aboutsummaryrefslogtreecommitdiff
path: root/src/openvpn/ssl.c
AgeCommit message (Expand)Author
2023-03-20Use key_state instead of multi for tls_send_payload parameterArne Schwabe
2023-03-15Fix memory leaks in HMAC initial packet generationArne Schwabe
2023-03-07Dynamic tls-crypt for secure soft_reset/session renegotiationArne Schwabe
2023-03-03Reduce initialisation spam from verb <= 3 and print summary insteadArne Schwabe
2023-01-11Deprecate OCC checkingArne Schwabe
2023-01-10Update copyright year to 2023Frank Lichtenheld
2022-12-24Rename TM_UNTRUSTED to TM_INITIAL, always start session in TM_INITIAL rather ...Arne Schwabe
2022-11-30Introduce connection state for reconnecting peer in p2pArne Schwabe
2022-11-27Use dedicated multi->dco_peer_id for DCO instead of multi->peer_idArne Schwabe
2022-11-14Allow tun-mtu to be pushedArne Schwabe
2022-11-08Improve data key id not found error messageArne Schwabe
2022-11-06Always include ACKs for the last seen control packetsArne Schwabe
2022-11-06Allow setting control channel packet size with max-packet-sizeArne Schwabe
2022-11-05Refactor/optimise code sending TLS control channel messagesArne Schwabe
2022-10-27Do not copy auth_token username to itselfSelva Nair
2022-10-26Ensure --auth-nocache is handled during renegotiationSelva Nair
2022-10-18Allows renegotiation only to start if session is fully establishedArne Schwabe
2022-10-17Allow Authtoken lifetime to be short than renegotiation timeArne Schwabe
2022-10-09Fix OpenVPN querying user/password if auth-token with user expiresArne Schwabe
2022-10-07auth-user-pass: add support for inline credentialsAntonio Quartulli
2022-09-20Implement AUTH_FAIL, TEMP message supportArne Schwabe
2022-09-18Implement exit notification via control channelArne Schwabe
2022-08-17Fix IV_PLAT_VER and UV_ variables sent without push-peer-infoArne Schwabe
2022-08-01dco: configure keys in DCO right after generating themAntonio Quartulli
2022-08-01Extract check_session_cipher into standalone functionArne Schwabe
2022-06-28signal --dns support in peer infoHeiko Hund
2022-05-06Extract read_incoming_tls_plaintext into its own functionArne Schwabe
2022-05-06Optimise three-way handshake condition for S_PRE_START to S_STARTArne Schwabe
2022-05-06Implement HMAC based session id for tls-crypt v2Arne Schwabe
2022-05-05Extract read_incoming_tls_ciphertext into functionArne Schwabe
2022-05-05Fix trailing-whitespace errors in last patch.Gert Doering
2022-05-05Implement stateless HMAC-based sesssion-id three-way-handshakeArne Schwabe
2022-04-27Change reliable_get_buf_sequenced to reliable_get_entry_sequencedArne Schwabe
2022-04-27Move CRL reload to key_state_init from S_START transitionArne Schwabe
2022-04-26Remove pointless indentation from tls_process.Arne Schwabe
2022-04-26Move tls_process_state into its own functionArne Schwabe
2022-04-26Extract session_move_active into its own functionArne Schwabe
2022-04-26Change FULL_SYNC macro to no_pending_reliable_packets functionArne Schwabe
2022-04-26Extract session_move_pre_start as own function, use local buffer variableArne Schwabe
2022-04-25Split out reliable_ack_parse from reliable_ack_readArne Schwabe
2022-04-25Move ssl function related to control channel wrap/unwrap to ssl_pkt.c/hArne Schwabe
2022-04-25Extend tls_pre_decrypt_lite to return type of packet and keep stateArne Schwabe
2022-04-24Add documentation for swap_hmac functionArne Schwabe
2022-04-24Remove tls_init_control_channel_frame_parameters wrapper functionArne Schwabe
2022-04-22Remove inc_pid argument from reliable_mark_deleted that is always trueArne Schwabe
2022-04-21The Great Reformatting of 2022David Sommerseth
2022-02-14Remove FRAME_HEADROOM, PAYLOAD_SIZE, EXTRA_FRAME and TUN_LINK_DELTA macrosArne Schwabe
2022-02-13Remove frame.extra_frame and frame.extra_bufferArne Schwabe
2022-02-13Remove frame->link_mtuArne Schwabe
2022-02-13Remove extra_link from frameArne Schwabe