aboutsummaryrefslogtreecommitdiff
path: root/src/openvpn/ssl.c
AgeCommit message (Expand)Author
2021-07-28Remove --ncp-disable optionArne Schwabe
2021-07-28Cleanup handling of initial auth tokenArne Schwabe
2021-07-14Introduce S_GENERATED_KEYS state and generate keys only when authenticatedArne Schwabe
2021-07-02Update Fox e-mail address in copyright noticesMax Fillinger
2021-06-24Make waiting on auth an explicit state in the context state machineArne Schwabe
2021-06-24Add connection_established as state in tls_multi->context_authArne Schwabe
2021-06-15Implement auth-token-userArne Schwabe
2021-06-15Update copyrightsDavid Sommerseth
2021-05-15Use exponential backoff for caching in tls_authentication_statusArne Schwabe
2021-04-28Use functions to access key_state instead direct member accessArne Schwabe
2021-04-28Implement deferred auth for scriptsArne Schwabe
2021-04-27Change options->data_channel_use_ekm to flagsArne Schwabe
2021-04-27Move tls_select_primary_key into its own functionArne Schwabe
2021-04-20Abort if CRL file can't be stat-ed in ssl_initMax Fillinger
2021-04-20In init_ssl, open the correct CRL path pre-chrootMax Fillinger
2021-04-20Fix condition to generate session keysArne Schwabe
2021-04-07ssl: remove unneeded if blockAntonio Quartulli
2021-04-03Move auth deferred related members into its own structArne Schwabe
2021-04-03Remove deprecated option '--keysize'Arne Schwabe
2021-04-02Implement '--compress migrate' to migrate to non-compression setupArne Schwabe
2021-04-01Get rid of last PLUGIN_DEF_AUTH #ifdefGert Doering
2021-03-10Allow pending auth to be send from a auth pluginArne Schwabe
2021-03-09Implement server side of AUTH_PENDING with extending timeoutArne Schwabe
2021-03-08Prefer TLS libraries TLS PRF function, fix OpenVPN in FIPS modeArne Schwabe
2021-02-14Implement client side handling of AUTH_PENDING messageArne Schwabe
2020-12-02Remove auth_user_pass.wait_for_push variableArne Schwabe
2020-11-26Rename DECRYPT_KEY_ENABLED to TLS_AUTHENTICATEDArne Schwabe
2020-11-25Clean up tls_authentication_status and document itArne Schwabe
2020-11-25Improve keys out of sync messageArne Schwabe
2020-11-25Add more documentation about our internal TLS functionsArne Schwabe
2020-11-25Replace key_scan array of static pointers with inline functionArne Schwabe
2020-10-24Remove --disable-def-auth configure argumentArne Schwabe
2020-10-24Remove explicit setting of peer_id to falseArne Schwabe
2020-10-24Remove NULL checks before calling freeArne Schwabe
2020-10-24Align reliable_free with other free methods to accept NULLArne Schwabe
2020-10-09Simplify key material exporter backend APISteffan Karger
2020-10-09Implement generating data channel keys via EKM/RFC 5705Arne Schwabe
2020-10-08Allow 'none' cipher being specified in --data-ciphersArne Schwabe
2020-10-05Move openvpn specific key expansion into its own functionArne Schwabe
2020-08-23Refactor key_state_export_keying_material functionsArne Schwabe
2020-08-11Cleanup tls_pre_decrypt_lite and tls_pre_encryptArne Schwabe
2020-08-11Refactor/Reformat tls_pre_decryptArne Schwabe
2020-08-11Remove S_OP_NORMAL key state.Arne Schwabe
2020-08-10Remove buf argument from link_socket_set_outgoing_addrArne Schwabe
2020-08-10Clean up a number of leftover C89 initialisations in ssl.cArne Schwabe
2020-08-10Rework NCP compability logic and drop BF-CBC support by defaultArne Schwabe
2020-07-22Indicate that a client is in pull mode in IV_PROTOArne Schwabe
2020-07-21Implement tls-groups option to specify eliptic curves/groupsArne Schwabe
2020-07-21Remove ENABLE_OCC #defineArne Schwabe
2020-07-21Remove key-method 1Arne Schwabe