aboutsummaryrefslogtreecommitdiffstats
path: root/src/tls/tlsv1_client.c
Commit message (Collapse)AuthorAgeFilesLines
* Remove the GPL notification from files contributed by Jouni MalinenJouni Malinen2012-02-111-8/+2
| | | | | | | Remove the GPL notification text from the files that were initially contributed by myself. Signed-hostap: Jouni Malinen <j@w1.fi>
* TLS: Add support for SHA256-based cipher suites from RFC 5246Jouni Malinen2011-11-271-0/+13
| | | | Signed-hostap: Jouni Malinen <j@w1.fi>
* TLS: Update file headers to include TLS v1.2 supportJouni Malinen2011-11-271-1/+1
| | | | Signed-hostap: Jouni Malinen <j@w1.fi>
* TLS: Pass version to tls_prf() in preparation for new PRFsJouni Malinen2011-11-271-3/+6
| | | | Signed-hostap: Jouni Malinen <j@w1.fi>
* Use NULL instead of 0 for pointersJouni Malinen2011-11-181-1/+1
| | | | Signed-hostap: Jouni Malinen <j@w1.fi>
* TLS: Fix double-free on error pathJouni Malinen2011-11-131-1/+1
| | | | Signed-hostap: Jouni Malinen <j@w1.fi>
* TLS: Add preliminary support for partial message processingJouni Malinen2011-11-131-41/+107
| | | | | | | Reassemble partial TLS records to make the internal TLS client implementation more convenient for stream sockets. Signed-hostap: Jouni Malinen <j@w1.fi>
* TLS: Clean up TLS record layer processingJouni Malinen2011-11-051-17/+56
| | | | | | | | | | Return number of user input bytes from tlsv1_record_receive() to move this detail into the proper record layer processing. In addition, ignore unknown content types at record layer and allow processing to continue after warning level TLS alerts to provide minimal workaround for closure alerts. Signed-hostap: Jouni Malinen <j@w1.fi>
* TLS: Add support for TLS v1.1 (RFC 4346) with internal TLSJouni Malinen2011-09-251-9/+21
| | | | | This is disabled by defautl and can be enabled with CONFIG_TLSV11=y build configuration parameter.
* TLS: Do not enforce in-place processing in tlsv1_record_send()Jouni Malinen2011-09-251-3/+1
| | | | | | In preparation for record layer format changes, modify tlsv1_record_send() to use separate buffers for payload and the output message.
* TLS: Add support for tls_disable_time_checks=1 in client modeJouni Malinen2011-07-051-1/+7
| | | | | | This phase1 parameter for TLS-based EAP methods was already supported with GnuTLS and this commit extends that support for OpenSSL and the internal TLS implementation.
* Include functionality to support EAP-FAST unconditionallyJouni Malinen2009-12-061-4/+0
| | | | | | | | | | Clean up the internal TLS implementation by removing conditional build blocks for (mostly) EAP-FAST specific functionality. This will increase the size a big for non-EAP-FAST builds, but is quite helpful in making src/tls/libtls.a with single build options. If the potential size reduction is considered significant in the future, this can be reconsider with a more library compatible way (e.g., external file with registration function, etc.).
* Remove src/crypto from default include pathJouni Malinen2009-11-291-2/+2
| | | | | | In addition, start ordering header file includes to be in more consistent order: system header files, src/utils, src/*, same directory as the *.c file.
* Fix a typo in a commentJouni Malinen2009-11-211-1/+1
|
* Add a workaround for EAP-FAST with Cisco AP local RADIUS serverJouni Malinen2009-03-081-0/+11
| | | | | | | | | | | | | | | | When using the internal TLS implementation, EAP-FAST unauthenticated provisioning ends up proposing multiple cipher suites. It looks like Cisco AP (at least 350 and 1200 series) local authentication server does not know how to search cipher suites from the list and seem to require that the last entry in the list is the one that it wants to use. However, TLS specification requires the list to be in the client preference order. As a workaround, ass anon-DH AES-128-SHA1 again at the end of the list to allow the Cisco code to find it. This fixed EAP-FAST provisioning with the following IOS version: Cisco IOS Software, C350 Software (C350-K9W7-M), Version 12.3(8)JEA3, RELEASE SOFTWARE (fc2) Compiled Wed 21-Nov-07 14:08 by ccai
* Fixed number of doxygen warningsJouni Malinen2009-01-021-0/+2
|
* Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 releaseJouni Malinen2008-02-271-0/+658
generated by cgit v1.1 at 2024-09-21 00:33:17 +0000