Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-02-23 | Merge branch 'bug17795' | Nick Mathewson | |
2016-02-10 | Another automated rename. | Nick Mathewson | |
Also simplify crypto_common_digests() to have no loop. | |||
2016-02-10 | Rename crypto_digest_all, and digests_t. | Nick Mathewson | |
They are no longer "all" digests, but only the "common" digests. Part of 17795. This is an automated patch I made with a couple of perl one-liners: perl -i -pe 's/crypto_digest_all/crypto_common_digests/g;' src/*/*.[ch] perl -i -pe 's/\bdigests_t\b/common_digests_t/g;' src/*/*.[ch] | |||
2016-02-03 | Make tortls unit tests pass with LibreSSL. | Nick Mathewson | |
Part of the fix for 17921. | |||
2016-02-03 | Make Tor build happily with OpenSSL master and libressl. | Nick Mathewson | |
Also tested with 1.0.0t and 1.0.2f. Closes ticket 19784. Closes most of 17921. (Still need to make some tests pass.) | |||
2015-12-20 | Appease "make check-spaces" | Nick Mathewson | |
2015-12-18 | mark a variable unused to fix a warning. | Nick Mathewson | |
2015-12-18 | Move some more code inside a tortls.c ifdef to fix deadcode warning. | Nick Mathewson | |
2015-12-18 | Fix a coverity NULL-pointer deref warning in the tortls tests. | Nick Mathewson | |
Also, make our cert validation code more NULL-resistant. This is CID 1327891. | |||
2015-12-18 | Fix some dead code in tortls.c | Nick Mathewson | |
If SSL_CIPHER_find exists, then we won't use either of the two kludges that would replace it. Found by Coverity; fixes CID 1340256. | |||
2015-12-15 | Replace usage of INLINE with inline | cypherpunks | |
This patch was generated using; sed -i -e "s/\bINLINE\b/inline/" src/*/*.[ch] src/*/*/*.[ch] | |||
2015-11-25 | Merge branch 'bug17686_v2_027' | Nick Mathewson | |
2015-11-25 | Now that crypto_rand() cannot fail, it should return void. | Nick Mathewson | |
2015-11-13 | Merge remote-tracking branch 'public/ticket11150_client_only' | Nick Mathewson | |
2015-11-10 | Move openssl version compatibility defines into a new header. | Nick Mathewson | |
2015-11-06 | Fix compilation with OpenSSL 1.1.0-dev. | Yawning Angel | |
OpenSSL changed the API: * https://github.com/openssl/openssl/commit/5998e2903589e7b19e102ebff06521f2dcb60409 * https://github.com/openssl/openssl/commit/b0700d2c8de79252ba605748a075cf2e5d670da1 | |||
2015-10-21 | Fix various coverity-found issues | Nick Mathewson | |
2015-10-21 | Merge remote-tracking branch 'origin/maint-0.2.7' | Nick Mathewson | |
2015-10-21 | Merge remote-tracking branch 'public/bug17404_024' into maint-0.2.7 | Nick Mathewson | |
2015-10-21 | Fix the return value | Nick Mathewson | |
2015-10-21 | Merge remote-tracking branch 'origin/maint-0.2.7' | Nick Mathewson | |
2015-10-21 | Merge remote-tracking branch 'public/bug17404_024' into maint-0.2.7 | Nick Mathewson | |
2015-10-21 | Check for len < 4 in dn_indicates_v3_cert | Nick Mathewson | |
Without this check, we potentially look up to 3 characters before the start of a malloc'd segment, which could provoke a crash under certain (weird afaik) circumstances. Fixes 17404; bugfix on 0.2.6.3-alpha. | |||
2015-10-07 | Remove workaround code for broken client-side renegotiation | Nick Mathewson | |
Since 11150 removed client-side support for renegotiation, we no longer need to make sure we have an openssl/TLSvX combination that supports it (client-side) | |||
2015-10-07 | Remove client-side support for detecting v1 handshake | Nick Mathewson | |
Fixes more of 11150 | |||
2015-10-07 | Make the mis-named V2_HANDSHAKE_SERVER/CLIENT macros always-on. | Nick Mathewson | |
They selected the V2 handshake *and* the V3 handshake, in a strange mixture. Both handshakes have been mandatory for a long time. | |||
2015-10-07 | Remove the client-side code for the v1 and v2 tls handshakes. | Nick Mathewson | |
(This is safe since super-old Tor servers are no longer allowed on the network.) Closes the client-side part of 11150. | |||
2015-10-06 | Merge remote-tracking branch 'origin/maint-0.2.7' | Nick Mathewson | |
2015-10-06 | Work around openssl declaring x509_get_not{Before,After} as functions | Nick Mathewson | |
Now that x509_get_not{Before,After} are functions in OpenSSL 1.1 (not yet releasesd), we need to define a variant that takes a const pointer to X509 and returns a const pointer to ASN1_time. Part of 17237. I'm not convinced this is an openssl bug or a tor bug. It might be just one of those things. | |||
2015-10-02 | clean up whitespace | Nick Mathewson | |
2015-10-02 | Fix "make check-spaces" | Nick Mathewson | |
2015-10-02 | Make test_tortls compile without warnings | Nick Mathewson | |
2015-10-02 | Merge remote-tracking branch 'twstrike/tortls_tests' | Nick Mathewson | |
2015-09-15 | Add tests for tortls.c | Ola Bini | |
2015-09-13 | Use SSL_get_client_ciphers() on openssl 1.1+, not SSL_get_ciphers... | Nick Mathewson | |
(which isn't correct.) Fixes bug 17047; bugfix on 0.2.7.2-alpha, introduced by the merge in 0030765e04d8dfe3dfaf8124b01a4d578b7d8ceb, apparently. | |||
2015-06-29 | Remove checks for visual C 6. | Nick Mathewson | |
2015-06-16 | Fix spacing in tortls.c | teor | |
2015-06-11 | Fix clang address of struct member always non-NULL in SSL master key | teor | |
clang complains that the address of struct member in an assert in SSL_SESSION_get_master_key is always non-NULL. Instead, check each pointer argument is non-NULL before using it. Fix on f90a704f1258 from 27 May 2015, not in any released version of tor. | |||
2015-06-02 | Merge remote-tracking branch 'public/bug15760_hard_026_v2' | Nick Mathewson | |
2015-06-02 | A few more minor OpenSSL 1.1 fixes. | Yawning Angel | |
* Use `TLS_method()` instead of the deprecated `SSLv23_method()` * Fix one missed conversion to `SSL_CIPHER_get_id()` | |||
2015-06-02 | Merge remote-tracking branch 'teor/bug16115-minor-fixes' | Nick Mathewson | |
2015-06-03 | Silence unused variable warnings in find_cipher_by_id | teor | |
Unused variable warnings were still generated under some versions of OpenSSL. Instead, make sure all variables are used under all versions. Fix on 496df21c89d1, not in any released version of tor. | |||
2015-06-02 | Merge remote-tracking branch 'public/bug15760_hard_026_v2' | Nick Mathewson | |
Conflicts: src/common/tortls.c | |||
2015-06-02 | Use autoconf, not OPENSSL_VERSION_NUMBER, to detect SSL_CIPHER_find | Nick Mathewson | |
Repairs build with libressl | |||
2015-06-02 | Use accessor functions for client_random/server_random/master_key | Nick Mathewson | |
If OpenSSL accepts my patch to introduce these functions, they'll be a way to help Tor work with OpenSSL 1.1. | |||
2015-06-01 | Appease make check-spaces | Andrea Shepard | |
2015-05-28 | Merge branch '12498_ed25519_keys_v6' | Nick Mathewson | |
Fixed numerous conflicts, and ported code to use new base64 api. | |||
2015-05-28 | Tests for AUTHENTICATE cell functionality. | Nick Mathewson | |
2015-05-28 | Start testing cell encoders/processers for the v3 handshake. | Nick Mathewson | |
An earlier version of these tests was broken; now they're a nicer, more robust, more black-box set of tests. The key is to have each test check a handshake message that is wrong in _one_ way. | |||
2015-05-26 | Stop looking at session->ciphers when possible | Nick Mathewson | |
If the OpenSSL team accepts my patch to add an SSL_get_client_ciphers function, this patch will make Tor use it when available, thereby working better with openssl 1.1. |