aboutsummaryrefslogtreecommitdiff
path: root/src/openvpn/ssl.c
AgeCommit message (Expand)Author
2022-02-13Add mtu paramter to --fragment and change fragment calculationArne Schwabe
2022-02-02Implement optional mtu parameter for mssfixArne Schwabe
2022-02-02Change buffer allocation calculation and checks to be more staticArne Schwabe
2022-01-26update copyright year to 2022Antonio Quartulli
2022-01-20Initialize the xkey provider and use it in SSL contextSelva Nair
2022-01-14ssl.c: use arrow operator to access object memberAntonio Quartulli
2021-12-30Decouple MSS fix calculation from frame calculationArne Schwabe
2021-12-14Fix triggering assertion of ks->authenticated after tls_deauthenticateArne Schwabe
2021-12-13Remove cipher_kt_t and change type to const char* in APIArne Schwabe
2021-12-07Remove max_size from buffer_list_newArne Schwabe
2021-12-06Remove cipher_ctx_get_cipher_kt and replace with direct context callsArne Schwabe
2021-11-14Move IV_TCPNL from comp_generate_peer_info_string to push_peer_infoArne Schwabe
2021-11-07Remove custom PRNG functionArne Schwabe
2021-10-22Remove DES key fixup codeArne Schwabe
2021-08-02Support NCP in pure P2P VPN setupsArne Schwabe
2021-07-28Remove --ncp-disable optionArne Schwabe
2021-07-28Cleanup handling of initial auth tokenArne Schwabe
2021-07-14Introduce S_GENERATED_KEYS state and generate keys only when authenticatedArne Schwabe
2021-07-02Update Fox e-mail address in copyright noticesMax Fillinger
2021-06-24Make waiting on auth an explicit state in the context state machineArne Schwabe
2021-06-24Add connection_established as state in tls_multi->context_authArne Schwabe
2021-06-15Implement auth-token-userArne Schwabe
2021-06-15Update copyrightsDavid Sommerseth
2021-05-15Use exponential backoff for caching in tls_authentication_statusArne Schwabe
2021-04-28Use functions to access key_state instead direct member accessArne Schwabe
2021-04-28Implement deferred auth for scriptsArne Schwabe
2021-04-27Change options->data_channel_use_ekm to flagsArne Schwabe
2021-04-27Move tls_select_primary_key into its own functionArne Schwabe
2021-04-20Abort if CRL file can't be stat-ed in ssl_initMax Fillinger
2021-04-20In init_ssl, open the correct CRL path pre-chrootMax Fillinger
2021-04-20Fix condition to generate session keysArne Schwabe
2021-04-07ssl: remove unneeded if blockAntonio Quartulli
2021-04-03Move auth deferred related members into its own structArne Schwabe
2021-04-03Remove deprecated option '--keysize'Arne Schwabe
2021-04-02Implement '--compress migrate' to migrate to non-compression setupArne Schwabe
2021-04-01Get rid of last PLUGIN_DEF_AUTH #ifdefGert Doering
2021-03-10Allow pending auth to be send from a auth pluginArne Schwabe
2021-03-09Implement server side of AUTH_PENDING with extending timeoutArne Schwabe
2021-03-08Prefer TLS libraries TLS PRF function, fix OpenVPN in FIPS modeArne Schwabe
2021-02-14Implement client side handling of AUTH_PENDING messageArne Schwabe
2020-12-02Remove auth_user_pass.wait_for_push variableArne Schwabe
2020-11-26Rename DECRYPT_KEY_ENABLED to TLS_AUTHENTICATEDArne Schwabe
2020-11-25Clean up tls_authentication_status and document itArne Schwabe
2020-11-25Improve keys out of sync messageArne Schwabe
2020-11-25Add more documentation about our internal TLS functionsArne Schwabe
2020-11-25Replace key_scan array of static pointers with inline functionArne Schwabe
2020-10-24Remove --disable-def-auth configure argumentArne Schwabe
2020-10-24Remove explicit setting of peer_id to falseArne Schwabe
2020-10-24Remove NULL checks before calling freeArne Schwabe
2020-10-24Align reliable_free with other free methods to accept NULLArne Schwabe