11 Commits

Author SHA1 Message Date
alexei.volkov.bugs%sun.com
afbbd7d153 548654 - libssl: handshake failure alert is set twice upon unsuccessful extension parsing. r=wtc
git-svn-id: svn://10.0.0.236/trunk@259819 18797224-902f-48f8-a5cc-f745e15eee43
2010-02-26 19:25:44 +00:00
wtc%google.com
44e58a0d4e Bug 537356: Don't bother initializing unused entries in client hello
senders arrays with { -1, NULL }.  r=nelson.


git-svn-id: svn://10.0.0.236/trunk@259578 18797224-902f-48f8-a5cc-f745e15eee43
2010-02-03 02:38:20 +00:00
alexei.volkov.bugs%sun.com
08cba3b588 360421 - Implement TLS Server Name Indication for servers. Save server name in session ticket. r=rrelyea
git-svn-id: svn://10.0.0.236/trunk@259576 18797224-902f-48f8-a5cc-f745e15eee43
2010-02-03 02:25:36 +00:00
wtc%google.com
fa46d39e9d Bug 537356: In SSL 3.0, send and handle the renegotiation_info extension
but not any other extension.  r=rrelyea.
Modified Files:
	ssl3con.c ssl3ext.c


git-svn-id: svn://10.0.0.236/trunk@259505 18797224-902f-48f8-a5cc-f745e15eee43
2010-01-29 19:20:28 +00:00
kaie%kuix.de
bd4c4b9fa4 Bug 540304, Implement SSL_HandshakeNegotiatedExtension
r=nelson


git-svn-id: svn://10.0.0.236/trunk@259501 18797224-902f-48f8-a5cc-f745e15eee43
2010-01-28 16:14:25 +00:00
nelson%bolyard.com
0bc55de11a Bug 537356: Implement new safe SSL3 & TLS renegotiation, r=wtc
git-svn-id: svn://10.0.0.236/trunk@259500 18797224-902f-48f8-a5cc-f745e15eee43
2010-01-28 06:19:13 +00:00
alexei.volkov.bugs%sun.com
d26b36b737 360421 - Implement TLS Server Name Indication for servers. r=nelson
git-svn-id: svn://10.0.0.236/trunk@259396 18797224-902f-48f8-a5cc-f745e15eee43
2010-01-14 22:15:26 +00:00
wtc%google.com
c0ec7fbfae Bug 275744: In client hello, list compression methods in the order of
desirability so that servers that simply pick the first mutually supported
compression method will pick the best compression method.  Add compression
method info to the SSLChannelInfo structure.  Rename SSL3CompressionMethod
to SSLCompressionMethod and add the ssl_ prefix to the enum constants.
Remove an extra comma in strsclnt.c that breaks the concatenation of two
string literals.  r=agl,rrelyea,nelson.
Modified Files:
	cmd/selfserv/selfserv.c cmd/strsclnt/strsclnt.c
	cmd/tstclnt/tstclnt.c lib/ssl/ssl3con.c lib/ssl/ssl3ext.c
	lib/ssl/ssl3prot.h lib/ssl/sslimpl.h lib/ssl/sslinfo.c
	lib/ssl/sslsnce.c lib/ssl/sslt.h tests/ssl/sslstress.txt


git-svn-id: svn://10.0.0.236/trunk@258919 18797224-902f-48f8-a5cc-f745e15eee43
2009-11-07 18:23:06 +00:00
wtc%google.com
689c26eeba Bug 525056: Use NSS_SecureMemcmp to check the session ticket's HMAC.
Trevor Perrin <trevor@cryptography.com> reported the bug and outlined a
fix.  The patch is contributed by Adam Langley of Google
<agl@chromium.org>.  r=wtc.


git-svn-id: svn://10.0.0.236/trunk@258817 18797224-902f-48f8-a5cc-f745e15eee43
2009-10-29 01:44:04 +00:00
nelson%bolyard.com
172499bfd0 Bug 421634: Don't send an SNI Client Hello extension bearing an IPv6 address
r=wtc,julien.pierre


git-svn-id: svn://10.0.0.236/trunk@254543 18797224-902f-48f8-a5cc-f745e15eee43
2008-10-06 22:04:15 +00:00
wtc%google.com
6289ace530 Bug 403563: implement the TLS session ticket extension (rfc4507bis). The
patch is contributed by Nagendra Modadugu <ngm+mozilla@google.com>.  A
small portion (PKCS #11 code and tests) was written by Wan-Teh Chang
<wtc@google.com>.  r=nelson,wtc
Modified Files:
	cmd/lib/SSLerrs.h cmd/selfserv/selfserv.c
	cmd/strsclnt/strsclnt.c cmd/tstclnt/tstclnt.c
	lib/ssl/manifest.mn lib/ssl/ssl.h lib/ssl/ssl3con.c
	lib/ssl/ssl3ecc.c lib/ssl/ssl3prot.h lib/ssl/sslerr.h
	lib/ssl/sslimpl.h lib/ssl/sslnonce.c lib/ssl/sslsnce.c
	lib/ssl/sslsock.c lib/ssl/sslt.h tests/ssl/sslstress.txt
Added Files:
	lib/ssl/ssl3ext.c


git-svn-id: svn://10.0.0.236/trunk@247232 18797224-902f-48f8-a5cc-f745e15eee43
2008-03-06 20:16:24 +00:00