kimcinoo
/
efl
forked from enlightenment/efl
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
11,227 Commits 487 Branches 154 Tags 426 MiB
Commit Graph

79 Commits

Author SHA1 Message Date
Mike Blumenkrantz 03d5ae91ca formatting, correctly set ->ssl_err when appropriate, add cert verification for openssl 
SVN revision: 52979
 2010-10-02 09:14:41 +00:00
Mike Blumenkrantz 2516eec5f8 fix openssl CRL loading 
SVN revision: 52971
 2010-10-02 01:32:05 +00:00
Mike Blumenkrantz 0aaad2d41e add returns for later certificate checking 
SVN revision: 52916
 2010-09-30 01:53:23 +00:00
Mike Blumenkrantz 585fecac5b add fd flags for openssl 
SVN revision: 52915
 2010-09-30 01:50:58 +00:00
Mike Blumenkrantz ce529f9758 formatting 
SVN revision: 52914
 2010-09-30 01:01:41 +00:00
Mike Blumenkrantz a5d9f332a0 wow. just...wow 
SVN revision: 52913
 2010-09-30 00:45:48 +00:00
Mike Blumenkrantz e3ab6e3aeb I tried the lfelipe method: "hey, if fixing it seems to not be working, shouldn't you try to screw it up?" 
it didn't work.


SVN revision: 52912
 2010-09-30 00:01:25 +00:00
Mike Blumenkrantz 6990394b46 wow mike, you need to take a vacation. immediately. 
change fd handler flags to be set when the handshake ISN'T finished


SVN revision: 52911
 2010-09-29 23:56:31 +00:00
Mike Blumenkrantz 7cb095cc24 set fd handler flags properly from gnutls, update dbg info accordingly 
reminder: do this for openssl later


SVN revision: 52910
 2010-09-29 23:53:00 +00:00
Mike Blumenkrantz f799de1375 even more verbose debug output 
SVN revision: 52906
 2010-09-29 22:04:11 +00:00
Mike Blumenkrantz c0593c571a add more debug output, and even more with -DPRINT_LOTS_OF_DEBUG 
SVN revision: 52891
 2010-09-29 14:52:36 +00:00
Mike Blumenkrantz f5f8a3c45d DBG output 
SVN revision: 52875
 2010-09-29 03:52:32 +00:00
Mike Blumenkrantz ac12734be2 switch to newer priority string stuff so gnutls devs stop being dicks to us 
SVN revision: 52865
 2010-09-28 21:59:13 +00:00
Mike Blumenkrantz 7b3b888471 whoops comparison typo 
SVN revision: 52846
 2010-09-28 09:28:04 +00:00
Mike Blumenkrantz b64b0b3ac9 first part of ssl rerererewrite: split functions, move stuff out of prepare(), and add verification for gnutls clients 
SVN revision: 52837
 2010-09-28 03:16:08 +00:00
Mike Blumenkrantz b04f0b0360 disable rehandshake support for now 
SVN revision: 52792
 2010-09-26 23:56:31 +00:00
Mike Blumenkrantz ec372b3bd5 whoops typo 
SVN revision: 52712
 2010-09-25 04:21:03 +00:00
Mike Blumenkrantz 0d535058a9 implement ssl rehandshakes 
convert bool variable to bool
fix bug where ssl read/write could improperly result in disconnect


SVN revision: 52710
 2010-09-25 03:02:10 +00:00
Mike Blumenkrantz 8ea3bbdd2e fix warning detection 
SVN revision: 52708
 2010-09-24 22:49:06 +00:00
Mike Blumenkrantz ae6f569862 remove double check for ssl 
SVN revision: 52705
 2010-09-24 20:07:55 +00:00
Mike Blumenkrantz 2430457121 don't use ssl for local connections 
SVN revision: 52703
 2010-09-24 20:03:09 +00:00
Mike Blumenkrantz 4a09cb751c send server name extension 
SVN revision: 52701
 2010-09-24 19:47:25 +00:00
Cedric BAIL 3b324c10ed * ecore: check GNUTLS version before using new feature. 
SVN revision: 52680
 2010-09-24 11:25:40 +00:00
Boris Faure 9d95bf5a82 ecore: fix compilation when GNUTLS_HANDSHAKE_NEW_SESSION_TICKET is not defined 
SVN revision: 52679
 2010-09-24 09:42:16 +00:00
Mike Blumenkrantz da50c7b57d add session ticket support for gnutls, also add extremely detailed handshake error messages 
SVN revision: 52675
 2010-09-24 06:54:49 +00:00
Mike Blumenkrantz 1757239da5 fix kx priority 
SVN revision: 52671
 2010-09-24 05:56:45 +00:00
Mike Blumenkrantz 60b4269b5f yet another ecore_con overhaul! 
*internal function rename
*******finally fix ssl handshaking to be non-blocking


SVN revision: 52665
 2010-09-24 04:15:42 +00:00
Mike Blumenkrantz b306683fec something for morlenxus maybe 
SVN revision: 52639
 2010-09-23 10:35:30 +00:00
Mike Blumenkrantz f617346761 finally. fix. openssl. again. 
SVN revision: 52613
 2010-09-23 00:16:42 +00:00
Mike Blumenkrantz a1009c7893 cosmetic fix to use mixed protocol 
SVN revision: 52610
 2010-09-22 22:44:54 +00:00
Mike Blumenkrantz 0666d57062 better openssl error handlers 
SVN revision: 52607
 2010-09-22 22:33:02 +00:00
Mike Blumenkrantz 74d035df0b prefer stronger anonymous client encryption 
also some progress on openssl that does nothing except make servers take forever to start


SVN revision: 52606
 2010-09-22 22:06:49 +00:00
Mike Blumenkrantz 3150202755 clean up openssl handshake 
SVN revision: 52597
 2010-09-22 17:37:25 +00:00
Vincent Torri 3fd0a6fb08 remove whitespaces 
SVN revision: 52569
 2010-09-22 08:03:38 +00:00
Mike Blumenkrantz 172da9d9cf finally. fix. ssl. 
SVN revision: 52567
 2010-09-22 07:27:07 +00:00
Mike Blumenkrantz 787b09464b disable PSK ciphers for now since they aren't implemented 
SVN revision: 52565
 2010-09-22 06:13:29 +00:00
Mike Blumenkrantz 5420324fd6 add ECORE_CON_USE_MIXED, which is just an alias for SSL3+TLS 
SVN revision: 52561
 2010-09-22 01:26:23 +00:00
Mike Blumenkrantz 38188213cf !@#$ it, just going to rewrite the whole damn thing: 
*fix gnutls client/server implementations to use correct ciphers and free memory properly
*prevent lots of segvs

this message brought to you by gnu dicks


SVN revision: 52559
 2010-09-22 00:10:10 +00:00
Mike Blumenkrantz c2da918bd5 fix ecore con openssl clients (really ecore_con_server...) sigh 
SVN revision: 52538
 2010-09-21 07:04:10 +00:00
Mike Blumenkrantz 3b55af0102 fix doxy and EAPI for ssl function 
SVN revision: 52532
 2010-09-21 05:34:10 +00:00
Mike Blumenkrantz 8e3be2fef8 FINALLY FIX OPENSSL SERVER!!!!!!!!! YESSSSSSSSSSSSSSSSSSSSS 
SVN revision: 52497
 2010-09-20 18:25:21 +00:00
Mike Blumenkrantz 27e3324ad2 remove ssl2 support completely 
SVN revision: 52469
 2010-09-19 19:38:38 +00:00
Mike Blumenkrantz d1db6f1cf4 gnutls cleanup: only create diffie hellman bits on server init instead of for each client 
overhead/blocking--
speed++


SVN revision: 52468
 2010-09-19 19:25:47 +00:00
Mike Blumenkrantz 0c4707dcbc finally crush the last openssl segv 
still broken though


SVN revision: 52467
 2010-09-19 18:40:43 +00:00
Carsten Haitzler 624628e9d1 more warngins-- 
SVN revision: 52460
 2010-09-19 03:55:06 +00:00
Mike Blumenkrantz 4239d5d67f giant cleanups/rewrites which are unnoticeable to users: 
*client->server renamed client->host_server to clarify ambiguity
*ecore_con_ssl_client_prepare.* killed off because it was useless and wrong
*openssl generates only one SSL_CTX per server now instead of a new one for each client, which is broken/unnecessary/wasteful
**as a result, certificate loading is now only done once
**additionally this will save a very large amount of memory and avoid unnecessary/broken refcounting
*ecore_con_ssl_server_prepare.* rewritten to actually be useful instead of just a lazy way to null pointers
**all SSL_CTX code now goes here^
*some formatting fixes
*internal function renames


SVN revision: 52422
 2010-09-18 19:26:05 +00:00
Carsten Haitzler fa5b80b879 dont use tls max if it doesnt exist eh? 
SVN revision: 52413
 2010-09-18 11:41:15 +00:00
Mike Blumenkrantz 36bd287841 add mixed protocol for gnutls as well 
SVN revision: 52412
 2010-09-18 08:46:17 +00:00
Mike Blumenkrantz a8ef623de7 allow mixing sslv3+tlsv1 in openssl, FINALLY FIX INITIAL BUG FOR OPENSSL SERVERS! 
note that openssl servers still do not work because there is more than one bug :/


SVN revision: 52411
 2010-09-18 08:36:13 +00:00
Mike Blumenkrantz e9361b4e1c whoops forgot an UNUSED for openssl 
SVN revision: 52396
 2010-09-18 05:32:27 +00:00