aboutsummaryrefslogtreecommitdiff
path: root/src/openvpn/ssl.c
AgeCommit message (Expand)Author
2020-10-09Implement generating data channel keys via EKM/RFC 5705Arne Schwabe
2020-10-08Allow 'none' cipher being specified in --data-ciphersArne Schwabe
2020-10-05Move openvpn specific key expansion into its own functionArne Schwabe
2020-08-23Refactor key_state_export_keying_material functionsArne Schwabe
2020-08-11Cleanup tls_pre_decrypt_lite and tls_pre_encryptArne Schwabe
2020-08-11Refactor/Reformat tls_pre_decryptArne Schwabe
2020-08-11Remove S_OP_NORMAL key state.Arne Schwabe
2020-08-10Remove buf argument from link_socket_set_outgoing_addrArne Schwabe
2020-08-10Clean up a number of leftover C89 initialisations in ssl.cArne Schwabe
2020-08-10Rework NCP compability logic and drop BF-CBC support by defaultArne Schwabe
2020-07-22Indicate that a client is in pull mode in IV_PROTOArne Schwabe
2020-07-21Implement tls-groups option to specify eliptic curves/groupsArne Schwabe
2020-07-21Remove ENABLE_OCC #defineArne Schwabe
2020-07-21Remove key-method 1Arne Schwabe
2020-07-10Cleanup: Remove special case code for old poor man's NCP.Arne Schwabe
2020-07-09Code cleanup: remove superflous variableArne Schwabe
2020-07-09Make key_state->authenticated more state machine likeArne Schwabe
2020-07-06merge key_state->authenticated and key_state->auth_deferredArne Schwabe
2020-06-26Reformat files using uncrustifyArne Schwabe
2020-06-12Implement support for signalling IV_SSO to serverArne Schwabe
2020-05-30Switch assertion failure to returning falseJeremy Evans
2020-05-07build: Remove --disable-server from ./configureDavid Sommerseth
2020-05-07convert *_inline attributes to boolAntonio Quartulli
2020-04-19Another round of uncrustify code cleanup.Arne Schwabe
2020-04-16Fix broken async push with NCP is usedLev Stipakov
2020-03-09Move NCP related function into a seperate file and add unit testsArne Schwabe
2020-02-17Implement dynamic NCP negotiationArne Schwabe
2020-02-17Only announce IV_NCP=2 when we are willing to support these ciphersArne Schwabe
2019-12-04Make tls_version_max return the actual maximum versionArne Schwabe
2019-10-01Sent indication that a session is expired to clientsArne Schwabe
2019-10-01Rewrite auth-token-gen to be based on HMAC based tokensArne Schwabe
2019-07-22Fix broken fragment/mssfix with NCPLev Stipakov
2019-06-05route.c: use new networking API to handle routing table on LinuxAntonio Quartulli
2019-02-06Fix various spelling mistakesJonathan Tooker
2018-12-12uncrustify openvpn/ sourcesGert Doering
2018-12-10Fallback to password authentication when auth-token failsArne Schwabe
2018-10-26tls-crypt-v2: add script hook to verify metadataSteffan Karger
2018-10-26tls-crypt-v2: implement tls-crypt-v2 handshakeSteffan Karger
2018-10-26tls-crypt-v2: add P_CONTROL_HARD_RESET_CLIENT_V3 opcodeSteffan Karger
2018-10-11Add better support for showing TLS 1.3 ciphersuites in --show-tlsArne Schwabe
2018-10-11options.c: fix broken unary minus usageLev Stipakov
2018-10-10Add support for tls-ciphersuites for TLS 1.3Arne Schwabe
2018-10-10Remove MANAGMENT_EXTERNAL_KEY, MANAGMENT_IN_EXTRA, ENABLE_CLIENT_CRArne Schwabe
2018-10-08Remove AUTO_USERID featureArne Schwabe
2018-10-08Add support for CHACHA20-POLY1305 in the data channelSteffan Karger
2018-09-25Do not load certificate from tls_ctx_use_external_private_key()Steffan Karger
2018-07-18Minor reliability layer documentation fixesGert van Dijk
2018-03-07Check for more data in control channelSteffan Karger
2018-02-20Log pre-handshake packet drops using D_MULTI_DROPPEDSteffan Karger
2018-02-01Update copyright to include 2018 plus company name changeDavid Sommerseth