Age | Commit message (Collapse) | Author | |
---|---|---|---|
2018-03-05 | ssl: Correct AEAD handling | Ingela Anderton Andin | |
Cipher suite handling improvments missed to make a few changes for AEAD to be handled correctly see ERL-568 | |||
2018-02-12 | Merge branch 'maint' | Ingela Anderton Andin | |
2018-02-12 | Merge pull request #1709 from ↵ | Ingela Andin | |
dumbbell/dumbbell/ssl/fix-active-once-dropped-when-handling-alert/ERL-562 ssl: Fix alert handling so that unexpected messages are logged and alerted correctly | |||
2018-02-09 | ssl: Add the unexpected message to #alert{} | Jean-Sébastien Pédron | |
... in handle_common_event(), instead of passing it to handle_own_alert() after wrapping it in a tuple with `StateName` (i.e. `{StateName, Msg}`). The `StateName` is passed to handle_normal_shutdown() and to alert_user(). The latter has a clause matching it against `connection`. Unfortunately, when the argument was in fact `{StateName, Msg}`, another clause was executed which dropped the `active` flag value and forced it to `false`, even if the state was actually `connection`. It meant that later in send_or_reply(), the alert was not propagated to the user, even though it should (`active` set to `true` or `once`). Now that handle_common_event() always passes the actual `StateName`, the problem is fixed. ERL-562 | |||
2018-02-07 | Merge branch 'maint' | Ingela Anderton Andin | |
Conflicts: lib/ssl/doc/src/ssl.xml lib/ssl/src/ssl.erl lib/ssl/src/ssl_cipher.erl lib/ssl/test/ssl_basic_SUITE.erl lib/ssl/test/ssl_test_lib.erl | |||
2018-02-07 | ssl: Make sure anonymous suites are handled separately | Ingela Anderton Andin | |
Preferably customized cipher suites will be based on the default value. But all may be used as base and hence it will be good to handle anonymous suites separately as they are intended for testing purposes. | |||
2018-02-05 | ssl: Uses aead as mac value in AEAD cipher suites | Ingela Anderton Andin | |
Authenticated encryption (AE) and authenticated encryption with associated data (AEAD, variant of AE) is a form of encryption which simultaneously provides confidentiality, integrity, and authenticity assurances on the data. This is more logical value then null that was used, this happened to work as the AEAD property was derived form other data, but it is confusing! | |||
2018-02-05 | ssl: Add new API functions for cipher suite handling | Ingela Anderton Andin | |
2018-01-25 | Merge branch 'ingela/DTLS-supported' | Ingela Anderton Andin | |
* ingela/DTLS-supported: ssl: Fix typo dtls: Add DTLS handling to utility functions ssl: Document enhancment ssl: Document DTLS | |||
2018-01-24 | Merge branch 'maint' | Ingela Anderton Andin | |
2018-01-23 | ssl: Add record version sanity check | Ingela Anderton Andin | |
2018-01-22 | Merge branch 'ingela/ssl/no-chacha-default-for-now/ERL-538/OTP-14882' | Ingela Anderton Andin | |
* ingela/ssl/no-chacha-default-for-now/ERL-538/OTP-14882: ssl: Remove chacha ciphers form default for now | |||
2018-01-22 | ssl: Remove chacha ciphers form default for now | Ingela Anderton Andin | |
We have discovered interoperability problems, ERL-538, that we believe needs to be solved in crypto. | |||
2018-01-19 | ssl: Remove 3DES cipher suites from default | Ingela Anderton Andin | |
2018-01-17 | dtls: Add DTLS handling to utility functions | Ingela Anderton Andin | |
2018-01-16 | ssl: RSA key exchange is considered broken do not support by default | Ingela Anderton Andin | |
2018-01-12 | Merge branch 'maint' | Ingela Anderton Andin | |
2018-01-11 | ssl: Correct function for listing RC4 suites | Ingela Anderton Andin | |
2018-01-09 | Merge branch 'maint' | Ingela Anderton Andin | |
2018-01-07 | dtls: Filter out rc4 for DTLS psk suites | Ingela Anderton Andin | |
Stream ciphers are not valid fro DTLS | |||
2018-01-04 | Merge branch 'maint' | Ingela Anderton Andin | |
Conflicts: lib/ssl/src/tls_connection.erl | |||
2018-01-04 | ssl: Prevent error handling race condition | Ingela Anderton Andin | |
ERL-539 | |||
2017-12-20 | Merge branch 'maint' | Ingela Anderton Andin | |
2017-12-20 | dtls: Add handling of lost key exchange in cipher state | Ingela Anderton Andin | |
2017-12-20 | ssl: Correct DTLS client close handling | Ingela Anderton Andin | |
2017-12-20 | Merge branch 'maint' | Ingela Anderton Andin | |
2017-12-20 | Merge branch 'ingela/dtls-cuddling' into maint | Ingela Anderton Andin | |
* ingela/dtls-cuddling: dtls: Correct UDP listener cleanup dtls: Correct return value in UDP listener initialization | |||
2017-12-20 | Merge branch 'maint' | Ingela Anderton Andin | |
2017-12-20 | Merge branch 'ingela/DTLS/retransmission-timers' into maint | Ingela Anderton Andin | |
* ingela/DTLS/retransmission-timers: dtls: Use repeat_state to make sure retransmission timer is reset | |||
2017-12-20 | Merge branch 'maint' | Ingela Anderton Andin | |
2017-12-19 | remove duplicate operation for decode certificate | Jxck | |
completely deprecated operation with no effect. | |||
2017-12-18 | dtls: Use repeat_state to make sure retransmission timer is reset | Ingela Anderton Andin | |
2017-12-15 | dtls: Correct UDP listener cleanup | Ingela Anderton Andin | |
2017-12-15 | dtls: Correct return value in UDP listener initialization | Ingela Anderton Andin | |
2017-12-14 | Merge branch 'maint' | Ingela Anderton Andin | |
2017-12-14 | ssl: Align (with DTLS) and correct TLS_FALLBACK_SCSV handling | Ingela Anderton Andin | |
2017-12-11 | Merge branch 'maint' | Lars Thorsen | |
2017-12-08 | [ssl] Update runtime dependencies | Lars Thorsen | |
2017-12-05 | Merge branch 'maint' | Ingela Anderton Andin | |
Conflicts: lib/ssl/src/ssl_cipher.erl lib/ssl/src/ssl_handshake.erl | |||
2017-12-05 | Merge branch 'ingela/ssl/cipher-suites/OTP-14749' into maint | Ingela Anderton Andin | |
* ingela/ssl/cipher-suites/OTP-14749: ssl: Use maps for cipher suites internally | |||
2017-12-05 | ssl: Use maps for cipher suites internally | Ingela Anderton Andin | |
This is a preparation for improvements to come in option handling and support for TLS-1.3 | |||
2017-12-04 | Merge branch 'raimo/ssl-dist-bench/OTP-14657' | Raimo Niskanen | |
* origin/raimo/ssl-dist-bench/OTP-14657: Write SSL distribution benchmarks Polish SSL distribution Handle whitebox test message Correct distribution doc Use SNI when connecting Use -ssl_dist_optfile options Read in -ssl_dist_optfile to ETS Facilitate test certs with common root Stop checking DNS name for SNI | |||
2017-12-04 | Use SNI when connecting | Raimo Niskanen | |
2017-12-04 | Use -ssl_dist_optfile options | Raimo Niskanen | |
2017-12-04 | Read in -ssl_dist_optfile to ETS | Raimo Niskanen | |
2017-12-04 | Stop checking DNS name for SNI | Raimo Niskanen | |
2017-12-04 | Polish SSL distribution | Raimo Niskanen | |
2017-12-04 | Handle whitebox test message | Raimo Niskanen | |
2017-12-04 | Use SNI when connecting | Raimo Niskanen | |
2017-12-04 | Use -ssl_dist_optfile options | Raimo Niskanen | |