Age | Commit message (Collapse) | Author | |
---|---|---|---|
2019-06-12 | Merge branch 'peterdmv/ssl/dtls-test-fix' into maint | Péter Dimitrov | |
* peterdmv/ssl/dtls-test-fix: ssl: Fix ssl_packet_SUITE | |||
2019-06-12 | ssl: Fix ssl_packet_SUITE | Péter Dimitrov | |
Unset internal_active_n when cleaning FT environment. | |||
2019-06-11 | Merge pull request #2276 from peterdmv/ssl/tls13-alpn | Péter Dimitrov | |
Implement ALPN in TLS 1.3 | |||
2019-06-10 | Merge branch 'ingela/ssl/dtls-multiplxor/ERL-962/OTP-15864' into maint | Ingela Anderton Andin | |
* ingela/ssl/dtls-multiplxor/ERL-962/OTP-15864: ssl: Add missing gen_server return value in DTLS packet demux process | |||
2019-06-07 | ssl: Add missing gen_server return value in DTLS packet demux process | Ingela Anderton Andin | |
2019-06-07 | ssl: Fix alert handling (TLS 1.3) | Péter Dimitrov | |
Server and client use different secrets when sending certificate related alerts. This is due to a change to the TLS protocol where clients send their 'certificate' message after they have received the server's 'finished' message. | |||
2019-06-07 | ssl: Add tests for ALPN in TLS 1.3 | Péter Dimitrov | |
2019-06-07 | ssl: Add TLS 1.3 test group to ssl_certificate_verify_SUITE | Péter Dimitrov | |
2019-06-07 | ssl: Fix negative tests in ssl_basic_SUITE | Péter Dimitrov | |
2019-05-31 | ssl: Fix broken return value | Ingela Anderton Andin | |
2019-05-28 | Merge branch 'ingela/ssl/alert-strings/OTP-15844' into maint | Ingela Anderton Andin | |
2019-05-28 | ssl: Returned "alert error string" should be same as logged alert string | Ingela Anderton Andin | |
2019-05-23 | ssl: Add openssl interop test for TLS 1.3 client | Péter Dimitrov | |
2019-05-22 | ssl: Implement hello_retry_request (client) | Péter Dimitrov | |
2019-05-21 | ssl: Implement peer verification | Péter Dimitrov | |
2019-05-21 | ssl: Add tests for TLS 1.3 client | Péter Dimitrov | |
2019-05-15 | ssl: Add test cases for issue reported in ERL-938 | Ingela Anderton Andin | |
2019-05-08 | ssl: Add test cases for issue reported in ERL-938 | Ingela Anderton Andin | |
2019-05-08 | Merge branch 'raimo/inet_crypto_dist' | Raimo Niskanen | |
* raimo/inet_crypto_dist: Rekey also the shared secret Use shared secret to rekey Cycle the keypair by time and count Set socket buffer sizes to avoid handshake deadlock Keep the keypair for the node's lifetime Implement some kind of PEKE to get forward secrecy Use incrementing IV Use Erlang cookie as shared secret | |||
2019-05-08 | Rekey also the shared secret | Raimo Niskanen | |
2019-05-07 | Merge branch 'ingela/ssl/openssl-test-cuddle' | Ingela Anderton Andin | |
* ingela/ssl/openssl-test-cuddle: ssl: Add necessary compliance check | |||
2019-05-07 | ssl: Add cipher suite convertion functions | Ingela Anderton Andin | |
2019-05-06 | ssl: Add necessary compliance check | Ingela Anderton Andin | |
2019-05-03 | Use shared secret to rekey | Raimo Niskanen | |
2019-05-03 | Cycle the keypair by time and count | Raimo Niskanen | |
2019-05-03 | Set socket buffer sizes to avoid handshake deadlock | Raimo Niskanen | |
2019-05-03 | ssl: Add new interop test suite | Ingela Anderton Andin | |
Remove test form "ECC suites" that are covered by the new interop suite or by the fairly new ssl_cipher_suite_SUITE. | |||
2019-05-03 | ssl: Use diffrent digest for some TLS/DTLS versions | Ingela Anderton Andin | |
2019-04-30 | ssl: Update function ssl:eccs/1 | Péter Dimitrov | |
Remove support of version tuples (e.g. {3,3}) from API function ssl:eccs/1. Update function spec and documentation. Change-Id: I891e42a2ca31c3e06b4edeeb866c0df874f2035b Conflicts: lib/ssl/doc/src/ssl.xml lib/ssl/src/ssl.erl | |||
2019-04-30 | ssl: Fix dialyzer warnings | Péter Dimitrov | |
Change-Id: Ic4895195569073916f158a06b95061939f15cfc0 Conflicts: lib/ssl/doc/src/ssl.xml lib/ssl/src/ssl.erl | |||
2019-04-24 | ssl: Update function ssl:eccs/1 | Péter Dimitrov | |
Remove support of version tuples (e.g. {3,3}) from API function ssl:eccs/1. Update function spec and documentation. Change-Id: I891e42a2ca31c3e06b4edeeb866c0df874f2035b | |||
2019-04-23 | Merge branch 'peterdmv/ssl/doc-types-and-specs/OTP-15746' | Péter Dimitrov | |
* peterdmv/ssl/doc-types-and-specs/OTP-15746: ssl: Add type specs for http_packet() ssl: Fix type specs of ssl_internal.hrl ssl: Fix type specs of internal handshake functions ssl: Fix dialyzer warnings eldap: Fix dialyzer warnings ssl: Fix missing anchor warning public_key: Accept digest types 'sha1' and 'sha' inet: Document type inet:stat_option() ssl: Changed function specs and ssl.xml ssl: Update standards_compliance.xml OTP-15775 OTP-15776 OTP-15777 Change-Id: Ibe8e8263d6557eaa40cc0681a7ce3fcb373a4120 | |||
2019-04-18 | Keep the keypair for the node's lifetime | Raimo Niskanen | |
2019-04-18 | ssl: Fix dialyzer warnings | Péter Dimitrov | |
Change-Id: Ic4895195569073916f158a06b95061939f15cfc0 | |||
2019-04-17 | Implement some kind of PEKE to get forward secrecy | Raimo Niskanen | |
2019-04-12 | ssl: Add functions to convert between diffrent cipher suite formats | Ingela Anderton Andin | |
2019-04-09 | Use incrementing IV | Raimo Niskanen | |
2019-04-05 | ssl: Do not use broken OpenSSL clients | Ingela Anderton Andin | |
Also remove dead code | |||
2019-04-05 | ssl: Correct test input | Ingela Anderton Andin | |
2019-04-05 | ssl: Avoid hiding fault reason as timeout | Ingela Anderton Andin | |
Use of rpc:call could hide the real crash reason | |||
2019-04-05 | ssl: sslv2 clients rejected in new way as sslv2 hello compatibility is dropped | Ingela Anderton Andin | |
2019-04-03 | Use Erlang cookie as shared secret | Raimo Niskanen | |
* Remove all configuration possibilities, so use the cookie as secret * Clean up error handling to make the module a more complete dist module * Change the init message to use length fields instead of zero termination * Remove the dependency towards modern crypto so it should run on maint | |||
2019-04-03 | ssl: Run SNI test on specific TLS versions | Ingela Anderton Andin | |
We do not want to test OpenSSL default values as the may not agree with our defaults. | |||
2019-04-02 | Merge branch 'ingela/ssl/upgrade-cuddle' | Ingela Anderton Andin | |
* ingela/ssl/upgrade-cuddle: ssl: Upgrade cert generation for upgrade test | |||
2019-04-02 | ssl: Upgrade cert generation for upgrade test | Ingela Anderton Andin | |
2019-04-01 | Merge branch 'raimo/ssl/tls-dist-fun-day/OTP-14792' | Raimo Niskanen | |
* raimo/ssl/tls-dist-fun-day/OTP-14792: Skip all benchmark groups Benchmark report relative core load Improve printouts Polish sched util benchmark Improve printouts Dist handshake with nodelay Implement inet_crypto_dist benchmark example | |||
2019-03-29 | Skip all benchmark groups | Raimo Niskanen | |
2019-03-29 | ssl: Add support AES_CCM cipher suites form RFC 6655 | Ingela Anderton Andin | |
2019-03-29 | Benchmark report relative core load | Raimo Niskanen | |
2019-03-29 | Improve printouts | Raimo Niskanen | |