Age | Commit message (Collapse) | Author | |
---|---|---|---|
2018-08-21 | ssl: Move formatting code to own module | Ingela Anderton Andin | |
The conversion code for different representations of cipher suites is long an repetitive. We want to hide it in a module that does not have other functions that we like to look at. | |||
2018-08-07 | ssl: Make sure that a correct cipher suite is selected | Ingela Anderton Andin | |
The keyexchange ECDHE-RSA requires an RSA-keyed server cert (corresponding for ECDHE-ECDSA), the code did not assert this resulting in that a incorrect cipher suite could be selected. Alas test code was also wrong hiding the error. | |||
2018-07-05 | ssl: Correct connection_information on ECC-curves | Ingela Anderton Andin | |
2018-07-05 | ssl: No cipher suite sign restriction in TLS-1.2 | Ingela Anderton Andin | |
2018-07-04 | ssl: Add connection information on new cipher_suite format | Ingela Anderton Andin | |
2018-06-18 | Update copyright year | Henrik Nord | |
2018-06-14 | Merge branch 'ingela/ssl/21-enhanchment' | Ingela Anderton Andin | |
* ingela/ssl/21-enhanchment: ssl: Add handle_continue/2 and document enhancements | |||
2018-06-14 | ssl: Add handle_continue/2 and document enhancements | Ingela Anderton Andin | |
* deprecation of ssl:ssl_accept/[1,2,3] * deprecation of ssl:cipher_suites/[0,1] * More consistent naming | |||
2018-06-13 | ssl: Update interop conditions | Ingela Anderton Andin | |
2018-05-21 | ssl: anon test should use dh or ecdh anon keyexchange | Ingela Anderton Andin | |
2018-05-02 | ssl: Exclude DTLS tests for one more OpenSSL version for now | Ingela Anderton Andin | |
2018-05-02 | ssl: Make sure help function works from all parts of test suite | Ingela Anderton Andin | |
Depending on context trap_exit flag may be set or not. So always set trap_exit and consume the EXIT signal and then set it back. | |||
2018-04-30 | ssl: Avoid hardcoding of cipher suites and fix ECDH suite handling | Ingela Anderton Andin | |
ECDH suite handling did not use the EC parameters form the certs as expected. | |||
2018-04-30 | ssl: Run all test case combinations | Ingela Anderton Andin | |
Fix test case code to use keyAgreement for ECDH_ECDSA | |||
2018-04-27 | Merge branch 'ingela/ssl/test-cuddle' | Ingela Anderton Andin | |
* ingela/ssl/test-cuddle: ssl: Handle EXIT messages from test code correctly | |||
2018-04-24 | ssl: Add new API functions | Ingela Anderton Andin | |
2018-03-27 | ssl: Correct ECC suite and DTLS ECC handling | Ingela Anderton Andin | |
When test handling was corrected it was obvious that DTLS ECC handling was not compleated. | |||
2018-03-16 | ssl: Handle EXIT messages from test code correctly | Ingela Anderton Andin | |
2018-02-07 | Merge branch 'maint' | Ingela Anderton Andin | |
Conflicts: lib/ssl/doc/src/ssl.xml lib/ssl/src/ssl.erl lib/ssl/src/ssl_cipher.erl lib/ssl/test/ssl_basic_SUITE.erl lib/ssl/test/ssl_test_lib.erl | |||
2018-02-07 | ssl: Make sure anonymous suites are handled separately | Ingela Anderton Andin | |
Preferably customized cipher suites will be based on the default value. But all may be used as base and hence it will be good to handle anonymous suites separately as they are intended for testing purposes. | |||
2018-01-26 | Merge branch 'maint' | Ingela Anderton Andin | |
2018-01-25 | ssl: Check OpenSSL version for DSS (DSA) support | Ingela Anderton Andin | |
LibreSSL-2.6.3 dropped DSS (DSA) support | |||
2018-01-22 | ssl: Remove chacha ciphers form default for now | Ingela Anderton Andin | |
We have discovered interoperability problems, ERL-538, that we believe needs to be solved in crypto. | |||
2018-01-09 | Merge branch 'maint' | Ingela Anderton Andin | |
2018-01-07 | dtls: Filter out rc4 for DTLS psk suites | Ingela Anderton Andin | |
Stream ciphers are not valid fro DTLS | |||
2018-01-06 | dtls: We do not need to wait for DTLS over UDP server | Ingela Anderton Andin | |
Client will retransmit until server becomes responsive | |||
2017-12-05 | Merge branch 'maint' | Ingela Anderton Andin | |
Conflicts: lib/ssl/src/ssl_cipher.erl lib/ssl/src/ssl_handshake.erl | |||
2017-12-05 | ssl: Use maps for cipher suites internally | Ingela Anderton Andin | |
This is a preparation for improvements to come in option handling and support for TLS-1.3 | |||
2017-09-20 | Merge branch 'maint' | Ingela Anderton Andin | |
2017-09-20 | public_key, ssl: Provide certitifate test data generation function in public_key | Ingela Anderton Andin | |
The ssl application uses the new function in many of its test cases. | |||
2017-09-11 | Merge branch 'maint' | Ingela Anderton Andin | |
2017-09-11 | ssl: OpenSSL-1.0.0 is really broken | Ingela Anderton Andin | |
Add exception for DTLS (not only TLS) against this broken version. Make sure configuration is clean for default test group. | |||
2017-09-06 | Merge branch 'maint' | Lukas Larsson | |
2017-09-01 | ssl: Make sure test initilization is clean | Ingela Anderton Andin | |
Otherwhise test can be wrongly initialized and will fail as they try to run with a broken setup. | |||
2017-08-24 | Merge branch 'maint' | Ingela Anderton Andin | |
2017-08-23 | ssl: Enable more DTLS tests | Ingela Anderton Andin | |
Problems with failure of ssl_certificate_verify_SUITE when enabling DTLS-1 tests in ssl_basic_SUITE was a combination of the bug fixed by the previous commit and missing clean up code for dtls_protocol_versions application environment variable | |||
2017-08-22 | Merge pull request #1518 from RoadRunnr/R20/ssl_anon_certs | Ingela Andin | |
RFC: ecdhe_psk cipher suites OTP-14547 | |||
2017-08-15 | Merge pull request #1532 from ↵ | Ingela Andin | |
angelhof/public_key/generate_key-rsa-inconsistency-fix public_key:generate_key/1 RSA key generation inconsistency OTP-14534 | |||
2017-08-11 | Merge branch 'ingela/ssl/cert-handling' into maint | Ingela Anderton Andin | |
* ingela/ssl/cert-handling: ssl: Correct cipher suite handling ssl: Modernize DSA cert chain generation ssl: Clean ssl: Remove test of OpenSSL ssl: Use new cert generation | |||
2017-08-10 | Merge branch 'ingela/dtls/cuddle' into maint | Ingela Anderton Andin | |
* ingela/dtls/cuddle: ssl: Handle OpenSSL output correctly | |||
2017-08-10 | ssl: Correct cipher suite handling | Ingela Anderton Andin | |
This is mainly fixing the test suites so that they test the intended cipher suites, issue reported in ERL-460. Also ssl_cipher:anonymous_suites was corrected for DTLS. | |||
2017-08-09 | ssl: Modernize DSA cert chain generation | Ingela Anderton Andin | |
2017-08-08 | ssl: Handle OpenSSL output correctly | Ingela Anderton Andin | |
Adjust to handle output from OpenSSL in a more general way, so that "unknown option" should be caught for all cases and the test case skipped if that is the case and other data form OpenSSL should be ignored. | |||
2017-08-08 | ssl: Clean | Ingela Anderton Andin | |
This code was not used and we already have mixed chains ECDH_RSA tests | |||
2017-08-08 | ssl: Use new cert generation | Ingela Anderton Andin | |
2017-07-28 | Change version of hardcoded RSA test records | Konstantinos Kallas | |
2017-07-21 | ssl: add ECDHE_PSK cipher suites | Andreas Schultz | |
2017-06-29 | ssl: Move clause so that it will match | Ingela Anderton Andin | |
2017-06-27 | ssl: Skip sslv2 hello compatible tests on OpenSSL-0.9.8o | Ingela Anderton Andin | |
The -ssl2 option to s_client appears to be broken on this release. This is a legacy option anyway that is still tested on other old version of OpenSSL so skip this. | |||
2017-06-26 | ssl: Skip sslv3 interop with newer OpenSSL | Ingela Anderton Andin | |