Age | Commit message (Collapse) | Author | |
---|---|---|---|
2018-04-30 | ssl: Avoid hardcoding of cipher suites and fix ECDH suite handling | Ingela Anderton Andin | |
ECDH suite handling did not use the EC parameters form the certs as expected. | |||
2018-04-30 | ssl: Run all test case combinations | Ingela Anderton Andin | |
Fix test case code to use keyAgreement for ECDH_ECDSA | |||
2018-04-28 | ssl: Update tests to reflect sslv3 is not supported by default | Ingela Anderton Andin | |
2018-04-27 | Merge branch 'raimo/better-TLS-distribution/OTP-14969' | Raimo Niskanen | |
* raimo/better-TLS-distribution/OTP-14969: Fix distro CRL test cases short vs long names Allow check for node name Move check ip to before SSL handshake Check client IP from server Parse cert primarily for host names Open for host and node allow list Create plug-in for distro cert nodes Rewrite TLS dist to handle node names in certs Improve node allowed check | |||
2018-04-27 | Merge branch 'ingela/ssl/test-cuddle' | Ingela Anderton Andin | |
* ingela/ssl/test-cuddle: ssl: Handle EXIT messages from test code correctly | |||
2018-04-27 | Fix distro CRL test cases short vs long names | Raimo Niskanen | |
2018-04-26 | ssl: Proper handling of clients that choose to send an empty | Ingela Anderton Andin | |
answer to a certificate request Solves ERL-599 | |||
2018-04-26 | Allow check for node name | Raimo Niskanen | |
2018-04-26 | Move check ip to before SSL handshake | Raimo Niskanen | |
2018-04-26 | Check client IP from server | Raimo Niskanen | |
2018-04-24 | ssl: Add new API functions | Ingela Anderton Andin | |
2018-04-24 | ssl: Prepare to replace ssl:ssl_accept with ssl:handshake | Ingela Anderton Andin | |
2018-04-24 | Parse cert primarily for host names | Raimo Niskanen | |
2018-04-20 | Create plug-in for distro cert nodes | Raimo Niskanen | |
2018-04-19 | Rewrite TLS dist to handle node names in certs | Raimo Niskanen | |
2018-03-27 | ssl: Cleaner test setup to avoid unintentional test case dependencies | Ingela Anderton Andin | |
2018-03-27 | ssl: Correct ECC suite and DTLS ECC handling | Ingela Anderton Andin | |
When test handling was corrected it was obvious that DTLS ECC handling was not compleated. | |||
2018-03-16 | ssl: Handle EXIT messages from test code correctly | Ingela Anderton Andin | |
2018-03-09 | ssl: Remove interoperability option v2_hello_compatible | Ingela Anderton Andin | |
2018-03-08 | Merge branch 'ingela/ssl/no-automated-fallback/OTP-14789' | Ingela Anderton Andin | |
2018-03-08 | ssl: Increase security with safer default | Ingela Anderton Andin | |
The interoperability option to fallback to insecure renegotiation now has to be explicitly turned on. | |||
2018-03-06 | Merge branch 'maint' | Ingela Anderton Andin | |
2018-03-06 | ssl: Fix anonymous suites regression and protocol error | Bram Verburg | |
Anonymous cipher suites were broken altogether, and there was an earlier issue where the server would send a signature in the server key exchange if a certificate was configured, even if an anonymous suite was actually negotiated. Backport of PR-1729 | |||
2018-03-06 | Merge branch 'maint' | Anders Svensson | |
2018-03-05 | [ssl] Fix hanging test case on outdated lab machine | Lars Thorsen | |
2018-02-07 | Merge branch 'maint' | Ingela Anderton Andin | |
Conflicts: lib/ssl/doc/src/ssl.xml lib/ssl/src/ssl.erl lib/ssl/src/ssl_cipher.erl lib/ssl/test/ssl_basic_SUITE.erl lib/ssl/test/ssl_test_lib.erl | |||
2018-02-07 | ssl: Make sure anonymous suites are handled separately | Ingela Anderton Andin | |
Preferably customized cipher suites will be based on the default value. But all may be used as base and hence it will be good to handle anonymous suites separately as they are intended for testing purposes. | |||
2018-02-05 | ssl: Add new API functions for cipher suite handling | Ingela Anderton Andin | |
2018-01-26 | Merge branch 'maint' | Ingela Anderton Andin | |
2018-01-25 | Merge branch 'ingela/DTLS-supported' | Ingela Anderton Andin | |
* ingela/DTLS-supported: ssl: Fix typo dtls: Add DTLS handling to utility functions ssl: Document enhancment ssl: Document DTLS | |||
2018-01-25 | ssl: Check OpenSSL version for DSS (DSA) support | Ingela Anderton Andin | |
LibreSSL-2.6.3 dropped DSS (DSA) support | |||
2018-01-24 | Merge branch 'maint' | Ingela Anderton Andin | |
2018-01-23 | ssl: Add record version sanity check | Ingela Anderton Andin | |
2018-01-22 | Merge branch 'ingela/ssl/no-chacha-default-for-now/ERL-538/OTP-14882' | Ingela Anderton Andin | |
* ingela/ssl/no-chacha-default-for-now/ERL-538/OTP-14882: ssl: Remove chacha ciphers form default for now | |||
2018-01-22 | ssl: Remove chacha ciphers form default for now | Ingela Anderton Andin | |
We have discovered interoperability problems, ERL-538, that we believe needs to be solved in crypto. | |||
2018-01-19 | ssl: Remove 3DES cipher suites from default | Ingela Anderton Andin | |
2018-01-17 | dtls: Add DTLS handling to utility functions | Ingela Anderton Andin | |
2018-01-16 | Merge branch 'ingela/ssl/remove-rsa-keyexchange-from-default/OTP-14769' | Ingela Anderton Andin | |
* ingela/ssl/remove-rsa-keyexchange-from-default/OTP-14769: ssl: RSA key exchange is considered broken do not support by default | |||
2018-01-16 | ssl: RSA key exchange is considered broken do not support by default | Ingela Anderton Andin | |
2018-01-15 | Merge branch 'maint' | Ingela Anderton Andin | |
* maint: ssl: Call clean version function | |||
2018-01-15 | ssl: Call clean version function | Ingela Anderton Andin | |
Make sure tests are run with intended version settings. | |||
2018-01-11 | Merge branch 'maint' | Ingela Anderton Andin | |
2018-01-11 | Merge branch 'ingela/ssl/timeout-cuddle' into maint | Ingela Anderton Andin | |
* ingela/ssl/timeout-cuddle: ssl: Tune timeouts | |||
2018-01-11 | ssl: Tune timeouts | Ingela Anderton Andin | |
2018-01-09 | Merge branch 'maint' | Ingela Anderton Andin | |
2018-01-07 | dtls: Filter out rc4 for DTLS psk suites | Ingela Anderton Andin | |
Stream ciphers are not valid fro DTLS | |||
2018-01-06 | dtls: We do not need to wait for DTLS over UDP server | Ingela Anderton Andin | |
Client will retransmit until server becomes responsive | |||
2017-12-20 | Merge branch 'raimo/ssl-dist-bench/OTP-14657' | Raimo Niskanen | |
* raimo/ssl-dist-bench/OTP-14657: Skip ssl_bench_SUITE, normally | |||
2017-12-12 | Skip ssl_bench_SUITE, normally | Raimo Niskanen | |
2017-12-05 | Merge branch 'maint' | Ingela Anderton Andin | |
Conflicts: lib/ssl/src/ssl_cipher.erl lib/ssl/src/ssl_handshake.erl |