green
* maint: Workaround for buggy android implementation of PTHREAD_STACK_MIN
2017-01-25Merge branch 'rickard/android-missing-page-size-workaround' into maintRickard Green
OTP-14165 * rickard/android-missing-page-size-workaround: Workaround for buggy android implementation of PTHREAD_STACK_MIN
2017-01-25Update test cases for erlang:hash/2 removalBjörn-Egil Dahlberg
2017-01-25mnesia: Remove mnesia_frag_old_hash hash moduleBjörn-Egil Dahlberg
The module mnesia_frag_old_hash utilized the broken erlang:hash/2 function which has been deprecated for a long time. Since erlang:hash/2 is now removed there is no point in having this module any more.
2017-01-25stdlib: Produce correct warning for erlang:hash/2Björn-Egil Dahlberg
2017-01-25erts: Remove erlang:hash/2 from documentationBjörn-Egil Dahlberg
2017-01-25erts: Remove broken hash from ErlangBjörn-Egil Dahlberg
erlang:hash/2 has been deprecated for a while, time to remove it.
2017-01-25Merge branch 'maint'Ingela Anderton Andin
2017-01-25Merge branch 'ingela/ssl/crl-validity' into maintIngela Anderton Andin
* ingela/ssl/crl-validity: ssl: Make crls valid for a week instead of 24 hours
2017-01-25Merge branch 'maint'Björn-Egil Dahlberg
2017-01-25Merge branch 'egil/erts/fix-crashdump-suspend/OTP-14164' into maintBjörn-Egil Dahlberg
* egil/erts/fix-crashdump-suspend/OTP-14164: erts: Fix thread suspend in crashdump
2017-01-25Merge branch 'maint'Ingela Anderton Andin
2017-01-25Merge branch 'ingela/ssl/pem-chache-own-process/OTP-13874' into maintIngela Anderton Andin
* ingela/ssl/pem-chache-own-process/OTP-13874: ssl: Move PEM cache to a dedicated process
2017-01-25Merge branch 'egil/percept/remove-application/OTP-14163'Björn-Egil Dahlberg
* egil/percept/remove-application/OTP-14163: ssl: Remove percept from benchmark otp: Don't mention percept in documentation runtime_tools: Remove percept percept: Remove application
2017-01-24ssl: Handle more than one DistributionPointIngela Anderton Andin
2017-01-24ssl: Correct ssl_certificate:validate/3Ingela Anderton Andin
Changes made to ssl_certificate:validate appear to be preventing CRL validation from happening when an id-ce-extKeyUsage extension is present in the cert before the DistributionPoint extension. https://github.com/erlang/otp/blob/448e8aca77dd29ed5b37d56f0700d24ac26a7243/lib/ssl/src/ssl_certificate.erl#L131 See also ERL-338 and PR-1302
2017-01-24Merge branch 'maint'Björn-Egil Dahlberg
2017-01-24Merge branch 'schimulkar/os_mon/linux-on-ibm-z/PR-1309/OTP-14161' into maintBjörn-Egil Dahlberg
* schimulkar/os_mon/linux-on-ibm-z/PR-1309/OTP-14161: Adding s390x support
2017-01-24Merge branch 'maint'Björn-Egil Dahlberg