Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-02-14 | ssl: Add test for avoiding a version and chipher suite missmatch | Ingela Anderton Andin | |
2014-02-14 | Fix edoc usage errors | Pierre Fenoll | |
Errors discovered using `erldocs`: Superfluous @hidden tag would exit edoc application; 'Multiple @spec tag': appended a @clear tag after macro condition; '@spec arity does not match': added missing argument. | |||
2014-02-10 | Merge branch 'ia/public_key/specs' | Ingela Anderton Andin | |
* ia/public_key/specs: public_key: Export some dialyzer types | |||
2014-02-06 | public_key: Export some dialyzer types | Ingela Anderton Andin | |
Move dilayzer types from include file to erl file and use -export_type | |||
2014-02-06 | ssl: Unicode adaptions | Ingela Anderton Andin | |
2014-01-29 | ssl: Add workaround in test code for openssl s_client bug | Ingela Anderton Andin | |
2014-01-28 | ssl: use is_boolean/1 guard in option validation | Andreas Schultz | |
2014-01-28 | Fix incorrect type reference (inet:ipaddress() -> inet:ip_address()) | Tuncer Ayaz | |
2014-01-28 | Fix incorrect use of public_key:private_key/0 type | Tuncer Ayaz | |
public_key:private_key/0 was referenced but undefined, and lib/ssl had a local definition of private_key/0. To fix that, make the following changes: * add public_key:private_key/0 type * document public_key/0 and private_key/0 * fix incorrect definitions and references | |||
2014-01-28 | Merge branch 'ia/ssl/tests' | Ingela Anderton Andin | |
* ia/ssl/tests: ssl: Avoid test case timing issues | |||
2014-01-28 | Merge branch 'ia/Vagabond/adt-honor-cipher-order/OTP-11621' | Ingela Anderton Andin | |
* ia/Vagabond/adt-honor-cipher-order/OTP-11621: Implement 'honor_cipher_order' SSL server-side option | |||
2014-01-27 | ssl: Avoid test case timing issues | Ingela Anderton Andin | |
2014-01-24 | Merge tag 'OTP_R16B03-1' | Magnus Lidén | |
The R16B03-1 release | |||
2014-01-24 | Prepare releaseOTP_R16B03-1 | Erlang/OTP | |
2014-01-24 | Merge branch 'maint' | Ingela Anderton Andin | |
Conflicts: otp_build | |||
2014-01-22 | ssl: Incorrect inputed cipherlist lead server to think that the client | Ingela Anderton Andin | |
did not support secure renegotiation | |||
2014-01-22 | Merge branch 'dgud/test_unicode/OTP-10877' | Dan Gudmundsson | |
* dgud/test_unicode/OTP-10877: sasl test: Quote executable paths (can contain spaces) rt_tools: Handle unicode chars in printouts kernel: code_SUITE fix unicode option Fix (unicode) debug info in test cases stdlib: Fix format if module resides in a unicode directory Fix testing with unicode paths test_server: Fix ts write unicode in config files | |||
2014-01-21 | Implement 'honor_cipher_order' SSL server-side option | Andrew Thompson | |
HonorCipherOrder as implemented in Apache, nginx, lighttpd, etc. This instructs the server to prefer its own cipher ordering rather than the client's and can help protect against things like BEAST while maintaining compatability with clients which only support older ciphers. This code is mostly written by Andrew Thompson, only the test case was added by Andreas Schultz. | |||
2014-01-21 | Merge branch 'ia/ssl/openssl-reneogtiation-bug' | Ingela Anderton Andin | |
* ia/ssl/openssl-reneogtiation-bug: ssl: Add versions to check for sane OpenSSL version for renegotiation | |||
2014-01-21 | Merge remote-tracking branch 'upstream/maint' | Ingela Anderton Andin | |
2014-01-21 | Fix (unicode) debug info in test cases | Dan Gudmundsson | |
2014-01-15 | ssl: Prepare for release | Ingela Anderton Andin | |
2014-01-14 | ssl: fix elliptic curve selection in server mode | Andreas Schultz | |
The server code erroneously took the list of curves supported by the client from it's own hello extension, effectively breaking curve selection all together. Also the default fallback secp256k1 curve is not supported by all clients. secp256r1 is recommended as part of the NIST Suite B cryptographic suites. The chances are much better that all clients support it, so use that as fallback. | |||
2014-01-14 | ssl: Prepare for release | Ingela Anderton Andin | |
2014-01-14 | ssl: Add missing options validation of server_name_indication | Ingela Anderton Andin | |
2014-01-14 | ssl: Add versions to check for sane OpenSSL version for renegotiation | Ingela Anderton Andin | |
2014-01-13 | crypto: selective support for GF2m curves | Andreas Schultz | |
Newer OpenSSL versions allow to selectively disable GF2m elliptic curves. Selectively enable GF2m curves is support for them is available. | |||
2014-01-13 | ssl: add brainpool elliptic curves to TLS (RFC-7027) | Andreas Schultz | |
2013-12-10 | Merge tag 'OTP_R16B03' | Magnus Lidén | |
The R16B03 release Conflicts: lib/sasl/vsn.mk | |||
2013-12-09 | Prepare releaseOTP_R16B03 | Erlang/OTP | |
2013-12-02 | Merge branch 'maint' | Ingela Anderton Andin | |
2013-12-02 | ssl: Trap exits | Ingela Anderton Andin | |
2013-12-02 | ssl: Refactor connetion handling | Ingela Anderton Andin | |
2013-12-02 | ssl: API and supervisor | Ingela Anderton Andin | |
2013-12-02 | ssl: Dialyzer fixes | Ingela Anderton Andin | |
2013-12-02 | ssl: Test case enhancement | Ingela Anderton Andin | |
Make sure that test cases does not fail due to timing circumstances, use selective receive even if it means we can not use test library functions in some cases. TCP does not have delivery guarantee to application layer, so sometimes a error message {error, Msg} or {error, closed} can be acceptable. | |||
2013-12-02 | ssl: Refactor API | Ingela Anderton Andin | |
New design : ssl - Main tls - Reflect tls specific semantics dtls - Reflect dtls specific semantics | |||
2013-12-02 | ssl, public_key: Dialyzer fixes | Ingela Anderton Andin | |
2013-12-02 | ssl: Refactor premaster secret handling | Ingela Anderton Andin | |
2013-12-02 | ssl: Refactor connection and handshake handling | Ingela Anderton Andin | |
2013-12-02 | ssl: Refactor handshake and record handling | Ingela Anderton Andin | |
2013-11-20 | Merge branch 'maint' | Hans Nilsson | |
2013-11-19 | ftp,ssl: Fixes broken type link (ssloption). | Hans Nilsson | |
2013-11-11 | Merge branch 'maint' | Fredrik Gustafsson | |
2013-11-06 | Update documentation | Julien Barbot | |
2013-11-06 | Add a new server_name_indication option to ssl:connect | Julien Barbot | |
- Set to disable to explicitly disable SNI support. - Set to a hostname when upgrading from TCP to TLS. | |||
2013-11-06 | Add SSL Server Name Indication (SNI) client support | Julien Barbot | |
See RFC 6066 section 3 | |||
2013-11-04 | Merge branch 'maint' | Fredrik Gustafsson | |
2013-11-01 | Fix client_preferred_next_protocols documentation | Julien Barbot | |
2013-10-31 | Merge branch 'maint' | Fredrik Gustafsson | |