Age | Commit message (Collapse) | Author | |
---|---|---|---|
2019-06-12 | Merge branch 'peterdmv/ssl/dtls-test-fix' into maint-22 | Erlang/OTP | |
* peterdmv/ssl/dtls-test-fix: ssl: Fix ssl_packet_SUITE | |||
2019-06-12 | Merge branch 'ingela/ssl/dtls-multiplxor/ERL-962/OTP-15864' into maint-22 | Erlang/OTP | |
* ingela/ssl/dtls-multiplxor/ERL-962/OTP-15864: ssl: Add missing gen_server return value in DTLS packet demux process | |||
2019-06-12 | Merge branch 'ingela/ssl/ret-ext/ERL-951/OTP-15862' into maint-22 | Erlang/OTP | |
* ingela/ssl/ret-ext/ERL-951/OTP-15862: ssl: Fix broken return value | |||
2019-06-12 | ssl: Fix ssl_packet_SUITE | Péter Dimitrov | |
Unset internal_active_n when cleaning FT environment. | |||
2019-06-07 | ssl: Add missing gen_server return value in DTLS packet demux process | Ingela Anderton Andin | |
2019-06-05 | ssl: Fix broken return value | Ingela Anderton Andin | |
2019-06-04 | ssl: Returned "alert error string" should be same as logged alert string | Ingela Anderton Andin | |
2019-05-15 | ssl: Add test cases for issue reported in ERL-938 | Ingela Anderton Andin | |
2019-05-08 | Merge branch 'raimo/inet_crypto_dist' | Raimo Niskanen | |
* raimo/inet_crypto_dist: Rekey also the shared secret Use shared secret to rekey Cycle the keypair by time and count Set socket buffer sizes to avoid handshake deadlock Keep the keypair for the node's lifetime Implement some kind of PEKE to get forward secrecy Use incrementing IV Use Erlang cookie as shared secret | |||
2019-05-08 | Rekey also the shared secret | Raimo Niskanen | |
2019-05-07 | Merge branch 'ingela/ssl/openssl-test-cuddle' | Ingela Anderton Andin | |
* ingela/ssl/openssl-test-cuddle: ssl: Add necessary compliance check | |||
2019-05-07 | ssl: Add cipher suite convertion functions | Ingela Anderton Andin | |
2019-05-06 | ssl: Add necessary compliance check | Ingela Anderton Andin | |
2019-05-03 | Use shared secret to rekey | Raimo Niskanen | |
2019-05-03 | Cycle the keypair by time and count | Raimo Niskanen | |
2019-05-03 | Set socket buffer sizes to avoid handshake deadlock | Raimo Niskanen | |
2019-05-03 | ssl: Add new interop test suite | Ingela Anderton Andin | |
Remove test form "ECC suites" that are covered by the new interop suite or by the fairly new ssl_cipher_suite_SUITE. | |||
2019-05-03 | ssl: Use diffrent digest for some TLS/DTLS versions | Ingela Anderton Andin | |
2019-04-24 | ssl: Update function ssl:eccs/1 | Péter Dimitrov | |
Remove support of version tuples (e.g. {3,3}) from API function ssl:eccs/1. Update function spec and documentation. Change-Id: I891e42a2ca31c3e06b4edeeb866c0df874f2035b | |||
2019-04-23 | Merge branch 'peterdmv/ssl/doc-types-and-specs/OTP-15746' | Péter Dimitrov | |
* peterdmv/ssl/doc-types-and-specs/OTP-15746: ssl: Add type specs for http_packet() ssl: Fix type specs of ssl_internal.hrl ssl: Fix type specs of internal handshake functions ssl: Fix dialyzer warnings eldap: Fix dialyzer warnings ssl: Fix missing anchor warning public_key: Accept digest types 'sha1' and 'sha' inet: Document type inet:stat_option() ssl: Changed function specs and ssl.xml ssl: Update standards_compliance.xml OTP-15775 OTP-15776 OTP-15777 Change-Id: Ibe8e8263d6557eaa40cc0681a7ce3fcb373a4120 | |||
2019-04-18 | Keep the keypair for the node's lifetime | Raimo Niskanen | |
2019-04-18 | ssl: Fix dialyzer warnings | Péter Dimitrov | |
Change-Id: Ic4895195569073916f158a06b95061939f15cfc0 | |||
2019-04-17 | Implement some kind of PEKE to get forward secrecy | Raimo Niskanen | |
2019-04-12 | ssl: Add functions to convert between diffrent cipher suite formats | Ingela Anderton Andin | |
2019-04-09 | Use incrementing IV | Raimo Niskanen | |
2019-04-05 | ssl: Do not use broken OpenSSL clients | Ingela Anderton Andin | |
Also remove dead code | |||
2019-04-05 | ssl: Correct test input | Ingela Anderton Andin | |
2019-04-05 | ssl: Avoid hiding fault reason as timeout | Ingela Anderton Andin | |
Use of rpc:call could hide the real crash reason | |||
2019-04-05 | ssl: sslv2 clients rejected in new way as sslv2 hello compatibility is dropped | Ingela Anderton Andin | |
2019-04-03 | Use Erlang cookie as shared secret | Raimo Niskanen | |
* Remove all configuration possibilities, so use the cookie as secret * Clean up error handling to make the module a more complete dist module * Change the init message to use length fields instead of zero termination * Remove the dependency towards modern crypto so it should run on maint | |||
2019-04-03 | ssl: Run SNI test on specific TLS versions | Ingela Anderton Andin | |
We do not want to test OpenSSL default values as the may not agree with our defaults. | |||
2019-04-02 | Merge branch 'ingela/ssl/upgrade-cuddle' | Ingela Anderton Andin | |
* ingela/ssl/upgrade-cuddle: ssl: Upgrade cert generation for upgrade test | |||
2019-04-02 | ssl: Upgrade cert generation for upgrade test | Ingela Anderton Andin | |
2019-04-01 | Merge branch 'raimo/ssl/tls-dist-fun-day/OTP-14792' | Raimo Niskanen | |
* raimo/ssl/tls-dist-fun-day/OTP-14792: Skip all benchmark groups Benchmark report relative core load Improve printouts Polish sched util benchmark Improve printouts Dist handshake with nodelay Implement inet_crypto_dist benchmark example | |||
2019-03-29 | Skip all benchmark groups | Raimo Niskanen | |
2019-03-29 | ssl: Add support AES_CCM cipher suites form RFC 6655 | Ingela Anderton Andin | |
2019-03-29 | Benchmark report relative core load | Raimo Niskanen | |
2019-03-29 | Improve printouts | Raimo Niskanen | |
2019-03-29 | Polish sched util benchmark | Raimo Niskanen | |
2019-03-29 | ssl: Correct test case | Ingela Anderton Andin | |
Optimization to concatenate small user data packages recived closely after each other has invalidated assumptions in the test case. | |||
2019-03-29 | ssl: Remove test cases from ssl_basic_SUITE | Ingela Anderton Andin | |
The test are moved to ssl_cipher_suite_SUITE | |||
2019-03-29 | ssl: Remove basic test group from ssl_to_openssl_SUITE | Ingela Anderton Andin | |
This group has started to fail as our default has diverged from OpenSSL defaults and we are not really interested in testing OpenSSL defaults. | |||
2019-03-28 | Improve printouts | Raimo Niskanen | |
2019-03-28 | Implement inet_crypto_dist benchmark example | Raimo Niskanen | |
This is a simplistic distribution protocol module for encrypted distribution using a shared secret and only the crypto module, and AEAD ciphers. It is intended to be a benchmark reference for how fast encrypted distribution may get. How secure it would be and also how useful, for actual production use, remains to be investigated. | |||
2019-03-24 | ssl: Enhance testing | Ingela Anderton Andin | |
2019-03-22 | Merge branch 'ingela/ssl/default-supported-versions/OTP-14865' | Ingela Anderton Andin | |
* ingela/ssl/default-supported-versions/OTP-14865: ssl: Remove default support for legacy versions | |||
2019-03-21 | Merge branch 'peterdmv/ssl/tls13-conn-info' | Péter Dimitrov | |
* peterdmv/ssl/tls13-conn-info: ssl: Fix ssl:connection_information/1 in TLS 1.3 Change-Id: I492b0973bb4ee44354edf22ed3bc2a6e5c7b90c5 | |||
2019-03-21 | ssl: Remove default support for legacy versions | Ingela Anderton Andin | |
TLS-1.0, TLS-1.1 and DTLS-1.0 are now considered legacy | |||
2019-03-19 | Merge branch 'maint' | Ingela Anderton Andin | |
Conflicts: lib/ssl/src/ssl.erl lib/ssl/src/tls_connection.erl | |||
2019-03-18 | ssl: Fix ssl:connection_information/1 in TLS 1.3 | Péter Dimitrov | |
Store cipher suite information in session record. Test ssl:connection_information/1 in a TLS 1.3 connection. Change-Id: I7193e6dd2544540e446b5777b5768806cecf2bd3 |