summaryrefslogtreecommitdiff
path: root/src/common/tortls.c
AgeCommit message (Collapse)Author
2016-02-23Merge branch 'bug17795'Nick Mathewson
2016-02-10Another automated rename.Nick Mathewson
Also simplify crypto_common_digests() to have no loop.
2016-02-10Rename crypto_digest_all, and digests_t.Nick Mathewson
They are no longer "all" digests, but only the "common" digests. Part of 17795. This is an automated patch I made with a couple of perl one-liners: perl -i -pe 's/crypto_digest_all/crypto_common_digests/g;' src/*/*.[ch] perl -i -pe 's/\bdigests_t\b/common_digests_t/g;' src/*/*.[ch]
2016-02-03Make tortls unit tests pass with LibreSSL.Nick Mathewson
Part of the fix for 17921.
2016-02-03Make Tor build happily with OpenSSL master and libressl.Nick Mathewson
Also tested with 1.0.0t and 1.0.2f. Closes ticket 19784. Closes most of 17921. (Still need to make some tests pass.)
2015-12-20Appease "make check-spaces"Nick Mathewson
2015-12-18mark a variable unused to fix a warning.Nick Mathewson
2015-12-18Move some more code inside a tortls.c ifdef to fix deadcode warning.Nick Mathewson
2015-12-18Fix a coverity NULL-pointer deref warning in the tortls tests.Nick Mathewson
Also, make our cert validation code more NULL-resistant. This is CID 1327891.
2015-12-18Fix some dead code in tortls.cNick Mathewson
If SSL_CIPHER_find exists, then we won't use either of the two kludges that would replace it. Found by Coverity; fixes CID 1340256.
2015-12-15Replace usage of INLINE with inlinecypherpunks
This patch was generated using; sed -i -e "s/\bINLINE\b/inline/" src/*/*.[ch] src/*/*/*.[ch]
2015-11-25Merge branch 'bug17686_v2_027'Nick Mathewson
2015-11-25Now that crypto_rand() cannot fail, it should return void.Nick Mathewson
2015-11-13Merge remote-tracking branch 'public/ticket11150_client_only'Nick Mathewson
2015-11-10Move openssl version compatibility defines into a new header.Nick Mathewson
2015-11-06Fix compilation with OpenSSL 1.1.0-dev.Yawning Angel
OpenSSL changed the API: * https://github.com/openssl/openssl/commit/5998e2903589e7b19e102ebff06521f2dcb60409 * https://github.com/openssl/openssl/commit/b0700d2c8de79252ba605748a075cf2e5d670da1
2015-10-21Fix various coverity-found issuesNick Mathewson
2015-10-21Merge remote-tracking branch 'origin/maint-0.2.7'Nick Mathewson
2015-10-21Merge remote-tracking branch 'public/bug17404_024' into maint-0.2.7Nick Mathewson
2015-10-21Fix the return valueNick Mathewson
2015-10-21Merge remote-tracking branch 'origin/maint-0.2.7'Nick Mathewson
2015-10-21Merge remote-tracking branch 'public/bug17404_024' into maint-0.2.7Nick Mathewson
2015-10-21Check for len < 4 in dn_indicates_v3_certNick Mathewson
Without this check, we potentially look up to 3 characters before the start of a malloc'd segment, which could provoke a crash under certain (weird afaik) circumstances. Fixes 17404; bugfix on 0.2.6.3-alpha.
2015-10-07Remove workaround code for broken client-side renegotiationNick Mathewson
Since 11150 removed client-side support for renegotiation, we no longer need to make sure we have an openssl/TLSvX combination that supports it (client-side)
2015-10-07Remove client-side support for detecting v1 handshakeNick Mathewson
Fixes more of 11150
2015-10-07Make the mis-named V2_HANDSHAKE_SERVER/CLIENT macros always-on.Nick Mathewson
They selected the V2 handshake *and* the V3 handshake, in a strange mixture. Both handshakes have been mandatory for a long time.
2015-10-07Remove the client-side code for the v1 and v2 tls handshakes.Nick Mathewson
(This is safe since super-old Tor servers are no longer allowed on the network.) Closes the client-side part of 11150.
2015-10-06Merge remote-tracking branch 'origin/maint-0.2.7'Nick Mathewson
2015-10-06Work around openssl declaring x509_get_not{Before,After} as functionsNick Mathewson
Now that x509_get_not{Before,After} are functions in OpenSSL 1.1 (not yet releasesd), we need to define a variant that takes a const pointer to X509 and returns a const pointer to ASN1_time. Part of 17237. I'm not convinced this is an openssl bug or a tor bug. It might be just one of those things.
2015-10-02clean up whitespaceNick Mathewson
2015-10-02Fix "make check-spaces"Nick Mathewson
2015-10-02Make test_tortls compile without warningsNick Mathewson
2015-10-02Merge remote-tracking branch 'twstrike/tortls_tests'Nick Mathewson
2015-09-15Add tests for tortls.cOla Bini
2015-09-13Use SSL_get_client_ciphers() on openssl 1.1+, not SSL_get_ciphers...Nick Mathewson
(which isn't correct.) Fixes bug 17047; bugfix on 0.2.7.2-alpha, introduced by the merge in 0030765e04d8dfe3dfaf8124b01a4d578b7d8ceb, apparently.
2015-06-29Remove checks for visual C 6.Nick Mathewson
2015-06-16Fix spacing in tortls.cteor
2015-06-11Fix clang address of struct member always non-NULL in SSL master keyteor
clang complains that the address of struct member in an assert in SSL_SESSION_get_master_key is always non-NULL. Instead, check each pointer argument is non-NULL before using it. Fix on f90a704f1258 from 27 May 2015, not in any released version of tor.
2015-06-02Merge remote-tracking branch 'public/bug15760_hard_026_v2'Nick Mathewson
2015-06-02A few more minor OpenSSL 1.1 fixes.Yawning Angel
* Use `TLS_method()` instead of the deprecated `SSLv23_method()` * Fix one missed conversion to `SSL_CIPHER_get_id()`
2015-06-02Merge remote-tracking branch 'teor/bug16115-minor-fixes'Nick Mathewson
2015-06-03Silence unused variable warnings in find_cipher_by_idteor
Unused variable warnings were still generated under some versions of OpenSSL. Instead, make sure all variables are used under all versions. Fix on 496df21c89d1, not in any released version of tor.
2015-06-02Merge remote-tracking branch 'public/bug15760_hard_026_v2'Nick Mathewson
Conflicts: src/common/tortls.c
2015-06-02Use autoconf, not OPENSSL_VERSION_NUMBER, to detect SSL_CIPHER_findNick Mathewson
Repairs build with libressl
2015-06-02Use accessor functions for client_random/server_random/master_keyNick Mathewson
If OpenSSL accepts my patch to introduce these functions, they'll be a way to help Tor work with OpenSSL 1.1.
2015-06-01Appease make check-spacesAndrea Shepard
2015-05-28Merge branch '12498_ed25519_keys_v6'Nick Mathewson
Fixed numerous conflicts, and ported code to use new base64 api.
2015-05-28Tests for AUTHENTICATE cell functionality.Nick Mathewson
2015-05-28Start testing cell encoders/processers for the v3 handshake.Nick Mathewson
An earlier version of these tests was broken; now they're a nicer, more robust, more black-box set of tests. The key is to have each test check a handshake message that is wrong in _one_ way.
2015-05-26Stop looking at session->ciphers when possibleNick Mathewson
If the OpenSSL team accepts my patch to add an SSL_get_client_ciphers function, this patch will make Tor use it when available, thereby working better with openssl 1.1.