Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-02-14 | ssl: Fix possible mismatch between SSL/TLS version and default ciphers | Ingela Anderton Andin | |
2014-02-06 | ssl: Unicode adaptions | Ingela Anderton Andin | |
2014-01-28 | ssl: use is_boolean/1 guard in option validation | Andreas Schultz | |
2014-01-21 | Implement 'honor_cipher_order' SSL server-side option | Andrew Thompson | |
HonorCipherOrder as implemented in Apache, nginx, lighttpd, etc. This instructs the server to prefer its own cipher ordering rather than the client's and can help protect against things like BEAST while maintaining compatability with clients which only support older ciphers. This code is mostly written by Andrew Thompson, only the test case was added by Andreas Schultz. | |||
2014-01-14 | ssl: Add missing options validation of server_name_indication | Ingela Anderton Andin | |
2013-12-02 | ssl: Refactor connetion handling | Ingela Anderton Andin | |
2013-12-02 | ssl: API and supervisor | Ingela Anderton Andin | |
2013-12-02 | ssl: Refactor API | Ingela Anderton Andin | |
New design : ssl - Main tls - Reflect tls specific semantics dtls - Reflect dtls specific semantics | |||
2013-08-23 | Merge branch 'maint-r15' into maint-r16 | Fredrik Gustafsson | |
Conflicts: lib/inets/doc/src/notes.xml lib/inets/src/http_lib/http_transport.erl lib/inets/src/inets_app/inets.appup.src lib/inets/vsn.mk lib/ssl/doc/src/notes.xml lib/ssl/src/ssl.appup.src lib/ssl/src/ssl.erl lib/ssl/src/ssl_internal.hrl lib/ssl/src/tls_connection.erl lib/ssl/vsn.mk | |||
2013-08-21 | [inets, ssl]: make log_alert configurable as option in ssl, SSLLogLevel ↵ | Fredrik Gustafsson | |
added as option to inets conf file | |||
2013-06-07 | ssl: Fix dialyzer warnings | Ingela Anderton Andin | |
2013-06-04 | ssl: Structural perarparation to support DTLS | Ingela Anderton Andin | |
Also phase in tls module as main API instead of ssl. To make API clearer. As TLS is the new protocol name. Maybe keep some API functions in ssl | |||
2013-05-24 | ssl: Remove unused `srp_parameters` type spec | Klaus Trainer | |
As the file 'lib/ssl/src/ssl_srp_primes.hrl' only contains a specification of a `srp_parameters` type that isn't exported and also isn't referenced anywhere (neither in the code nor in the documentation), the type specification (and hence the file as well) can be removed. | |||
2013-05-08 | SSL: add Elliptic Curve support for ssl app | Andreas Schultz | |
2013-05-08 | SSL: filter TLS cipher suites for supported algorithms | Andreas Schultz | |
2013-04-03 | ssl: Add option to list all available ciper suites and enhanced documentation | Ingela Anderton Andin | |
2013-03-28 | SSL: add TLS-SRP (RFC 5054) cipher suites | Andreas Schultz | |
2013-03-28 | SSL: add TLS PSK (RFC 4279 and RFC 5487) cipher suites | Andreas Schultz | |
2013-03-05 | ssl: Check that negotiated version is a supported version. | Ingela Anderton Andin | |
2013-02-18 | ssl: Further error handling enhancments | Ingela Anderton Andin | |
follow up enhancments done in commit e56167dd6ca8d37d26ea7f19933691a3bda41113 Make sure format_error return good strings. Replace confusing legacy atoms with more descriptive atoms. | |||
2013-02-12 | ssl: Generalize cb_info option | Ingela Anderton Andin | |
2012-12-19 | ssl & orber: Remove ssl:pid/1 (has been pointless since R14) | Ingela Anderton Andin | |
2012-12-06 | Merge branch 'maint' | Ingela Anderton Andin | |
Conflicts: erts/emulator/sys/vxworks/sys.c erts/vsn.mk lib/ssl/src/ssl_connection.erl lib/ssl/test/ssl_basic_SUITE.erl | |||
2012-12-06 | ssl: Export sslsocket() dialyzer type | Ingela Anderton Andin | |
2012-11-14 | Merge remote branch 'upstream/maint' | Ingela Anderton Andin | |
Conflicts: lib/ssl/src/ssl_connection.erl | |||
2012-11-13 | ssl: Add default values to emulated socket options in internal record | Ingela Anderton Andin | |
The absence of the active default values could cause a process leak | |||
2012-10-01 | ssl: Improve #sslsocket{} API | Ingela Anderton Andin | |
A #sslsocket{} contains the fsm pid and value that was previously set to old_ssl or new_ssl to make the transition period smoother. Now that old ssl is not supported any more we use this field to store the inet socket reference instead. This enables some API functions to return quicker as they do not need to communicate with the fsm-process. | |||
2012-10-01 | ssl: It is now possible to call controlling_process on a listen socket, | Ingela Anderton Andin | |
same as in gen_tcp. Made error handling of listen sockets as arguments to funtions expecting a connected socket more inet/gen_tcp like. | |||
2012-09-21 | ssl: SSL 3.0 does not support next protocol negotiation | Ingela Anderton Andin | |
Also shorten test cases names to workaround test framework problems on windows | |||
2012-09-20 | ssl: Changed default behaviour of next protocol negotiation to make | Ingela Anderton Andin | |
more "sense" (be true to the specification). | |||
2012-09-20 | ssl: Support for SSL Next Protocol Negotiation | Ben Murphy | |
* http://technotes.googlecode.com/git/nextprotoneg.html | |||
2012-08-22 | ssl: Use crypto:strong_rand_bytes if possible | Ingela Anderton Andin | |
2012-08-22 | ssl: TLS-1.1 and TLS-1.2 support should not be default until R16 | Ingela Anderton Andin | |
2012-08-22 | ssl: Enable TLS 1.2 | Andreas Schultz | |
2012-08-22 | ssl: make PRF function selectable | Andreas Schultz | |
TLS 1.2 allows to negotiate the used PRF, additional the default PRF uses a different hash. This change make the PRF selectable and hardwires the PRF for TLS < 1.2 | |||
2012-06-08 | ssl: File handling optimization | Ingela Anderton Andin | |
Avoid cach validation with file:file_info/2 as this i too expensive and causes a bottleneck in the file server. Instead we expose a new API function ssl:clear_pem_cache/0 to deal with the problem. As we think it will be of occasional use and the normal case is that the cache will be valid we think it is the right thing to do. Convert file paths to binary representation in the ssl API module to avoid uncessarry calls in file later on. Also add sanity checks for openssl versions in testsuite due to new openssl bugs. | |||
2012-03-27 | Corrected dialyzer specs and exported some dialyzer specs | Ingela Anderton Andin | |
2012-03-05 | Some protocols (e.g. EAP-PEAP, EAP-TLS, EAP-TTLS) that use TLS as | Andreas Schultz | |
transport layer need to generate additional application specific key material. One way to generate such material is to use the TLS PRF and key material from the TLS session itself. This change makes it possible to use a TLS sessions PRF either with the session internal or caller supplied key material to generate additional key material. | |||
2011-11-01 | Added PKCS-8 support in ssl | Ingela Anderton Andin | |
2011-10-11 | Put back ssl:peercert/1 | Ingela Anderton Andin | |
I accidentally removed a little too much, only peercert/2 was deprecated. | |||
2011-10-06 | Merge branch 'ia/ssl/remove-old-ssl/OTP-7048' | Ingela Anderton Andin | |
* ia/ssl/remove-old-ssl/OTP-7048: Remove old ssl implementation and deprecated function ssl:peercert/1 Conflicts: lib/ssl/test/Makefile | |||
2011-09-20 | Merge branch 'dev' into major | Henrik Nord | |
Conflicts: erts/aclocal.m4 erts/include/internal/ethread_header_config.h.in | |||
2011-09-16 | Remove old ssl implementation and deprecated function ssl:peercert/1 | Ingela Anderton Andin | |
2011-09-15 | Fix more misspellings of compatibility | Tuncer Ayaz | |
2011-09-13 | Merge branch 'ia/ssl/dist/OTP-7053' into major | Ingela Anderton Andin | |
* ia/ssl/dist/OTP-7053: First fully working version Use ssl instead of being a proxy command Connect from both sides works now | |||
2011-09-09 | First fully working version | Ingela Anderton Andin | |
2011-09-06 | Corrected faulty dialyzer spec | Ingela Anderton Andin | |
2011-09-05 | Corrected spec name errors: ip_adress -> ip_address port_num -> port_number | Ingela Anderton Andin | |
2011-08-31 | Use inet and gen_* dialyzer specs | Ingela Anderton Andin | |
2011-08-08 | replace "a ssl" with "an ssl" | Christian von Roques | |