| Age | Commit message (Collapse) | Author |
|---|
|
Added the functionality so that the verification fun will be called
when a certificate is considered valid by the path validation to allow
access to eachs certificate in the path to the user application.
Removed clause that only check that a extension is not critical,
it does alter the verification rusult only withholds information from
the application.
Try to verify subject-AltName, if unable to verify it let
application try.
|
|
|
|
* ia/ssl-http-error-test:
Add test suite for packet http_error.
|
|
* ia/ssl-4.0.1/documentation:
Updated documentation for ssl-4.0.1
|
|
|
|
* maint-r13:
Add test suite for ic
Add test suite for runtime_tools
Add test suite for debugger
Add test suite for os_mon
|
|
|
|
* dgud/et_fixes/OTP-8830:
Fix wx viewer so it works on windows/mac.
|
|
* cg/docs-fixes:
Linkify applications listed under "See Also"
Fix minor typos in the documentation
|
|
Check operations that can overflow, e.g.,
erl_call -sname $(perl -e 'print "x"x5000')
perl -e 'print "-module(", "x"x10000, ");"' | erl_call -m -r -sname foo
|
|
* ia/ssl-forgot-DH-params-DER:
Add missed DER dh option.
|
|
|
|
|
|
* ph/auto_recognize_ipv6:
Add tests
Let an 8-tuple given as ip_address() for gen_tcp/gen_udp/gen_sctp imply 'inet6'
OTP-8822
|
|
* lars/xmerl/xmerl_scan_hex_entities/OTP-8697:
Fix improperly hex replacement when document is in UTF-8 format.
|
|
* mk/net-dragonfly-bsd-patches:
Remove unused variables
Use proper install method
Add support for DragonFly BSD
Add support for NetBSD
|
|
|
|
* ia/ssl/server-verify-fun/OTP-8770:
Handling of path validation errors by the application
|
|
Changed the behavior of the verify_fun option so that
the application can be responsible for handling path validation
errors even on the server side. Also replaced the not yet
documented validate_extensions_fun to be handled by the
verify_fun instead.
If the verify callback fun returns {fail, Reason}, the verification process is
immediately stopped and an alert is sent to the peer and the TLS/SSL
handshake is terminated. If the verify callback fun returns {valid,
UserState}, the verification process is continued. If the verify callback
fun always returns {valid, UserState}, the TLS/SSL handshake will not be
terminated with respect to verification failures and the connection
will be established. The verify callback fun will also be
able to verify application specific extensions.
|
|
|
|
* ta/asn1-test-compile-options:
Fix asn1_SUITE test_compile_options:verbose/1
|
|
* ta/asn1ct-fix-whitespace:
asn1ct: change unusual whitespace char from 0xA0 to 0x20
|
|
* ms/inet-bug-fixes:
inet: support retrieving MAC address on BSD
inet: fix getservbyname buffer overflow
inet: fix ifr_name buffer overflow
inet: null terminate ifr_name buffer
OTP-8816
|
|
|
|
Conflicts:
lib/kernel/test/gen_sctp_SUITE.erl
|
|
Currently an 8-tuple representing an IPv6 address is not accepted by
gen_tcp:listen/2, gen_tcp:connect/3,4, gen_udp:open/2, or
gen_sctp:open/1,2, unless the 'inet6' option is also given. This means
that an application that has obtained the address, e.g. from
configuration that allows for either IPv4 or IPv6, must always check the
type of the address before passing it to these functions. Letting the
functions infer 'inet6' from the 8-tuple, in case other options do not
override this choice, improves usability.
|
|
* ms/ei-overflow-fix:
ei: prevent overflow in ei_connect_init/ei_xconnect
OTP-8814
|
|
* ms/ei_connect-doc-examples:
ei_connect: correct man page examples
OTP-8813
|
|
|
|
|
|
* rickard/valgrind-improvements/OTP-8760:
Build opt, debug and valgrind libraries as separate libraries
Add erlang:system_info(build_type)
Fix valgrind build
|
|
On systems supporting getaddrinfo(), support looking up the MAC
address from inet:ifget/2. The results have the same quirks as with
Linux: if the MAC address is longer than 6 bytes (e.g., fw0 under
Mac OS X), the address is truncated; if the interface does not have
a MAC address (e.g., lo0), an address consisting of 0's is returned.
|
|
Added support for inputing certificates and keys directly in DER format
these options will override the pem-file options if specified.
|
|
* tj/ct-timestamp-granularity:
Include milliseconds in timestamps in Common Test log entries
OTP-8808
|
|
* nick/ssh/fix-process-leak/OTP-8807:
Fix race condition when terminating a connection.
fix process leak in ssh_system_sup (dynamicaly created childs where not cleaned up)
|
|
A wxPaintDC must created and destroyed when paint event happens.
Otherwise redrawing will not work on windows, this is documented
but since it works on linux without it, many misses it.
|
|
|
|
|
|
The NIF library for crypto can now be built for valgrind
and/or debug as separate NIF libraries that will be
automatically loaded if the runtime system has been built
with a matching build type.
|
|
|
|
|
|
cleaned up)
The ssh_system_sup supervisor supervises one ssh_subsystem_sup process for
every client connection. There was no functionality to free resources
(terminate_child/ delete_child) when a client connection was closed.
Which lead to one ssh_subsystem_sup and one ssh_channel_sup process left over.
This commit adds ssh_system_sup:stop_subsystem/2 and code that calls it
in ssh_connection_manager:terminate/2.
|
|
* dgud/ssl-commit-example-certs:
Cleanup ssl configure parts
Remove cert building from Makefiles
Checkin example certs instead of generating them.
|
|
Conflicts:
lib/kernel/doc/src/notes.xml
lib/kernel/vsn.mk
|
|
* rani/sctp-sndrcvinfo/OTP-8795:
Fix xfer_active close expection for Solaris behaviour
Keep default #sctp_sndrcvinfo{} fields on gen_sctp:send/4
Fill in sinfo_assoc_id in struct sctp_sndrcvinfo for getopt()
Conflicts:
lib/kernel/test/gen_sctp_SUITE.erl
|
|
* rani/sctp-linger-bugfix/OTP-8726:
Fix SCTP linger option
|
|
* lars/et/broken-links-in-documentation/OTP-8796:
Fixed broken links in the documentation.
|
|
|
|
* 'hb/kernel/net_set_ticktime/OTP-8787' of ../hasse_otp:
Fix a bug that could cause the net_kernel process to crash.
|
|
* pg/fix-hipe-load:
Fix hipe:load/1
OTP-8802
|
