Commit Graph

562 Commits

Author SHA1 Message Date
Mike Blumenkrantz 8edaf11298 clean up unused warnings
SVN revision: 54618
2010-11-17 06:41:41 +00:00
Mike Blumenkrantz 2747a8a86b optimization pass #1: 5% server speed increase
only get client ip addr when ecore_con_client_ip_get() is called, always stringshare ip addresses


SVN revision: 54612
2010-11-16 21:32:50 +00:00
Mike Blumenkrantz cc01698872 avoid looping infinitely while freeing servers, and don't log while freeing servers in case ecore_con's log domain has already been unregistered
SVN revision: 54479
2010-11-11 20:34:35 +00:00
Mike Blumenkrantz 3552a91b7d only free clients that aren't waiting on events to free them to prevent a segv
SVN revision: 54478
2010-11-11 20:20:44 +00:00
Mike Blumenkrantz c24c33cb54 fix bug where server disconnect event was not emitted, only set magic to none on clients/servers after final event has been emitted, and only null the data pointer at this point as well
SVN revision: 54476
2010-11-11 19:53:21 +00:00
Mike Blumenkrantz f334d907ae robustify ssl handshaking by catching extremely rare cases when the session has been deleted between handshake calls usually caused by thousands of concurrent sessions. yes, I'm benchmarking.
SVN revision: 54269
2010-11-07 05:36:40 +00:00
Mike Blumenkrantz 76bdd30da0 add magic strings for ecore_con
SVN revision: 54240
2010-11-06 17:04:09 +00:00
Mike Blumenkrantz 8a87f08107 delete servers on 0
SVN revision: 54209
2010-11-06 01:57:45 +00:00
Sebastian Dransfeld bc8a34b688 formatting
SVN revision: 54207
2010-11-06 01:22:50 +00:00
Sebastian Dransfeld 46cf959d70 Declaration at beginning of block
SVN revision: 54206
2010-11-06 01:22:40 +00:00
Sebastian Dransfeld 5fc5dcc215 Right fix for alloc
Actually we already checked that num != 0, but lacked num < 0 for one of
the allocs

SVN revision: 54205
2010-11-06 01:22:29 +00:00
Mike Blumenkrantz e289280418 add ecore_con_client_connected_get to avoid people scratching their heads and wondering how the hell they're supposed to know if a client has disconnected
SVN revision: 54204
2010-11-06 00:17:04 +00:00
Mike Blumenkrantz a5489cd5c7 remove erroneous return, add some debug info
SVN revision: 54203
2010-11-05 23:48:15 +00:00
Mike Blumenkrantz 0a32ddcc31 fix some cases where refcount was <0 and so things were not being freed
SVN revision: 54199
2010-11-05 20:55:02 +00:00
Mike Blumenkrantz add4a1d9a4 fix disconnect conditions for non-ssl reads
SVN revision: 54197
2010-11-05 19:46:48 +00:00
Sebastian Dransfeld 589e832cb7 Check whether we actually want to alloc data
SVN revision: 54179
2010-11-05 13:11:52 +00:00
Mike Blumenkrantz 6c1cd431a2 malloc check
SVN revision: 54156
2010-11-04 15:48:17 +00:00
Mike Blumenkrantz 2b0ff1a99f for some reason we weren't setting write on fds when all data had not been sent. this should make ecore_con MUCH snappier
SVN revision: 54155
2010-11-04 15:01:05 +00:00
Mike Blumenkrantz b9fade7530 more refactoring, fix bug that was exposed where a completed ssl read (which returns 0 bytes) causes disconnect
SVN revision: 54134
2010-11-03 19:38:00 +00:00
Mike Blumenkrantz 3ffb7e4c16 use safety macros to check mallocs, remove some dead code, optimize read loops by removing them, refactor a lot of code to not be indented halfway across the screen
SVN revision: 54133
2010-11-03 19:08:31 +00:00
Mike Blumenkrantz ddd151bf37 reformat using ecrustify because uncrustify dicked it up previously
SVN revision: 54128
2010-11-03 17:58:37 +00:00
Mike Blumenkrantz 33c81c1983 add some safety checks so people can see wtf went wrong when sends fail
SVN revision: 54125
2010-11-03 16:11:12 +00:00
Mike Blumenkrantz ecd54f41fe because SUCCESS is not an error.
SVN revision: 54078
2010-11-01 20:46:39 +00:00
Mike Blumenkrantz 01760826bb only free when exists
c/o vtorri


SVN revision: 54075
2010-11-01 11:24:29 +00:00
Mike Blumenkrantz 57cee09e0d eh I guess I'll clean up a little bit on failure too
SVN revision: 54074
2010-11-01 07:11:25 +00:00
Mike Blumenkrantz 025cfe4c67 fix incorrect realloc usage
SVN revision: 54073
2010-11-01 07:10:07 +00:00
Mike Blumenkrantz e4439fb0c6 add a sweet DBG logging function for gnutls because logging info rules
SVN revision: 53980
2010-10-29 04:31:16 +00:00
Mike Blumenkrantz c469c5bddf comment out all psk code since I haven't implemented it yet, fix gnutls servers (how the hell did it break?????)
SVN revision: 53979
2010-10-28 23:51:08 +00:00
Mike Blumenkrantz 4ca9db7909 a little bit of reformatting, be explicit with dhp allocation, and add server verification for client certs (apparently I was off my cut and paste game that day)
SVN revision: 53974
2010-10-28 18:25:35 +00:00
Mike Blumenkrantz 446c27ac31 remove dead code
SVN revision: 53973
2010-10-28 18:24:22 +00:00
Eduardo de Barros Lima 454f896043 Ecore: Decide whether library will be built or not in upper level
As requested by vtorri. :D



SVN revision: 53967
2010-10-28 16:37:41 +00:00
Mike Blumenkrantz a09f61a9f8 remove unnecessary ifdef
SVN revision: 53965
2010-10-28 16:07:47 +00:00
Mike Blumenkrantz b40a8e7efe wnen I said gnutls on my last commit, I really meant openssl. but when I say gnutls on this commit, I mean gnutls. really.
SVN revision: 53961
2010-10-28 14:48:25 +00:00
Mike Blumenkrantz 9e5e01219c add more gnutls info for dhp generation so you can tell if it ever stops
SVN revision: 53959
2010-10-28 14:07:47 +00:00
Mike Blumenkrantz 3638b837cc only set openssl verify when needed to avoid some handshake errors
SVN revision: 53955
2010-10-28 13:15:36 +00:00
Mike Blumenkrantz 9daab48ec2 fix some random error cases where events would fire too fast and cause a segv
SVN revision: 53952
2010-10-28 10:59:30 +00:00
Mike Blumenkrantz de31d29f65 hmmm actually this is probably the better way to fix it with maximum laziness
SVN revision: 53937
2010-10-27 20:52:36 +00:00
Mike Blumenkrantz d9d3d63f42 fix potential crash when someone specifies a weird/nonexistent ssl type
SVN revision: 53936
2010-10-27 20:51:09 +00:00
Sebastian Dransfeld 34cecc6810 We always require gnutls >= 2.10
SVN revision: 53911
2010-10-27 07:09:16 +00:00
Raphael Kubo da Costa a07b93ab49 From: Raphael Kubo da Costa <kubo@profusion.mobi>
This signature change follows libcurl's behaviour more closely:
CURLOPT_POSTFIELDSIZE expects a long, and a value of -1 means that
content length calculation is forwarded to libcurl, which performs a
strlen() on CURLOPT_POSTFIELD.



SVN revision: 53845
2010-10-25 02:53:06 +00:00
Sebastian Dransfeld 38f1292466 Check for gnutls >= 2.6
SVN revision: 53578
2010-10-18 18:28:11 +00:00
Cedric BAIL 515f06978b * ecore: time to cleanup ecore_con_url time.
Patch by Patch by Raphael Kubo da Costa <kubo@profusion.mobi>

	As discussed on the development mailing list, we should accept a
	double instead of a time_t for consistency with the rest of the API.
	Some apidox has been added too, and as a result
	ECORE_CON_URL_TIME_LASTMOD has been removed, since it does not make
	much sense (it is an HTTP response header).


SVN revision: 53572
2010-10-18 16:39:12 +00:00
Cedric BAIL 7100d4ac62 * ecore: remove now useless structure.
Patch by Raphael Kubo da Costa <kubo@profusion.mobi>


SVN revision: 53570
2010-10-18 13:49:06 +00:00
Cedric BAIL 313e855af5 * ecore: proper protection of newer constant.
SVN revision: 53567
2010-10-18 13:11:25 +00:00
Cedric BAIL 680fa431b3 * ecore: remove ecore_con_url_http_post_send as it expose CURL
API and is not useful to someone.


SVN revision: 53566
2010-10-18 12:52:46 +00:00
Mike Blumenkrantz 38c32c19a0 add info when generating dh params so people will know wtf is going on when their app hangs for an hour on startup
SVN revision: 53473
2010-10-15 21:31:25 +00:00
Carsten Haitzler 8be0e4590e remove changes in case developer dumber than expected?
:) (aagh was most annoying to find this today).



SVN revision: 53437
2010-10-15 07:42:29 +00:00
Mike Blumenkrantz 1df6a75020 make this more explicit in case compiler is dumber than expected?
SVN revision: 53431
2010-10-14 22:13:40 +00:00
Mike Blumenkrantz 513bdc7da1 stop trying to use ssl for local connections
SVN revision: 53409
2010-10-14 16:19:17 +00:00
Mike Blumenkrantz e2662d1b7c 2 obscure bugs in one commit:
make cert use more overt and set up fd handler before attempting to use it


SVN revision: 53363
2010-10-13 16:40:52 +00:00
Mike Blumenkrantz a880b29c6e <discomfitor> ecore_con_url.c: In function 'ecore_con_url_ftp_upload':
<discomfitor> ecore_con_url.c:963:14: warning: too few arguments for format
<rakuco> ah, missing a , filename there
<rakuco> can you commit that


SVN revision: 53334
2010-10-13 03:04:53 +00:00
Vincent Torri eeb330adc3 fix doxygen warnings
SVN revision: 53296
2010-10-12 06:34:31 +00:00
Lucas De Marchi fcad2a9244 Check for libcurl's return codes when appropriate.
Depending on the option being set by curl_easy_setopt, a return value
different from CURL_OK can be returned (the same applies to curl_multi_*
and CURLM_OK).

This commit checks the return value from those calls and usually
displays an error message with ERR() and returns -- in some cases, an
error is shown but the function does not immediately return.

A few lines of code have also been moved around in order to make
returning from functions as harmless as possible.

By: Raphael Kubo da Costa <kubo@profusion.mobi>



SVN revision: 53275
2010-10-11 19:13:12 +00:00
Lucas De Marchi 8912b4aa1d Simplify the checks in ecore_con_url_http_post_send.
By checking for the validity of the Ecore_Con_Url struct before anything
else and merging some if's, the code can get much cleaner.

By: Raphael Kubo da Costa <kubo@profusion.mobi>



SVN revision: 53274
2010-10-11 19:12:26 +00:00
Lucas De Marchi f39cdf2666 Always use ecore_con_url_ftp_use_epsv_set's parameters.
unused_warning--

By: Raphael Kubo da Costa <kubo@profusion.mobi>



SVN revision: 53273
2010-10-11 19:12:09 +00:00
Lucas De Marchi bd92321ff1 Simplify if clause.
There is no need for an else here, as the return is the last
instruction.

By: Raphael Kubo da Costa <kubo@profusion.mobi>



SVN revision: 53272
2010-10-11 19:11:54 +00:00
Lucas De Marchi c468b8c64b Fix some indentation problems in ecore_con_url.
* Indent blocks inside EINA_LIST_* macros.
* Use sane indentation in ecore_con_url_ftp_upload().

By: Raphael Kubo da Costa <kubo@profusion.mobi>



SVN revision: 53271
2010-10-11 19:11:26 +00:00
Lucas De Marchi b4e6e97808 Add a missing leading underscore to static variables.
By: Raphael Kubo da Costa <kubo@profusion.mobi>



SVN revision: 53270
2010-10-11 19:11:02 +00:00
Lucas De Marchi c74eece7d1 Remove erroneus __UNUSED__ mark.
data is indeed used by _ecore_con_url_idler_handler.

By: Raphael Kubo da Costa <kubo@profusion.mobi>



SVN revision: 53269
2010-10-11 19:10:43 +00:00
Gustavo Lima Chaves 6656e77c9c Yet another int -> Eina_Bool fix, similar to the one done to
ecore_con_url_verbose_set.

Patch by Rafael Kubo.



SVN revision: 53197
2010-10-08 18:41:49 +00:00
Bruno Dilly 13883b21f4 Document ecore_con_url_verbose_set's behaviour.
Author: Raphael Kubo da Costa <kubo@profusion.mobi>



SVN revision: 53191
2010-10-08 15:22:09 +00:00
Bruno Dilly 1a6d3a3eb7 unused_warning--
Author: Raphael Kubo da Costa <kubo@profusion.mobi>



SVN revision: 53190
2010-10-08 15:19:48 +00:00
Bruno Dilly b26732d09c In practice, it was already being treated as an Eina_Bool, so let us
declare it as such and simplify the code.

Author: Raphael Kubo da Costa <kubo@profusion.mobi>



SVN revision: 53189
2010-10-08 15:17:01 +00:00
Gustavo Sverzut Barbieri 3a88bc8b71 log domains in lower-case only please.
let's make it a standard so we don't have to look at the code
everytime to figure out the name...



SVN revision: 53172
2010-10-07 22:31:46 +00:00
Carsten Haitzler ac77353cfa lets set num to 0 shall we? :)
SVN revision: 53126
2010-10-06 23:54:06 +00:00
Mike Blumenkrantz 2f5589d890 add DBG for successfully completing SSL verification. with this commit, I believe that the ssl api should be 100% functional.
SVN revision: 52988
2010-10-02 22:27:30 +00:00
Mike Blumenkrantz e8ee2a75f0 require peer verification when verify is called
SVN revision: 52987
2010-10-02 22:01:43 +00:00
Mike Blumenkrantz abad9a5eb3 clear out the _try series of functions because they're useless
SVN revision: 52985
2010-10-02 21:13:56 +00:00
Mike Blumenkrantz 01c2990b47 openssl fixes:
only enable CRL checking when CRLs are loaded
	output full ssl session info to DBG


SVN revision: 52982
2010-10-02 09:58:06 +00:00
Mike Blumenkrantz 03d5ae91ca formatting, correctly set ->ssl_err when appropriate, add cert verification for openssl
SVN revision: 52979
2010-10-02 09:14:41 +00:00
Mike Blumenkrantz 603831821f some DBG edits, fix case where ssl handshake completes and no more data is sent/received
SVN revision: 52972
2010-10-02 01:32:54 +00:00
Mike Blumenkrantz 2516eec5f8 fix openssl CRL loading
SVN revision: 52971
2010-10-02 01:32:05 +00:00
Mike Blumenkrantz 0aaad2d41e add returns for later certificate checking
SVN revision: 52916
2010-09-30 01:53:23 +00:00
Mike Blumenkrantz 585fecac5b add fd flags for openssl
SVN revision: 52915
2010-09-30 01:50:58 +00:00
Mike Blumenkrantz ce529f9758 formatting
SVN revision: 52914
2010-09-30 01:01:41 +00:00
Mike Blumenkrantz a5d9f332a0 wow. just...wow
SVN revision: 52913
2010-09-30 00:45:48 +00:00
Mike Blumenkrantz e3ab6e3aeb I tried the lfelipe method: "hey, if fixing it seems to not be working, shouldn't you try to screw it up?"
it didn't work.


SVN revision: 52912
2010-09-30 00:01:25 +00:00
Mike Blumenkrantz 6990394b46 wow mike, you need to take a vacation. immediately.
change fd handler flags to be set when the handshake ISN'T finished


SVN revision: 52911
2010-09-29 23:56:31 +00:00
Mike Blumenkrantz 7cb095cc24 set fd handler flags properly from gnutls, update dbg info accordingly
reminder: do this for openssl later


SVN revision: 52910
2010-09-29 23:53:00 +00:00
Mike Blumenkrantz f799de1375 even more verbose debug output
SVN revision: 52906
2010-09-29 22:04:11 +00:00
Mike Blumenkrantz c0593c571a add more debug output, and even more with -DPRINT_LOTS_OF_DEBUG
SVN revision: 52891
2010-09-29 14:52:36 +00:00
Mike Blumenkrantz 7af28b08ff reorder some handshake events to hopefully reduce overhead slightly
SVN revision: 52878
2010-09-29 05:08:47 +00:00
Mike Blumenkrantz 75b958531d compile fixes for sun compiler
SVN revision: 52877
2010-09-29 04:06:28 +00:00
Mike Blumenkrantz f5f8a3c45d DBG output
SVN revision: 52875
2010-09-29 03:52:32 +00:00
Mike Blumenkrantz ac12734be2 switch to newer priority string stuff so gnutls devs stop being dicks to us
SVN revision: 52865
2010-09-28 21:59:13 +00:00
Mike Blumenkrantz 7b3b888471 whoops comparison typo
SVN revision: 52846
2010-09-28 09:28:04 +00:00
Mike Blumenkrantz b64b0b3ac9 first part of ssl rerererewrite: split functions, move stuff out of prepare(), and add verification for gnutls clients
SVN revision: 52837
2010-09-28 03:16:08 +00:00
Mike Blumenkrantz b04f0b0360 disable rehandshake support for now
SVN revision: 52792
2010-09-26 23:56:31 +00:00
Mike Blumenkrantz a46d1d564c attempt to rehandshake more frequently to avoid unnecessary looping
SVN revision: 52713
2010-09-25 04:22:10 +00:00
Mike Blumenkrantz ec372b3bd5 whoops typo
SVN revision: 52712
2010-09-25 04:21:03 +00:00
Mike Blumenkrantz 0d535058a9 implement ssl rehandshakes
convert bool variable to bool
fix bug where ssl read/write could improperly result in disconnect


SVN revision: 52710
2010-09-25 03:02:10 +00:00
Mike Blumenkrantz 8ea3bbdd2e fix warning detection
SVN revision: 52708
2010-09-24 22:49:06 +00:00
Mike Blumenkrantz ae6f569862 remove double check for ssl
SVN revision: 52705
2010-09-24 20:07:55 +00:00
Mike Blumenkrantz 2430457121 don't use ssl for local connections
SVN revision: 52703
2010-09-24 20:03:09 +00:00
Mike Blumenkrantz 4a09cb751c send server name extension
SVN revision: 52701
2010-09-24 19:47:25 +00:00
Cedric BAIL 3b324c10ed * ecore: check GNUTLS version before using new feature.
SVN revision: 52680
2010-09-24 11:25:40 +00:00
Boris Faure 9d95bf5a82 ecore: fix compilation when GNUTLS_HANDSHAKE_NEW_SESSION_TICKET is not defined
SVN revision: 52679
2010-09-24 09:42:16 +00:00
Mike Blumenkrantz da50c7b57d add session ticket support for gnutls, also add extremely detailed handshake error messages
SVN revision: 52675
2010-09-24 06:54:49 +00:00
Mike Blumenkrantz da4dcea34f fix events for async handshaking
SVN revision: 52672
2010-09-24 05:57:03 +00:00
Mike Blumenkrantz 1757239da5 fix kx priority
SVN revision: 52671
2010-09-24 05:56:45 +00:00
Mike Blumenkrantz 60b4269b5f yet another ecore_con overhaul!
*internal function rename
*******finally fix ssl handshaking to be non-blocking


SVN revision: 52665
2010-09-24 04:15:42 +00:00
Mike Blumenkrantz b306683fec something for morlenxus maybe
SVN revision: 52639
2010-09-23 10:35:30 +00:00
Mike Blumenkrantz f617346761 finally. fix. openssl. again.
SVN revision: 52613
2010-09-23 00:16:42 +00:00
Mike Blumenkrantz a1009c7893 cosmetic fix to use mixed protocol
SVN revision: 52610
2010-09-22 22:44:54 +00:00
Mike Blumenkrantz 0666d57062 better openssl error handlers
SVN revision: 52607
2010-09-22 22:33:02 +00:00
Mike Blumenkrantz 74d035df0b prefer stronger anonymous client encryption
also some progress on openssl that does nothing except make servers take forever to start


SVN revision: 52606
2010-09-22 22:06:49 +00:00
Mike Blumenkrantz 3150202755 clean up openssl handshake
SVN revision: 52597
2010-09-22 17:37:25 +00:00
Vincent Torri 3fd0a6fb08 remove whitespaces
SVN revision: 52569
2010-09-22 08:03:38 +00:00
Mike Blumenkrantz 172da9d9cf finally. fix. ssl.
SVN revision: 52567
2010-09-22 07:27:07 +00:00
Mike Blumenkrantz 787b09464b disable PSK ciphers for now since they aren't implemented
SVN revision: 52565
2010-09-22 06:13:29 +00:00
Mike Blumenkrantz fb977d72c4 implement functions to time out client connections to our server
*set/get default idle timeout of clients*
+ecore_con_server_timeout_set
+ecore_con_server_timeout_get
*set/get idle timeout of a client*
+ecore_con_client_timeout_set
+ecore_con_client_timeout_get

*get connection uptime of a client/server*
+ecore_con_client_uptime_get
+ecore_con_server_uptime_get

*fix giant ssl server memory leak*


SVN revision: 52564
2010-09-22 04:48:09 +00:00
Mike Blumenkrantz 5420324fd6 add ECORE_CON_USE_MIXED, which is just an alias for SSL3+TLS
SVN revision: 52561
2010-09-22 01:26:23 +00:00
Mike Blumenkrantz 38188213cf !@#$ it, just going to rewrite the whole damn thing:
*fix gnutls client/server implementations to use correct ciphers and free memory properly
*prevent lots of segvs

this message brought to you by gnu dicks


SVN revision: 52559
2010-09-22 00:10:10 +00:00
Mike Blumenkrantz c2da918bd5 fix ecore con openssl clients (really ecore_con_server...) sigh
SVN revision: 52538
2010-09-21 07:04:10 +00:00
Mike Blumenkrantz ad3ecd489a ecore_con_url_destroy -> ecore_con_url_free
also some small function rearranging


SVN revision: 52534
2010-09-21 06:49:07 +00:00
Mike Blumenkrantz 6121edec86 this should have gone in with r52531...
SVN revision: 52533
2010-09-21 05:34:49 +00:00
Mike Blumenkrantz 3b55af0102 fix doxy and EAPI for ssl function
SVN revision: 52532
2010-09-21 05:34:10 +00:00
Mike Blumenkrantz 0929a7a9ce -EAPI int ecore_con_url_url_set(Ecore_Con_Url *url_con,
+EAPI Eina_Bool         ecore_con_url_url_set(Ecore_Con_Url *url_con,
-EAPI int               ecore_con_url_httpauth_set(Ecore_Con_Url *url_con,
+EAPI Eina_Bool         ecore_con_url_httpauth_set(Ecore_Con_Url *url_con,
-EAPI int               ecore_con_url_send(Ecore_Con_Url *url_con,
+EAPI Eina_Bool         ecore_con_url_send(Ecore_Con_Url *url_con,
-EAPI int               ecore_con_url_ftp_upload(Ecore_Con_Url *url_con,
+EAPI Eina_Bool         ecore_con_url_ftp_upload(Ecore_Con_Url *url_con,


SVN revision: 52531
2010-09-21 03:14:46 +00:00
Mike Blumenkrantz f6a8d74b50 formatting
SVN revision: 52530
2010-09-21 03:08:35 +00:00
Mike Blumenkrantz fdadea7eca ecore_con_server_connected_get now returns Eina_Bool
SVN revision: 52525
2010-09-21 01:48:46 +00:00
Mike Blumenkrantz e56789f77e This is the Doxygen Police! If you committed any of these lines, accept your public shaming!
SVN revision: 52513
2010-09-20 20:52:15 +00:00
Mike Blumenkrantz 130f5bec81 doxy error fixes
SVN revision: 52512
2010-09-20 20:33:50 +00:00
Mike Blumenkrantz 40396f6867 doxy todo--
SVN revision: 52509
2010-09-20 20:12:17 +00:00
Mike Blumenkrantz c578a955ae fix obscure error case where CLIENT_DEL event is not generated after a client ssl pings ecore's server and disconnects immediately after handshake
SVN revision: 52504
2010-09-20 19:32:37 +00:00
Mike Blumenkrantz 137da6826d add cl->client_count member to prevent segv when counting a list that is actually null but hasn't been nulled
SVN revision: 52503
2010-09-20 19:31:11 +00:00
Mike Blumenkrantz d28a6dd5d6 formatting, switch lost_client to bool
SVN revision: 52501
2010-09-20 18:52:52 +00:00
Mike Blumenkrantz 8e3be2fef8 FINALLY FIX OPENSSL SERVER!!!!!!!!! YESSSSSSSSSSSSSSSSSSSSS
SVN revision: 52497
2010-09-20 18:25:21 +00:00
Mike Blumenkrantz 27e3324ad2 remove ssl2 support completely
SVN revision: 52469
2010-09-19 19:38:38 +00:00
Mike Blumenkrantz d1db6f1cf4 gnutls cleanup: only create diffie hellman bits on server init instead of for each client
overhead/blocking--
speed++


SVN revision: 52468
2010-09-19 19:25:47 +00:00
Mike Blumenkrantz 0c4707dcbc finally crush the last openssl segv
still broken though


SVN revision: 52467
2010-09-19 18:40:43 +00:00
Carsten Haitzler 624628e9d1 more warngins--
SVN revision: 52460
2010-09-19 03:55:06 +00:00
Carsten Haitzler 0abc6703ba warning--
SVN revision: 52456
2010-09-19 03:28:18 +00:00
Mike Blumenkrantz 5775219503 check return of ssl_server_prepare
SVN revision: 52423
2010-09-18 19:29:43 +00:00
Mike Blumenkrantz 4239d5d67f giant cleanups/rewrites which are unnoticeable to users:
*client->server renamed client->host_server to clarify ambiguity
*ecore_con_ssl_client_prepare.* killed off because it was useless and wrong
*openssl generates only one SSL_CTX per server now instead of a new one for each client, which is broken/unnecessary/wasteful
**as a result, certificate loading is now only done once
**additionally this will save a very large amount of memory and avoid unnecessary/broken refcounting
*ecore_con_ssl_server_prepare.* rewritten to actually be useful instead of just a lazy way to null pointers
**all SSL_CTX code now goes here^
*some formatting fixes
*internal function renames


SVN revision: 52422
2010-09-18 19:26:05 +00:00
Carsten Haitzler fa5b80b879 dont use tls max if it doesnt exist eh?
SVN revision: 52413
2010-09-18 11:41:15 +00:00
Mike Blumenkrantz 36bd287841 add mixed protocol for gnutls as well
SVN revision: 52412
2010-09-18 08:46:17 +00:00
Mike Blumenkrantz a8ef623de7 allow mixing sslv3+tlsv1 in openssl, FINALLY FIX INITIAL BUG FOR OPENSSL SERVERS!
note that openssl servers still do not work because there is more than one bug :/


SVN revision: 52411
2010-09-18 08:36:13 +00:00
Mike Blumenkrantz f62bcf1ff1 switch private struct members from char bitfields to Eina_Bool bitfields
no noticeable difference


SVN revision: 52399
2010-09-18 06:30:13 +00:00
Mike Blumenkrantz f8d56a023f a loooooooot of outdents and reformatting
SVN revision: 52397
2010-09-18 06:06:05 +00:00
Mike Blumenkrantz e9361b4e1c whoops forgot an UNUSED for openssl
SVN revision: 52396
2010-09-18 05:32:27 +00:00
Mike Blumenkrantz ac86c1aaa4 more progress on fixing openssl servers, fix all warnings, add error checking for openssl code
SVN revision: 52395
2010-09-18 05:31:00 +00:00
Mike Blumenkrantz 3736856f82 stop the indenting and line wrapping madness!!!!!!!
SVN revision: 52394
2010-09-18 05:30:16 +00:00
Mike Blumenkrantz 8cd87afb04 outdent for readability
SVN revision: 52393
2010-09-18 04:59:11 +00:00
Mike Blumenkrantz d8afcde705 add rest of ssl algorithms and clean up
SVN revision: 52391
2010-09-18 01:27:38 +00:00
Mike Blumenkrantz 8db37b8518 formatting
SVN revision: 52390
2010-09-18 01:20:25 +00:00
Mike Blumenkrantz 5e499b0c0e fix gnutls ssl
SVN revision: 52385
2010-09-17 19:43:03 +00:00
Mike Blumenkrantz 6542578149 new ssl error output: now with detailed location info and 50% more fiber!
SVN revision: 52380
2010-09-17 17:39:32 +00:00
Mike Blumenkrantz d74f46d5a5 simplify error conditions and output errrors on failure
SVN revision: 52378
2010-09-17 17:22:59 +00:00
Mike Blumenkrantz c7608248dd enable compression for gnutls, add error checks to client functions
SVN revision: 52377
2010-09-17 17:18:41 +00:00
Mike Blumenkrantz cb0c97b6c3 add error checking for servers
SVN revision: 52376
2010-09-17 17:03:15 +00:00