summaryrefslogtreecommitdiff
path: root/src/common/tortls.c
AgeCommit message (Collapse)Author
2012-01-18Rename nonconformant identifiers.Nick Mathewson
Fixes bug 4893. These changes are pure mechanical, and were generated with this perl script: /usr/bin/perl -w -i.bak -p s/crypto_pk_env_t/crypto_pk_t/g; s/crypto_dh_env_t/crypto_dh_t/g; s/crypto_cipher_env_t/crypto_cipher_t/g; s/crypto_digest_env_t/crypto_digest_t/g; s/aes_free_cipher/aes_cipher_free/g; s/crypto_free_cipher_env/crypto_cipher_free/g; s/crypto_free_digest_env/crypto_digest_free/g; s/crypto_free_pk_env/crypto_pk_free/g; s/_crypto_dh_env_get_dh/_crypto_dh_get_dh/g; s/_crypto_new_pk_env_rsa/_crypto_new_pk_from_rsa/g; s/_crypto_pk_env_get_evp_pkey/_crypto_pk_get_evp_pkey/g; s/_crypto_pk_env_get_rsa/_crypto_pk_get_rsa/g; s/crypto_new_cipher_env/crypto_cipher_new/g; s/crypto_new_digest_env/crypto_digest_new/g; s/crypto_new_digest256_env/crypto_digest256_new/g; s/crypto_new_pk_env/crypto_pk_new/g; s/crypto_create_crypto_env/crypto_cipher_new/g; s/connection_create_listener/connection_listener_new/g; s/smartlist_create/smartlist_new/g; s/transport_create/transport_new/g;
2012-01-11Make openssl 0.9.8l log message accurateNick Mathewson
fixes 4837
2012-01-11Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson
2012-01-11Merge remote-tracking branch 'origin/maint-0.2.1' into maint-0.2.2Nick Mathewson
2012-01-11Fix a compilation warning for our bug4822 fix on 64-bit linuxNick Mathewson
2012-01-10Add macros to construct openssl version numbersNick Mathewson
It's a pain to convert 0x0090813f to and from 0.9.8s-release on the fly, so these macros should help.
2012-01-09Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson
2012-01-09Fix comment about TLSv1_method() per comments by wanoskarnetNick Mathewson
2012-01-08Merge branch 'maint-0.2.2'Roger Dingledine
2012-01-08add a note from wanoskarnetRoger Dingledine
he disagrees about what the code that we decided not to use would do
2012-01-06Change to use SSL_state_string_long() instead of homebrew ↵Emile Snyder
ssl_state_to_string() function.
2012-01-05Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson
2012-01-05Merge remote-tracking branch 'origin/maint-0.2.1' into maint-0.2.2Nick Mathewson
2012-01-05Log at info level when disabling SSLv3Robert Ransom
2012-01-05Disable SSLv3 when using a not-up-to-date opensslNick Mathewson
This is to address bug 4822, and CVE-2011-4576.
2012-01-05note some dead code. if i'm right, should this be removed?Roger Dingledine
2011-12-08indent; add commentNick Mathewson
This re-applies 40a87c4c08be0cdd87a3df283f285b3c2a0c8445 which got accidentally reverted in 75134c6c86e54c10fd9e11c4345aadcdabc0f8fb. Thanks asn for spotting this.
2011-12-06Revert "Refactor the SSL_set_info_callback() callbacks."Nick Mathewson
This reverts commit 69a821ea1c9357acdd5aa1c9e23fd030b01cb5a9.
2011-12-06Revert "Detect renegotiation when it actually happens."Nick Mathewson
This reverts commit 4fd79f9def28996552b5739792f428c2514de1f6.
2011-12-06Revert "Detect and deny excess renegotiations attempts."Nick Mathewson
This reverts commit ecd239e3b577705e0669d47293a2e755cf93cec0.
2011-12-06Revert "Get rid of tor_tls_block_renegotiation()."Nick Mathewson
This reverts commit 340809dd224b244675496e301d3ba154a6fe68d0.
2011-12-06Revert "Also handle needless renegotiations in SSL_write()."Nick Mathewson
This reverts commit e2b3527106e0747f652e2f28fa087d9874e0e2ce.
2011-12-06Revert "Fix issues pointed out by nickm."Nick Mathewson
This reverts commit e097bffaed72af6b19f7293722021196bb94de1e.
2011-12-06Revert "Use callback-driven approach to block renegotiations."Nick Mathewson
This reverts commit 406ae1ba5ad529a4d0e710229dab6ed645d42b50.
2011-12-06Revert "Refactor tor_event_base_once to do what we actually want"Nick Mathewson
This reverts commit 7920ea55b8d994268d2b07f27316b0f34d8f27e5.
2011-12-06Revert "Fix some wide lines in tortls.c"Nick Mathewson
This reverts commit e8dde3aabd3e1292d381eb4269c6457548dca6b9.
2011-12-06Revert "Don't schedule excess_renegotiations_callback unless it's set"Nick Mathewson
This reverts commit 617617e21a2d30a86cea9c8f7043333078f2e8f8.
2011-12-06Revert "indent; add comment"Nick Mathewson
This reverts commit 40a87c4c08be0cdd87a3df283f285b3c2a0c8445.
2011-12-06Revert "Make pending libevent actions cancelable"Nick Mathewson
This reverts commit aba25a6939a5907d40dbcff7433a8c130ffd12ad.
2011-12-06Revert "Set renegotiation callbacks immediately on tls inititation"Nick Mathewson
This reverts commit e27a26d568a257cf350814a9abfa47d3b41ad9f3.
2011-11-29Merge branch 'bug4587_v2'Nick Mathewson
2011-11-29Set renegotiation callbacks immediately on tls inititationNick Mathewson
This way, we can't miss a renegotiation attempt in a v2 handshake, or miss excess renegotiation attempts. Partial fix for bug 4587.
2011-11-29Make pending libevent actions cancelableNick Mathewson
This avoids a dangling pointer issue in the 3412 code, and should fix bug 4599.
2011-11-27indent; add commentNick Mathewson
2011-11-27Merge remote-tracking branch 'asn/bug4584'Nick Mathewson
2011-11-27Don't schedule excess_renegotiations_callback unless it's setNick Mathewson
Partial fix for bug 4587; reported by "frosty_un".
2011-11-27Use random bytes as our certificate serial numbers.George Kadianakis
Instead of using time(NULL) in our certificate serial numbers, use eight random bytes as suggested in proposal 179.
2011-11-25Fix some wide lines in tortls.cNick Mathewson
2011-11-25Refactor tor_event_base_once to do what we actually wantNick Mathewson
This version avoids the timeout system entirely, gives a nicer interface, and lets us manage allocation explicitly.
2011-11-25Merge remote-tracking branch 'asn/bug4312'Nick Mathewson
2011-11-16Fix a check-spaces complaintSebastian Hahn
2011-11-15Make certificate skew into a protocol warningNick Mathewson
2011-11-15Allow up to a 30 days future skew, 48 hours past skew in certs.Nick Mathewson
2011-11-13Use callback-driven approach to block renegotiations.George Kadianakis
Also use this new approach in the bufferevents-enabled case.
2011-11-03Fix issues pointed out by nickm.George Kadianakis
- Rename tor_tls_got_server_hello() to tor_tls_got_client_hello(). - Replaced some aggressive asserts with LD_BUG logging. They were the innocent "I believe I understand how these callbacks work, and this assert proves it" type of callbacks, and not the "If this statement is not true, computer is exploding." type of callbacks. - Added a changes file.
2011-10-28Fix a memory-poisoning memset in tortls.cNick Mathewson
2011-10-27Merge branch 'maint-0.2.2_secfix' into master_secfixSebastian Hahn
Conflicts: src/common/tortls.c src/or/connection_or.c src/or/dirserv.c src/or/or.h
2011-10-26Merge branch 'maint-0.2.1_secfix' into maint-0.2.2_secfixSebastian Hahn
Conflicts: src/or/connection_or.c
2011-10-26Don't send a certificate chain on outgoing TLS connections from non-relaysNick Mathewson
2011-10-26Maintain separate server and client TLS contexts.Robert Ransom
Fixes bug #988. Conflicts: src/or/main.c src/or/router.c
7apu2bq3rhoylwmucxizk54afw5jyda7pho4j5zdcqpwkufke7zdzwad.onion