| Commit message (Expand) | Author | Age | Files | Lines |
| * | Add package names for ArchLinux. | Peter Powell | 2019-07-16 | 1 | -0/+1 |
| * | Reset diagnostic pragmas after including external headers (#1661). | linuxdaemon | 2019-06-24 | 1 | -0/+8 |
| * | Add a way to disable older SSL versions with ssl_openssl. | Peter Powell | 2019-06-10 | 1 | -1/+16 |
| * | Some more text fixes and improvements (#1618). | Robby | 2019-04-28 | 1 | -1/+1 |
| * | Make more config stuff case insensitive. | Peter Powell | 2018-07-24 | 1 | -3/+3 |
| * | Add ConfigTag::getUInt for reading unsigned config values. | Peter Powell | 2018-04-16 | 1 | -1/+1 |
| * | Remove the default value in ConfigTag::get{Duration,Float,Int}. | Peter Powell | 2018-04-16 | 1 | -2/+2 |
| * | Merge pull request #1370 from clinew/insp30+openssl-crl•••Add OpenSSL CRLs. | Peter Powell | 2017-12-21 | 1 | -0/+45 |
| |\ |
|
| | * | Add OpenSSL CRLs.•••The 'crlfile' argument can point to a file that contains valid CRLs.
The 'crlpath' argument can point to a directory which contains CRLs,
albeit in OpenSSL's special hashed/symlink format. The 'crlmode' option
'chain' checks all certificates in the chain while the option 'leaf'
checks only the leaf certificate in a chain.
| Wade Cline | 2017-12-14 | 1 | -0/+45 |
| * | | Remove usage of deprecated API members in m_ssl_openssl.•••Closes #1440.
| Peter Powell | 2017-12-16 | 1 | -5/+19 |
| |/ |
|
| * | Bump the minimum versions of GnuTLS to 2.0.0 and OpenSSL to 1.0.0.•••Old TLS libraries should not be used anymore due to security risks.
| Peter Powell | 2017-11-30 | 1 | -7/+2 |
| * | Improve TLS security configuration in m_ssl_openssl.•••- Always disable SSLv3. Unreal has already done this so clients
will have to upgrade anyway.
- Disable TLSv1.0 by default. Various security standards (e.g.
PCI DSS) are already planning on sunsetting this so we should
too.
| Peter Powell | 2017-11-30 | 1 | -4/+3 |
| * | Unite SSL service providers and SSL profile classes | Attila Molnar | 2017-11-13 | 1 | -19/+31 |
| * | Fix some SSL module issues.•••- Use the same dhparams name in m_ssl_openssl as in other modules.
- Fix building m_ssl_mbedtls.
| Peter Powell | 2017-11-01 | 1 | -1/+1 |
| * | Add support to IOHook for retrieving the hostname sent via SNI. | Peter Powell | 2017-10-29 | 1 | -0/+10 |
| * | Add PackageInfo directives for Debian. | Peter Powell | 2017-10-21 | 1 | -0/+1 |
| * | Clean up OnCleanup.•••- Switch to using ExtensionItem::ExtensibleType for the type instead
of TargetTypeFlags.
- Pass the extensible to OnCleanup as an Extensible pointer
instead of a void pointer.
- Call OnCleanup for memberships as well as channels and users.
- Rewrite event documentation to remove outdated references.
| Peter Powell | 2017-10-18 | 1 | -2/+2 |
| * | Fix a broken distro constraint in the m_ssl_openssl PackageInfo. | Peter Powell | 2017-08-11 | 1 | -1/+1 |
| * | Fix LibreSSL not having a shim for the OpenSSL 1.1 BIO API. | Peter Powell | 2016-11-23 | 1 | -1/+1 |
| * | Fix OpenSSL build errors caused by BIO/BIO_METHOD now being opaque. | Peter Powell | 2016-10-25 | 1 | -5/+45 |
| * | Add CentOS PackageInfo | Adam | 2016-09-16 | 1 | -0/+1 |
| * | Rewrite the build system directive parser. | Peter Powell | 2016-09-16 | 1 | -3/+6 |
| * | Merge insp20 | Attila Molnar | 2016-08-17 | 1 | -1/+7 |
| |\ |
|
| | * | m_ssl_openssl Verify DH params being non-NULL before setting it on the context•••Fixes issue reported by @m4rkw on IRC
| Attila Molnar | 2016-07-22 | 1 | -4/+11 |
| | * | m_ssl_gnutls, m_ssl_openssl After a read schedule another read if data remain... | Attila Molnar | 2016-06-21 | 1 | -1/+8 |
| * | | m_ssl_* Add option to sslprofile controlling whether to request client certif... | Attila Molnar | 2016-08-08 | 1 | -1/+10 |
| * | | Add StreamSocket::GetModHook() for obtaining the IOHook belonging to a given ...•••Use it to simplify logic in all modules using or providing IOHooks
| Attila Molnar | 2016-08-08 | 1 | -8/+4 |
| * | | Pass sendq to OnStreamSocketWrite | Attila Molnar | 2016-08-08 | 1 | -2/+1 |
| * | | Deduplicate code for on connect SSL ciphersuite NOTICE by moving it into m_ss... | Attila Molnar | 2016-04-28 | 1 | -22/+0 |
| * | | Export the GetCiphersuite() method from the SSL modules | Attila Molnar | 2016-04-28 | 1 | -1/+3 |
| * | | m_ssl_openssl Disable compression and SSL v3 by default | Attila Molnar | 2015-11-10 | 1 | -2/+2 |
| * | | m_ssl_openssl Add workaround for a memory leak in OpenSSL | Attila Molnar | 2015-11-10 | 1 | -1/+9 |
| * | | m_ssl_openssl Implement custom BIO methods that call SocketEngine methods | Attila Molnar | 2015-07-07 | 1 | -3/+86 |
| * | | m_ssl_openssl Remove NULL check of the session in OpenSSLIOHook constructor | Attila Molnar | 2015-07-07 | 1 | -2/+0 |
| * | | m_ssl_openssl Use SSL_MODE_RELEASE_BUFFERS if available | Attila Molnar | 2015-07-06 | 1 | -1/+6 |
| * | | m_ssl_openssl Enable ECDH when acting as a server on OpenSSL 1.0.0 and later | Attila Molnar | 2015-07-06 | 1 | -0/+5 |
| * | | m_ssl_openssl Unconditionally compile code for detecting renegotiation and di... | Attila Molnar | 2015-07-06 | 1 | -9/+1 |
| * | | m_ssl_gnutls, m_ssl_openssl Log library version information on load | Attila Molnar | 2015-06-22 | 1 | -0/+2 |
| * | | Call OnStreamSocketWrite() once per write event•••Do sendq flattening in SSL modules, move code for it into class SSLIOHook from core
| Attila Molnar | 2015-06-06 | 1 | -3/+8 |
| * | | Add max outgoing record size option to sslprofile config | Attila Molnar | 2015-06-06 | 1 | -0/+6 |
| * | | Convert all code to use StreamSocket::SendQueue•••Let OnStreamSocketWrite see the entire sendq instead of one element at a time
| Attila Molnar | 2015-06-06 | 1 | -2/+4 |
| * | | Merge insp20 | Attila Molnar | 2015-05-10 | 1 | -0/+14 |
| |\| |
|
| * | | m_ssl_openssl Remove OpenSSLIOHook::outbound and is_outbound constructor para... | Attila Molnar | 2015-03-05 | 1 | -5/+3 |
| * | | m_ssl_openssl Specify TLS client/server role on session creation, switch to S... | Attila Molnar | 2015-03-05 | 1 | -11/+14 |
| * | | m_ssl_gnutls, m_ssl_openssl Deduplicate Handshake() calling code | Attila Molnar | 2015-03-05 | 1 | -25/+23 |
| * | | m_ssl_gnutls, m_ssl_openssl Simplify status handling in IOHook read/write han...•••Remove states ISSL_CLOSING and ISSL_CLOSED from m_ssl_gnutls
| Attila Molnar | 2015-03-05 | 1 | -8/+3 |
| * | | m_ssl_gnutls, m_ssl_openssl Simplify Handshake() result handling | Attila Molnar | 2015-03-05 | 1 | -21/+13 |
| * | | m_ssl_gnutls, m_ssl_openssl Prepend TLS protocol version to ciphersuite string | Attila Molnar | 2015-01-27 | 1 | -0/+1 |
| * | | m_ssl_gnutls, m_ssl_openssl Extract code that builds a ciphersuite string int... | Attila Molnar | 2015-01-27 | 1 | -1/+8 |
| * | | Reduce std::string::substr() usage•••substr() returns a new string while erase() and assign() modify the existing one
| Attila Molnar | 2015-01-10 | 1 | -1/+1 |