18 Commits

Author SHA1 Message Date
bsmith%mozilla.com
4778bbc800 Bug 700516: Remove SSL2 support for SSL_RestartHandshakeAfterServerCert and SSL_RestartHandshakeAfterCertReq, r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@263067 18797224-902f-48f8-a5cc-f745e15eee43
2011-11-11 19:06:52 +00:00
bsmith%mozilla.com
c73410f580 Bug 547312: Next protocol negotiation support (minor fixes), r=agl
git-svn-id: svn://10.0.0.236/trunk@263063 18797224-902f-48f8-a5cc-f745e15eee43
2011-11-08 22:12:05 +00:00
bsmith%mozilla.com
0601ca68ad Bug 547312: Implement client-side support for NPN; original patch by agl r=wtc; changes by bsmith r=agl
git-svn-id: svn://10.0.0.236/trunk@263024 18797224-902f-48f8-a5cc-f745e15eee43
2011-10-29 00:29:11 +00:00
alexei.volkov.bugs%sun.com
e97a0eb9f0 639789 - Possible minor memory leak in SNI code. r=alexei, bob. Patch is provided by Meena Vyas.
git-svn-id: svn://10.0.0.236/trunk@262104 18797224-902f-48f8-a5cc-f745e15eee43
2011-03-24 01:40:14 +00:00
alexei.volkov.bugs%sun.com
c41d035d0b 629299 - core dump when tls session tickets are enabled and session cache is disabled. r=wct,rrelyea.
git-svn-id: svn://10.0.0.236/trunk@262058 18797224-902f-48f8-a5cc-f745e15eee43
2011-03-16 18:37:42 +00:00
nelson%bolyard.com
f01c5988df Bug 555700: ssl3_SendServerNameXtn null checks ss after dereferencing it
Patch contributed by Timeless <timeless@bemail.org>, r=nelson


git-svn-id: svn://10.0.0.236/trunk@260139 18797224-902f-48f8-a5cc-f745e15eee43
2010-04-03 19:19:07 +00:00
alexei.volkov.bugs%sun.com
1121fde6c4 Backout the previous patch. Restore state of the trunk before tagging the tree.
git-svn-id: svn://10.0.0.236/trunk@259856 18797224-902f-48f8-a5cc-f745e15eee43
2010-03-01 20:03:45 +00:00
alexei.volkov.bugs%sun.com
afbbd7d153 548654 - libssl: handshake failure alert is set twice upon unsuccessful extension parsing. r=wtc
git-svn-id: svn://10.0.0.236/trunk@259819 18797224-902f-48f8-a5cc-f745e15eee43
2010-02-26 19:25:44 +00:00
wtc%google.com
44e58a0d4e Bug 537356: Don't bother initializing unused entries in client hello
senders arrays with { -1, NULL }.  r=nelson.


git-svn-id: svn://10.0.0.236/trunk@259578 18797224-902f-48f8-a5cc-f745e15eee43
2010-02-03 02:38:20 +00:00
alexei.volkov.bugs%sun.com
08cba3b588 360421 - Implement TLS Server Name Indication for servers. Save server name in session ticket. r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@259576 18797224-902f-48f8-a5cc-f745e15eee43
2010-02-03 02:25:36 +00:00
wtc%google.com
fa46d39e9d Bug 537356: In SSL 3.0, send and handle the renegotiation_info extension
but not any other extension.  r=rrelyea.
Modified Files:
	ssl3con.c ssl3ext.c


git-svn-id: svn://10.0.0.236/trunk@259505 18797224-902f-48f8-a5cc-f745e15eee43
2010-01-29 19:20:28 +00:00
kaie%kuix.de
bd4c4b9fa4 Bug 540304, Implement SSL_HandshakeNegotiatedExtension
r=nelson


git-svn-id: svn://10.0.0.236/trunk@259501 18797224-902f-48f8-a5cc-f745e15eee43
2010-01-28 16:14:25 +00:00
nelson%bolyard.com
0bc55de11a Bug 537356: Implement new safe SSL3 & TLS renegotiation, r=wtc
git-svn-id: svn://10.0.0.236/trunk@259500 18797224-902f-48f8-a5cc-f745e15eee43
2010-01-28 06:19:13 +00:00
alexei.volkov.bugs%sun.com
d26b36b737 360421 - Implement TLS Server Name Indication for servers. r=nelson
git-svn-id: svn://10.0.0.236/trunk@259396 18797224-902f-48f8-a5cc-f745e15eee43
2010-01-14 22:15:26 +00:00
wtc%google.com
c0ec7fbfae Bug 275744: In client hello, list compression methods in the order of
desirability so that servers that simply pick the first mutually supported
compression method will pick the best compression method.  Add compression
method info to the SSLChannelInfo structure.  Rename SSL3CompressionMethod
to SSLCompressionMethod and add the ssl_ prefix to the enum constants.
Remove an extra comma in strsclnt.c that breaks the concatenation of two
string literals.  r=agl,rrelyea,nelson.
Modified Files:
	cmd/selfserv/selfserv.c cmd/strsclnt/strsclnt.c
	cmd/tstclnt/tstclnt.c lib/ssl/ssl3con.c lib/ssl/ssl3ext.c
	lib/ssl/ssl3prot.h lib/ssl/sslimpl.h lib/ssl/sslinfo.c
	lib/ssl/sslsnce.c lib/ssl/sslt.h tests/ssl/sslstress.txt


git-svn-id: svn://10.0.0.236/trunk@258919 18797224-902f-48f8-a5cc-f745e15eee43
2009-11-07 18:23:06 +00:00
wtc%google.com
689c26eeba Bug 525056: Use NSS_SecureMemcmp to check the session ticket's HMAC.
Trevor Perrin <trevor@cryptography.com> reported the bug and outlined a
fix.  The patch is contributed by Adam Langley of Google
<agl@chromium.org>.  r=wtc.


git-svn-id: svn://10.0.0.236/trunk@258817 18797224-902f-48f8-a5cc-f745e15eee43
2009-10-29 01:44:04 +00:00
nelson%bolyard.com
172499bfd0 Bug 421634: Don't send an SNI Client Hello extension bearing an IPv6 address
r=wtc,julien.pierre


git-svn-id: svn://10.0.0.236/trunk@254543 18797224-902f-48f8-a5cc-f745e15eee43
2008-10-06 22:04:15 +00:00
wtc%google.com
6289ace530 Bug 403563: implement the TLS session ticket extension (rfc4507bis). The
patch is contributed by Nagendra Modadugu <ngm+mozilla@google.com>.  A
small portion (PKCS #11 code and tests) was written by Wan-Teh Chang
<wtc@google.com>.  r=nelson,wtc
Modified Files:
	cmd/lib/SSLerrs.h cmd/selfserv/selfserv.c
	cmd/strsclnt/strsclnt.c cmd/tstclnt/tstclnt.c
	lib/ssl/manifest.mn lib/ssl/ssl.h lib/ssl/ssl3con.c
	lib/ssl/ssl3ecc.c lib/ssl/ssl3prot.h lib/ssl/sslerr.h
	lib/ssl/sslimpl.h lib/ssl/sslnonce.c lib/ssl/sslsnce.c
	lib/ssl/sslsock.c lib/ssl/sslt.h tests/ssl/sslstress.txt
Added Files:
	lib/ssl/ssl3ext.c


git-svn-id: svn://10.0.0.236/trunk@247232 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-06 20:16:24 +00:00