aboutsummaryrefslogtreecommitdiff
path: root/src/openvpn/ssl.c
AgeCommit message (Expand)Author
2024-03-29misc.c: remove unused codeLev Stipakov
2024-03-18Update Copyright statements to 2024Frank Lichtenheld
2023-12-26fix(ssl): init peer_id when init tls_multiyatta
2023-12-26Extend the error message when TLS 1.0 PRF failsArne Schwabe
2023-12-09Move tls_get_cipher_name_pair and get_num_elements to ssl_utils.cArne Schwabe
2023-12-02Rename state_change to continue_tls_processArne Schwabe
2023-12-02Fix check_session_buf_not_used using wrong indexArne Schwabe
2023-11-20protocol_dump: tls-crypt supportReynir Björnsson
2023-11-15Do not check key_state buffers that are in S_UNDEF stateArne Schwabe
2023-11-08Fix using to_link buffer after freedArne Schwabe
2023-11-08Double check that we do not use a freed buffer when freeing a sessionArne Schwabe
2023-09-22Remove --no-replay optionFrank Lichtenheld
2023-06-27Remove all traces of the previous MSVC build systemFrank Lichtenheld
2023-05-08DCO: support key rotation notificationsKristof Provost
2023-03-20Use key_state instead of multi for tls_send_payload parameterArne Schwabe
2023-03-15Fix memory leaks in HMAC initial packet generationArne Schwabe
2023-03-07Dynamic tls-crypt for secure soft_reset/session renegotiationArne Schwabe
2023-03-03Reduce initialisation spam from verb <= 3 and print summary insteadArne Schwabe
2023-01-11Deprecate OCC checkingArne Schwabe
2023-01-10Update copyright year to 2023Frank Lichtenheld
2022-12-24Rename TM_UNTRUSTED to TM_INITIAL, always start session in TM_INITIAL rather ...Arne Schwabe
2022-11-30Introduce connection state for reconnecting peer in p2pArne Schwabe
2022-11-27Use dedicated multi->dco_peer_id for DCO instead of multi->peer_idArne Schwabe
2022-11-14Allow tun-mtu to be pushedArne Schwabe
2022-11-08Improve data key id not found error messageArne Schwabe
2022-11-06Always include ACKs for the last seen control packetsArne Schwabe
2022-11-06Allow setting control channel packet size with max-packet-sizeArne Schwabe
2022-11-05Refactor/optimise code sending TLS control channel messagesArne Schwabe
2022-10-27Do not copy auth_token username to itselfSelva Nair
2022-10-26Ensure --auth-nocache is handled during renegotiationSelva Nair
2022-10-18Allows renegotiation only to start if session is fully establishedArne Schwabe
2022-10-17Allow Authtoken lifetime to be short than renegotiation timeArne Schwabe
2022-10-09Fix OpenVPN querying user/password if auth-token with user expiresArne Schwabe
2022-10-07auth-user-pass: add support for inline credentialsAntonio Quartulli
2022-09-20Implement AUTH_FAIL, TEMP message supportArne Schwabe
2022-09-18Implement exit notification via control channelArne Schwabe
2022-08-17Fix IV_PLAT_VER and UV_ variables sent without push-peer-infoArne Schwabe
2022-08-01dco: configure keys in DCO right after generating themAntonio Quartulli
2022-08-01Extract check_session_cipher into standalone functionArne Schwabe
2022-06-28signal --dns support in peer infoHeiko Hund
2022-05-06Extract read_incoming_tls_plaintext into its own functionArne Schwabe
2022-05-06Optimise three-way handshake condition for S_PRE_START to S_STARTArne Schwabe
2022-05-06Implement HMAC based session id for tls-crypt v2Arne Schwabe
2022-05-05Extract read_incoming_tls_ciphertext into functionArne Schwabe
2022-05-05Fix trailing-whitespace errors in last patch.Gert Doering
2022-05-05Implement stateless HMAC-based sesssion-id three-way-handshakeArne Schwabe
2022-04-27Change reliable_get_buf_sequenced to reliable_get_entry_sequencedArne Schwabe
2022-04-27Move CRL reload to key_state_init from S_START transitionArne Schwabe
2022-04-26Remove pointless indentation from tls_process.Arne Schwabe
2022-04-26Move tls_process_state into its own functionArne Schwabe