aboutsummaryrefslogtreecommitdiff
path: root/src/common/tortls.c
Commit message (Collapse)AuthorAge
* r15087@tombo: nickm | 2007-11-30 22:32:26 -0500Nick Mathewson2007-12-01
| | | | | | | Start getting freaky with openssl callbacks in tortls.c: detect client ciphers, and if the list doesn't look like the list current Tors use, present only a single cert do not ask for a client cert. Also, support for client-side renegotiation. None of this is enabled unless you define V2_HANDSHAKE_SERVER. svn:r12622
* r16669@catbus: nickm | 2007-11-14 14:50:03 -0500Nick Mathewson2007-11-14
| | | | | | | When we complete an OR handshake, set up all the internal fields and mark the connection as open. svn:r12495
* r16523@catbus: nickm | 2007-11-07 11:35:49 -0500Nick Mathewson2007-11-07
| | | | | | | Improve "tls error. breaking" message a little. svn:r12411
* a note from steven about how to set up a private test networkRoger Dingledine2007-11-07
| | | | | | | without link encryption. svn:r12410
* r16455@catbus: nickm | 2007-11-06 12:48:00 -0500Nick Mathewson2007-11-06
| | | | | | | Parse CERT cells and act correctly when we get them. svn:r12396
* r16432@catbus: nickm | 2007-11-05 14:18:57 -0500Nick Mathewson2007-11-05
| | | | | | | Send and parse link_auth cells properly. svn:r12386
* r16413@catbus: nickm | 2007-11-05 13:14:18 -0500Nick Mathewson2007-11-05
| | | | | | | Add functions to encode certificates svn:r12384
* r16412@catbus: nickm | 2007-11-05 11:45:17 -0500Nick Mathewson2007-11-05
| | | | | | | Make TLS contexts reference-counted, and add a reference from TLS objects to their corresponding context. This lets us reliably get the certificates for a given TLS connection, even if we have rotated TLS contexts. svn:r12383
* r16411@catbus: nickm | 2007-11-05 11:27:37 -0500Nick Mathewson2007-11-05
| | | | | | | Remember X509 certificates in the context. Store peer/self certificate digests in handshake state. svn:r12382
* r16410@catbus: nickm | 2007-11-05 10:54:29 -0500Nick Mathewson2007-11-05
| | | | | | | Code to remember client_random and server_random values, and to compute hmac using TLS master secret. svn:r12381
* r16302@catbus: nickm | 2007-10-31 16:45:16 -0400Nick Mathewson2007-10-31
| | | | | | | Clean spaces. svn:r12301
* r16285@catbus: nickm | 2007-10-30 17:43:25 -0400Nick Mathewson2007-10-30
| | | | | | | Implement (but do not enable) link connection version negotiation svn:r12286
* r16159@catbus: nickm | 2007-10-25 12:53:38 -0400Nick Mathewson2007-10-25
| | | | | | | Drop support for OpenSSL 0.9.6. svn:r12191
* r15997@catbus: nickm | 2007-10-21 20:25:40 -0400Nick Mathewson2007-10-22
| | | | | | | New code (disabled for now) to use the SSL context's cert store instead of using its "extra chain cert" list to get our identity certificate sent. This is a little close to what OpenSSL expects people to do, and it has the advantage that we should be able to keep the id cert from being sent by setting the NO_CHAIN_CERT bit. I have tried turning new code on, and it seemed to work fine. svn:r12086
* r13988@catbus: nickm | 2007-07-29 16:32:36 -0400Nick Mathewson2007-07-29
| | | | | | | Cheesy attempt to break some censorware. Not a long-term fix, but it will be intersting to watch the epidemiology of the workarounds as the censors apply them. svn:r10975
* r12936@catbus: nickm | 2007-05-24 14:12:34 -0400Nick Mathewson2007-05-24
| | | | | | | Review XXXX comments without a version; upgrade some to XXXX020. svn:r10315
* fix some code comments, a wrapper, and add a todo itemRoger Dingledine2007-05-04
| | | | svn:r10111
* r12595@catbus: nickm | 2007-04-30 18:32:34 -0400Nick Mathewson2007-04-30
| | | | | | | Move private function declarations from crypto.c into a new #ifdef CRYPTO_PRIVATE block in crypto.h svn:r10074
* r11832@catbus: nickm | 2007-02-16 15:31:59 -0500Nick Mathewson2007-02-16
| | | | | | | Fix 35 remaining DOCDOC comments. Yowza. svn:r9596
* r11775@catbus: nickm | 2007-02-12 16:39:09 -0500Nick Mathewson2007-02-12
| | | | | | | Update copyright dates. svn:r9570
* r11773@catbus: nickm | 2007-02-12 15:18:48 -0500Nick Mathewson2007-02-12
| | | | | | | Implement proposal 106: stop requiring clients to have certificates, and stop checking for nicknames in certificates. [See proposal 106 for rationale.] Also improve messages when checking TLS handshake, to re-resolve bug 382. svn:r9568
* r11629@catbus: nickm | 2007-02-02 15:06:17 -0500Nick Mathewson2007-02-02
| | | | | | | Removing the last DOCDOC comment hurt so much that I had to use Doxygen to identify undocumented macros and comments, and add 150 more DOCDOCs to point out where they were. Oops. Hey, kids! Fixing some of these could be your first Tor patch! svn:r9477
* r11607@catbus: nickm | 2007-01-30 17:19:27 -0500Nick Mathewson2007-01-30
| | | | | | | Audit non-const char arguments; make a lot more of them const. svn:r9466
* r11966@Kushana: nickm | 2007-01-15 16:12:17 -0500Nick Mathewson2007-01-15
| | | | | | | Tidy up ORCONN reason patch from Mike Perry. Changes: make some of the handling of TLS error codes less error prone. Enforce house style wrt spaces. Make it compile with --enable-gcc-warnings. Only set or_conn->tls_error in the case of an actual error. Add a changelog entry. svn:r9355
* r11957@Kushana: nickm | 2007-01-15 15:25:57 -0500Nick Mathewson2007-01-15
| | | | | | | Patch from Mike Perry: Track reasons for OR connection failure; display them in control events. Needs review and revision. svn:r9354
* apparently i think of comments with no whitespace around them asRoger Dingledine2007-01-09
| | | | | | | | | "read this if you don't understand the code and want some help." which is not the same as "hey, you think you understand this code, but you don't." svn:r9307
* Fix an assert error introduced in 0.1.2.5-alpha: if a single TLSRoger Dingledine2007-01-09
| | | | | | | connection handles more than 4 gigs in either direction, we assert. svn:r9306
* more progress and cleanupsRoger Dingledine2007-01-05
| | | | svn:r9269
* r11741@Kushana: nickm | 2006-12-28 22:41:29 -0500Nick Mathewson2006-12-29
| | | | | | | Count TLS bytes accurately: previously, we counted only the number of bytes read or transmitted via tls, not the number of extra bytes used to do so. This has been a lonstanding wart. The fix "Works for me". svn:r9207
* r11566@Kushana: nickm | 2006-12-13 17:46:24 -0500Nick Mathewson2006-12-13
| | | | | | | Try to fix an assert failure in new write limiting code: make buffers.c aware of previous "forced" write sizes from tortls. svn:r9105
* r8923@totoro: nickm | 2006-10-07 11:44:33 -0400Nick Mathewson2006-10-07
| | | | | | | More doxygen comments svn:r8637
* Merge in some bsockets calls, all wrapped inside #if defined(USE_BSOCKETS)Nick Mathewson2006-09-19
| | | | svn:r8427
* r8696@Kushana: nickm | 2006-08-31 14:43:44 -0400Nick Mathewson2006-08-31
| | | | | | | Try to appease some warnings with newer gccs that believe that ignoring a return value is okay, but casting a return value and then ignoring it is a sign of madness. svn:r8312
* ok, i'm not allowed to say that there. oh well.Roger Dingledine2006-07-04
| | | | svn:r6720
* fix a misleading function commentRoger Dingledine2006-07-04
| | | | svn:r6717
* if we're the server-side of the tls and there are problems,Roger Dingledine2006-07-04
| | | | | | | don't yell as loudly. svn:r6716
* and now the exciting part: there is now no such thing as doingRoger Dingledine2006-06-07
| | | | | | | a client-only tls, that is, one with no certs. svn:r6558
* simplify the tortls api: we only support being a "server", thatRoger Dingledine2006-06-07
| | | | | | | | | | is, even tor clients do the same sort of handshake. this has been true for years, so it's best to get rid of the stale code. svn:r6557
* looks like we missed a piece of the 0.1.1.9 paranoia code.Roger Dingledine2006-06-07
| | | | | | | hopefully this change is a no-op. svn:r6556
* if we're a server and some peer has a broken tls certificate, don'tRoger Dingledine2006-05-26
| | | | | | | shout about it unless we want to hear about protocol violations. svn:r6507
* Claim a commonname of Tor, rather than TOR, in tls handshakes.Roger Dingledine2006-05-24
| | | | | | | Maybe this will help us win the war of names. svn:r6489
* Add some functions to escape values from the network before sending them to ↵Nick Mathewson2006-03-05
| | | | | | the log. Use them everywhere except for routerinfo->plaftorm, routerinfo->contact_info, and rend*.c. (need sleep now) svn:r6087
* Start the process of converting warn to log_warn and so on.Roger Dingledine2006-02-13
| | | | | | | | | This is needed because Windows already has an err() that we can't clobber. And we need to be able to make the log functions a macro so we can print the function's name in the log entry. svn:r6000
* Happy new year!Roger Dingledine2006-02-09
| | | | svn:r5949
* Split 0119_PARANOIA into 0119_PARANOIA_[ABC]. A is "this is suspicious, and ↵Nick Mathewson2006-01-17
| | | | | | we have not tried running without this yet". B is "this is suspicious, but the last time we tested, it was okay." C is "How could this possibly be the cause?" svn:r5840
* Add a (diabled by default) option in crypto.h to disable most of the ↵Nick Mathewson2006-01-10
| | | | | | interesting crypto-related changes made on 0.1.1.9. This will help hunt bug 234. svn:r5777
* Bite the bullet and limit all our source lines to 80 characters, the way IBM ↵Nick Mathewson2005-12-14
| | | | | | intended. svn:r5582
* Hm; looks like the callback business was unnecessary, since DHparams_dup() ↵Nick Mathewson2005-11-14
| | | | | | copies dh->length. svn:r5372
* Use a callback to set our DH parameters; set SSL_OP_SINGLE_DH_USE.Nick Mathewson2005-11-14
| | | | svn:r5371
* Efficiency hack: call tor_fix_source_file late, not early. Add "BUG" ↵Nick Mathewson2005-10-25
| | | | | | domain. Domains are now bitmasks... just in case. Make some err msgs non-general. svn:r5309
generated by cgit v1.2.3 (git 2.47.1) at 2025-03-20 21:48:42 +0000