aboutsummaryrefslogtreecommitdiff
path: root/src/common/tortls.c
Commit message (Collapse)AuthorAge
* r18535@catbus: nickm | 2008-03-01 09:58:33 -0500Nick Mathewson2008-03-01
| | | | | | | Whoo. People diagnosed and fixed bug 616. See changelog for details. Bugfix on 0.2.0.20-rc. svn:r13793
* fix most of pnx's warnings on irix64Roger Dingledine2008-02-24
| | | | svn:r13706
* <weasel> tortls.c: In function `tor_tls_client_is_using_v2_ciphers':Roger Dingledine2008-02-24
| | | | | | | | | | <weasel> tortls.c:634: warning: passing arg 1 of `SSL_get_session' discards qualifiers from pointer target type Nick, see if you like this patch. svn:r13690
* r14379@tombo: nickm | 2008-02-21 17:14:24 -0500Nick Mathewson2008-02-21
| | | | | | | Enable v2 handshakes. svn:r13666
* r14374@tombo: nickm | 2008-02-21 16:57:39 -0500Nick Mathewson2008-02-21
| | | | | | | Fix all remaining shorten-64-to-32 errors in src/common. Some were genuine problems. Many were compatibility errors with libraries (openssl, zlib) that like predate size_t. Partial backport candidate. svn:r13665
* r14362@31-33-219: nickm | 2008-02-21 11:01:10 -0500Nick Mathewson2008-02-21
| | | | | | | Change some of our log messages related to closed TLS connections in order to better reflect reality. svn:r13657
* other cleanups that have been sitting in my sandboxRoger Dingledine2008-02-21
| | | | svn:r13649
* resolve one more, and leave two for nick.Roger Dingledine2008-02-21
| | | | svn:r13644
* r18296@catbus: nickm | 2008-02-20 23:30:11 -0500Nick Mathewson2008-02-21
| | | | | | | Answer one xxx020 item; move 7 other ones to a new "XXX020rc" category: they should get fixed before we cut a release candidate. arma: please review these to see whether you have fixes/answers for any. Please check out the other 14 XXX020s to see if any look critical for the release candidate. svn:r13640
* r18218@catbus: nickm | 2008-02-19 17:27:40 -0500Nick Mathewson2008-02-19
| | | | | | | When SafeLogging is off, have TLS errors and messages logged with their associated addresses. svn:r13591
* r14182@tombo: nickm | 2008-02-15 17:20:51 -0500Nick Mathewson2008-02-15
| | | | | | | Defer, downgrade, or address more XXX020s. The remaining ones are all ones we should deal with before release. svn:r13530
* r18051@catbus: nickm | 2008-02-12 15:20:43 -0500Nick Mathewson2008-02-12
| | | | | | | Re-tune mempool parametes based on testing on peacetime: use smaller chuncks, free them a little more aggressively, and try very hard to concentrate allocations on fuller chunks. Also, lots of new documentation. svn:r13484
* fix the compileRoger Dingledine2008-02-12
| | | | svn:r13480
* r18045@catbus: nickm | 2008-02-11 23:48:54 -0500Nick Mathewson2008-02-12
| | | | | | | oops. Not *quite* ready, just yet, maybe. Do not turn the TLS client handshake on by mistake _again_. svn:r13479
* r18041@catbus: nickm | 2008-02-11 23:43:18 -0500Nick Mathewson2008-02-12
| | | | | | | Make version negotiation and handshaking messages more useful and accurate. svn:r13477
* r18036@catbus: nickm | 2008-02-11 23:36:38 -0500Nick Mathewson2008-02-12
| | | | | | | Make a couple of messages less noisy svn:r13476
* doxygen and other cleanupsRoger Dingledine2008-02-09
| | | | svn:r13440
* r17987@catbus: nickm | 2008-02-08 17:01:56 -0500Nick Mathewson2008-02-08
| | | | | | | Remove spurious log stmt svn:r13432
* r14062@tombo: nickm | 2008-02-08 15:17:07 -0500Nick Mathewson2008-02-08
| | | | | | | Change DNs in x509 certificates to be harder to fingerprint. Raise common code. Refactor random hostname generation into crypto.c svn:r13429
* Update some copyright notices: it is now 2008.Nick Mathewson2008-02-07
| | | | svn:r13412
* r17955@catbus: nickm | 2008-02-06 16:53:07 -0500Nick Mathewson2008-02-06
| | | | | | | The SSL portion of the revised handshake now seems to work: I just finally got a client and a server to negotiate versions. Now to make sure certificate verification is really happening, connections are getting opened, etc. svn:r13409
* r17953@catbus: nickm | 2008-02-06 15:00:44 -0500Nick Mathewson2008-02-06
| | | | | | | Implement a better means for testing for renegotiation. svn:r13408
* r17947@catbus: nickm | 2008-02-06 11:57:53 -0500Nick Mathewson2008-02-06
| | | | | | | Fix a bunch of DOCDOC items; document the --quiet flag; refactor a couple of XXXX020 items. svn:r13405
* r17903@catbus: nickm | 2008-02-05 14:40:03 -0500Nick Mathewson2008-02-05
| | | | | | | Remove some dead code; fix some XXX020s; turn some XXX020s into XXXX_IP6s (i.e., "needs to be fixed when we add ipv6 support"). svn:r13382
* We accidentally enabled the under-development v2 TLS handshakeRoger Dingledine2008-01-21
| | | | | | | | code, which is causing log entries like "TLS error while renegotiating handshake". Disable it again. Resolves bug 590. svn:r13219
* r17717@catbus: nickm | 2008-01-21 17:09:23 -0500Nick Mathewson2008-01-21
| | | | | | | Fix certificate leak. svn:r13218
* r17639@catbus: nickm | 2008-01-15 19:09:21 -0500Nick Mathewson2008-01-16
| | | | | | | Fix some hard to trigger but nonetheless real memory leaks spotted by an anonymous contributor. Needs review. Partial backport candidate. svn:r13147
* minor cleanupsRoger Dingledine2008-01-10
| | | | svn:r13095
* r17490@catbus: nickm | 2008-01-07 11:48:02 -0500Nick Mathewson2008-01-07
| | | | | | | Fix bug 582: decref the idcert when we add it to the store. svn:r13052
* r17473@catbus: nickm | 2008-01-05 22:15:05 -0500Nick Mathewson2008-01-06
| | | | | | | Add a reverse mapping from SSL to tor_tls_t*: we need this in order to do a couple of things the sensible way from inside callbacks. Also, add a couple of missing cases in connection_or.c svn:r13040
* r15767@tombo: nickm | 2007-12-31 16:06:27 -0500Nick Mathewson2007-12-31
| | | | | | | Note an unfreed cert svn:r13008
* clean up copyrights, and assign 2007 copyrights to The Tor Project, IncRoger Dingledine2007-12-12
| | | | svn:r12786
* r15223@tombo: nickm | 2007-12-07 23:41:21 -0500Nick Mathewson2007-12-08
| | | | | | | Aaand, do the code to enable the client side of the new TLS handshake. There are some loose ends that need tying up in connection_or, and a lot of half-baked code to remove, and some special cases to test for, and lots and lots of testing to do, but that is what weekends are for. svn:r12721
* r16919@catbus: nickm | 2007-12-03 12:59:02 -0500Nick Mathewson2007-12-03
| | | | | | | Add DHE-RSA-AES256-SHA to the list of ciphers encountered from v1 connections. svn:r12652
* r15088@tombo: nickm | 2007-11-30 23:47:29 -0500Nick Mathewson2007-12-01
| | | | | | | Add support to get a callback invoked when the client renegotiate a connection. Also, make clients renegotiate. (not enabled yet, until they detect that the server acted like a v2 server) svn:r12623
* r15087@tombo: nickm | 2007-11-30 22:32:26 -0500Nick Mathewson2007-12-01
| | | | | | | Start getting freaky with openssl callbacks in tortls.c: detect client ciphers, and if the list doesn't look like the list current Tors use, present only a single cert do not ask for a client cert. Also, support for client-side renegotiation. None of this is enabled unless you define V2_HANDSHAKE_SERVER. svn:r12622
* r16669@catbus: nickm | 2007-11-14 14:50:03 -0500Nick Mathewson2007-11-14
| | | | | | | When we complete an OR handshake, set up all the internal fields and mark the connection as open. svn:r12495
* r16523@catbus: nickm | 2007-11-07 11:35:49 -0500Nick Mathewson2007-11-07
| | | | | | | Improve "tls error. breaking" message a little. svn:r12411
* a note from steven about how to set up a private test networkRoger Dingledine2007-11-07
| | | | | | | without link encryption. svn:r12410
* r16455@catbus: nickm | 2007-11-06 12:48:00 -0500Nick Mathewson2007-11-06
| | | | | | | Parse CERT cells and act correctly when we get them. svn:r12396
* r16432@catbus: nickm | 2007-11-05 14:18:57 -0500Nick Mathewson2007-11-05
| | | | | | | Send and parse link_auth cells properly. svn:r12386
* r16413@catbus: nickm | 2007-11-05 13:14:18 -0500Nick Mathewson2007-11-05
| | | | | | | Add functions to encode certificates svn:r12384
* r16412@catbus: nickm | 2007-11-05 11:45:17 -0500Nick Mathewson2007-11-05
| | | | | | | Make TLS contexts reference-counted, and add a reference from TLS objects to their corresponding context. This lets us reliably get the certificates for a given TLS connection, even if we have rotated TLS contexts. svn:r12383
* r16411@catbus: nickm | 2007-11-05 11:27:37 -0500Nick Mathewson2007-11-05
| | | | | | | Remember X509 certificates in the context. Store peer/self certificate digests in handshake state. svn:r12382
* r16410@catbus: nickm | 2007-11-05 10:54:29 -0500Nick Mathewson2007-11-05
| | | | | | | Code to remember client_random and server_random values, and to compute hmac using TLS master secret. svn:r12381
* r16302@catbus: nickm | 2007-10-31 16:45:16 -0400Nick Mathewson2007-10-31
| | | | | | | Clean spaces. svn:r12301
* r16285@catbus: nickm | 2007-10-30 17:43:25 -0400Nick Mathewson2007-10-30
| | | | | | | Implement (but do not enable) link connection version negotiation svn:r12286
* r16159@catbus: nickm | 2007-10-25 12:53:38 -0400Nick Mathewson2007-10-25
| | | | | | | Drop support for OpenSSL 0.9.6. svn:r12191
* r15997@catbus: nickm | 2007-10-21 20:25:40 -0400Nick Mathewson2007-10-22
| | | | | | | New code (disabled for now) to use the SSL context's cert store instead of using its "extra chain cert" list to get our identity certificate sent. This is a little close to what OpenSSL expects people to do, and it has the advantage that we should be able to keep the id cert from being sent by setting the NO_CHAIN_CERT bit. I have tried turning new code on, and it seemed to work fine. svn:r12086
* r13988@catbus: nickm | 2007-07-29 16:32:36 -0400Nick Mathewson2007-07-29
| | | | | | | Cheesy attempt to break some censorware. Not a long-term fix, but it will be intersting to watch the epidemiology of the workarounds as the censors apply them. svn:r10975
generated by cgit v1.2.3 (git 2.49.0) at 2025-04-27 17:24:57 +0000