aboutsummaryrefslogtreecommitdiffstats
path: root/lib
AgeCommit message (Collapse)Author
2010-09-29Prepare releaseErlang/OTP
2010-09-29Merge branch 'ia/ssl-and-public_key/verify_fun_peer_awarness/OTP-8873' into ↵Erlang/OTP
maint-r14 * ia/ssl-and-public_key/verify_fun_peer_awarness/OTP-8873: Peer awarness
2010-09-29Merge branch 'ia/public_key/basic_constraints/OTP-8867' into maint-r14Erlang/OTP
* ia/public_key/basic_constraints/OTP-8867: Better handling of v1 and v2 certificates.
2010-09-29Peer awarnessIngela Anderton Andin
Changed the verify fun so that it differentiate between the peer certificate and CA certificates by using valid_peer or valid as the second argument to the verify fun. It may not always be trivial or even possible to know when the peer certificate is reached otherwise.
2010-09-28Better handling of v1 and v2 certificates.Ingela Anderton Andin
V1 and v2 certificates does not have any extensions so then validate_extensions should just accept that there are none and not end up in missing_basic_constraints clause.
2010-09-24Backwards compatibilityIngela Anderton Andin
Changed implementation to retain backwards compatibility for old option {verify, 0} that shall be equivalent to {verify, verify_none}, also separate the cases unknown CA and selfsigned peer cert, and restored return value of deprecated function public_key:pem_to_der/1.
2010-09-13Prepare releaseOTP_R14BErlang/OTP
2010-09-13Merge branch 'bmk/inets/prepare_for_r14b' of ../bmk_otp into devErlang/OTP
* 'bmk/inets/prepare_for_r14b' of ../bmk_otp: Prepare release for inets-5.5 (R14B).
2010-09-13Merge branch 'bmk/snmp/prepare_for_r14b' of ../bjorn_otp into devErlang/OTP
* 'bmk/snmp/prepare_for_r14b' of ../bjorn_otp: Prepare for R14B
2010-09-13Prepare release for inets-5.5 (R14B).Micael Karlberg
2010-09-13Prepare for R14BMicael Karlberg
2010-09-13Prepare release of megaco-3.15 (R14B)Micael Karlberg
2010-09-13Merge branch 'pan/epmd-vulnerabilities/OTP-8780' into devPatrik Nyblom
* pan/epmd-vulnerabilities/OTP-8780: Teach testcases to survive TIME_WAIT overload Update erl_interface doc and testsuite for epmd changes Restore null termination of input buffer Teach testcase epmd_SUITE:too_large to accept econnaborted Teach epmd_cli.c to not respond 'Killed' when killing denied Calculate minimal packet size for ALIVE2 requests correctly Document epmd and it's options properly and fixup help text Fix anomalies in epmd not yet reported as security issues Remove two buffer overflow vulnerabilities in EPMD Remove all support for ancient EPMD protocol Remove very old protocol from EPMD Conflicts: lib/erl_interface/src/epmd/epmd_port.c
2010-09-13Merge branch 'sv/ei-writev' into devBjörn-Egil Dahlberg
* sv/ei-writev: fix incorrect writev iovec buffer handling in ei OTP-8837
2010-09-13Teach Winsock initialization to be thread safePatrik Nyblom
2010-09-13Make ei_threaded_send synchronizedPatrik Nyblom
2010-09-13Increase timeout value in ei_accept_SUITEPatrik Nyblom
2010-09-13Teach ei_accept_SUITE to wait for node publish instead of using random sleepsPatrik Nyblom
2010-09-13Add line macros to gen_udp_SUITE:connectPatrik Nyblom
2010-09-13Merge branch 'egil/ei/fix-declspec/OTP-8826' into devBjörn-Egil Dahlberg
* egil/ei/fix-declspec/OTP-8826: Remove USE_DECLSPEC_THREAD from erl_interface
2010-09-13Merge branch 'ia/public_key-subject-alternative-name/OTP-8825' into devIngela Anderton Andin
* ia/public_key-subject-alternative-name/OTP-8825: Improved certificate extension handling Add handling of SubjectAltName of type otherName
2010-09-11fix incorrect writev iovec buffer handling in eiSteve Vinoski
For platforms that support writev, ei uses iovec structures to be able to easily send noncontiguous data buffers. When sending large messages, the socket can of course block, in which case ei adjusts its iovecs to pick up where it left off when the socket becomes writeable again. Unfortunately the code that handled the case when the number of bytes written are less than the current iovec size adjusted only the iovec byte count but not the iovec data pointer, resulting in the same data being sent multiple times. The fix is trivial: in addition to subtracting the count of bytes already written from the current iovec's size, also increment the current iovec's data pointer by the number of bytes already written. Tested manually on Linux and verified to fix a problem detected in production with writing large binaries from a cnode to a regular node. No unit tests were added, however, because they use the local loopback which acts more like a pipe than an inter-host TCP connection. The closing of the TCP window on the receiving side and the resultant write blocking on the socket, which in turn caused the code that mishandled the iovecs to be exercised, could unfortunately not be readily duplicated in the erl_interface test suite.
2010-09-10Remove warnings for clashes with new autoimported BIFsPatrik Nyblom
2010-09-10Add new autoimports for R14BPatrik Nyblom
2010-09-10Merge branch 'peppe/common_test/dev/OTP-8805' into devLukas Larsson
* peppe/common_test/dev/OTP-8805: Fix problem with {fail,Result} from end_tc not being recognized Fix problem with prepared_tests tuple not being recognized Add verification terms to test suite Fix various test suite, makefile, and doc related problems Fix error in the repeat_until_* group property handling
2010-09-10Merge branch 'peppe/common_test/dev/OTP-8804' into devLukas Larsson
* peppe/common_test/dev/OTP-8804: Update the configuration data chapter in the user's guide
2010-09-10Merge branch 'peppe/common_test/dev/OTP-8803' into devLukas Larsson
* peppe/common_test/dev/OTP-8803: Add Andrey Pampukha to AUTHORS file
2010-09-10Merge branch 'peppe/common_test/dev/OTP-8753' into devLukas Larsson
* peppe/common_test/dev/OTP-8753: Fix problem with prepared_tests tuple not being recognized Add verification terms to test suite Fix various test suite, makefile, and doc related problems Fix error in the repeat_until_* group property handling Add test suite for groups with repeat property Add verification events to sequence group test suite Fix error in handling of sequence groups Fix error in test suite Fix problems with sequences and sub-groups Add test cases to sequence suite Fix error with group term in ct:run_test/1 Add test suite to examplify problem with nested groups in a sequence
2010-09-10OTP-8818: Fixed inconsistency in ct:start_interactive callLukas Larsson
2010-09-10Improved certificate extension handlingIngela Anderton Andin
Added the functionality so that the verification fun will be called when a certificate is considered valid by the path validation to allow access to eachs certificate in the path to the user application. Removed clause that only check that a extension is not critical, it does alter the verification rusult only withholds information from the application. Try to verify subject-AltName, if unable to verify it let application try.
2010-09-10Merge branch 'kenneth/asn1/docfixes/OTP-8829' into devKenneth Lundin
* kenneth/asn1/docfixes/OTP-8829: Add warning about since long unsupported [{Cname,Val}] repr. of SEQUENCE/SET
2010-09-10Merge branch 'kenneth/gs-deprecate-warning/OTP-8824' into devKenneth Lundin
* kenneth/gs-deprecate-warning/OTP-8824: Add warning in documentation about that GS will be deprecated and removed from distribution soon
2010-09-10Merge branch 'kenneth/asn1/nested_extaddgroup/OTP-8797' into devKenneth Lundin
* kenneth/asn1/nested_extaddgroup/OTP-8797: Add support for ExtensionAdditionGroup notation in nested types as well Conflicts: lib/asn1/test/test_undecoded_rest.erl
2010-09-10Merge branch 'kenneth/runtime_tools/inviso_autostart/OTP-8783' into devKenneth Lundin
* kenneth/runtime_tools/inviso_autostart/OTP-8783: patch from user regarding inviso_autostart_server in runtime_tools
2010-09-10Merge branch 'kenneth/asn1/uper_contrained_number/OTP-8779' into devKenneth Lundin
* kenneth/asn1/uper_contrained_number/OTP-8779: Fix bug in UNALIGNED PER regarding encode/decode of constrained number with valuerange > 1024
2010-09-10Merge branch 'kenneth/runtime_tools/inviso-patches-from-E-user/OTP-8755' ↵Kenneth Lundin
into dev * kenneth/runtime_tools/inviso-patches-from-E-user/OTP-8755: Minor corrections and remove of temporary workaround.
2010-09-10Remove USE_DECLSPEC_THREAD from erl_interfaceBjörn-Egil Dahlberg
DECLSPEC causes access violations on vista.
2010-09-10Merge branch 'bjorn/http-packet-error/OTP-8831' into devBjörn Gustavsson
* bjorn/http-packet-error/OTP-8831: Make gen_tcp:recv/2 consistent with ssl:recv/2
2010-09-10Add handling of SubjectAltName of type otherNameIngela Anderton Andin
2010-09-10Add warning about since long unsupported [{Cname,Val}] repr. of SEQUENCE/SETKenneth Lundin
Othe minor corrections as well.
2010-09-09Merge branch 'ia/ssl-http-error-test' into devIngela Anderton Andin
* ia/ssl-http-error-test: Add test suite for packet http_error.
2010-09-09Merge branch 'ia/ssl-4.0.1/documentation' into devIngela Anderton Andin
* ia/ssl-4.0.1/documentation: Updated documentation for ssl-4.0.1
2010-09-09Make gen_tcp:recv/2 consistent with ssl:recv/2Björn Gustavsson
When the HTTP packet mode has been enabled for a socket, the ssl and gen_tcp modules have different error indications when there is an error while parsing the HTTP header: ssl:recv(SSLSocket, 0) -> {ok, {http_error, _Str}} gen_tcp:recv(Socket, 0) -> {error, {http_error, _Str}} We have decided to change gen_tcp:recv/2 to behave the same way as ssl:recv/2. That means that there will be always be an ok tuple if data could be succefully read from the socket, and an error tuple if there was a read error at the socket level.
2010-09-09Updated documentation for ssl-4.0.1Ingela Anderton Andin
2010-09-09Merge branch 'maint-r13' into devBjörn Gustavsson
* maint-r13: Add test suite for ic Add test suite for runtime_tools Add test suite for debugger Add test suite for os_mon
2010-09-09Add test suite for icNiclas Eklund
2010-09-09Merge branch 'dgud/et_fixes/OTP-8830' into devDan Gudmundsson
* dgud/et_fixes/OTP-8830: Fix wx viewer so it works on windows/mac.
2010-09-08Merge branch 'cg/docs-fixes' into devBjörn Gustavsson
* cg/docs-fixes: Linkify applications listed under "See Also" Fix minor typos in the documentation
2010-09-08erl_call: fix multiple buffer overflowsMichael Santos
Check operations that can overflow, e.g., erl_call -sname $(perl -e 'print "x"x5000') perl -e 'print "-module(", "x"x10000, ");"' | erl_call -m -r -sname foo
2010-09-08Merge branch 'ia/ssl-forgot-DH-params-DER' into devIngela Anderton Andin
* ia/ssl-forgot-DH-params-DER: Add missed DER dh option.