ims-volte-vowifi
/
strongswan
9
0
Fork 0
Code Pull Requests Releases Activity
strongswan/src/libtls
History
Pascal Knecht d2fc9b0961 tls-server: Mutual authentication support for TLS 1.3 
This commit also addresses the side effect that additional messages have
an influence on the derivation of the application traffic secrets. Therefore,
key derivation is relocated after the server finished message has been sent,
so the additional messages from the client (Certificate, CertificateVerify)
don't affect the key derivation. Only the outbound key is switched there, the
inbound key remains in use until the client's finished message has been
processed.
 		2021-02-12 14:35:23 +01:00
..
tests tls-server: Mutual authentication support for TLS 1.3 2021-02-12 14:35:23 +01:00
Makefile.am libtls: Implement HKDF for TLS 1.3 2021-02-12 11:45:44 +01:00
tls.c libtls: Add missing cipher suite and TLS extension constants 2021-02-12 14:35:23 +01:00
tls.h libtls: Add missing cipher suite and TLS extension constants 2021-02-12 14:35:23 +01:00
tls_aead.c libtls: Allow tls_aead_t to change the content type 2021-02-12 11:45:44 +01:00
tls_aead.h libtls: Add TLS 1.3 implementation of tls_aead_t 2021-02-12 11:45:44 +01:00
tls_aead_expl.c libtls: Allow tls_aead_t to change the content type 2021-02-12 11:45:44 +01:00
tls_aead_impl.c libtls: Allow tls_aead_t to change the content type 2021-02-12 11:45:44 +01:00
tls_aead_null.c libtls: Allow tls_aead_t to change the content type 2021-02-12 11:45:44 +01:00
tls_aead_seq.c libtls: Add TLS 1.3 implementation of tls_aead_t 2021-02-12 11:45:44 +01:00
tls_alert.c libtls: Implement TLS 1.3 handshake on client-side 2021-02-12 11:45:44 +01:00
tls_alert.h libtls: Implement TLS 1.3 handshake on client-side 2021-02-12 11:45:44 +01:00
tls_application.h Unify format of HSR copyright statements 2018-05-23 16:32:53 +02:00
tls_cache.c Moved debug.[ch] to utils folder 2012-10-24 16:00:51 +02:00
tls_cache.h Implemented a TLS session cache 2011-12-31 13:14:49 +01:00
tls_compression.c Implemented TLS Alert handling 2010-08-23 15:13:37 +02:00
tls_compression.h Implemented TLS session resumption both as client and as server 2011-12-31 13:14:49 +01:00
tls_crypto.c tls-server: Mutual authentication support for TLS 1.3 2021-02-12 14:35:23 +01:00
tls_crypto.h tls-server: Consider supported signature algorithms when selecting key/certificate 2021-02-12 14:35:23 +01:00
tls_eap.c libtls: Add getters for TLS handshake authentication details 2015-03-03 14:08:00 +01:00
tls_eap.h libtls: Add getters for TLS handshake authentication details 2015-03-03 14:08:00 +01:00
tls_fragmentation.c tls-peer: Support answering KeyUpdate requests 2021-02-12 11:45:44 +01:00
tls_fragmentation.h libtls: Don't send TLS close notifies in EAP after application succeeds 2015-02-19 11:29:07 +01:00
tls_handshake.h libtls: Add getters for TLS handshake authentication details 2015-03-03 14:08:00 +01:00
tls_hkdf.c tls-hkdf: Always use correct base key to derive finished message 2021-02-12 14:35:23 +01:00
tls_hkdf.h tls-crypto: Rename parameter to be more consistent 2021-02-12 14:35:23 +01:00
tls_peer.c tls-server: Share trusted public key search between client and server 2021-02-12 14:35:23 +01:00
tls_peer.h Delegate tls_t.get_{peer,server}_id to handshake layer 2013-02-28 16:46:08 +01:00
tls_prf.c tls-prf: Remove unused/undeclared argument in TLS 1.0/1.1 PRF constructor 2020-01-28 15:32:43 +01:00
tls_prf.h Add a return value to tls_prf_t.set_key() 2012-07-16 14:53:33 +02:00
tls_protection.c tls-crypto: Move AEAD ownership to the protection layer 2021-02-12 14:35:23 +01:00
tls_protection.h tls: Separate TLS protection to abstracted AEAD modes 2014-03-31 15:56:12 +02:00
tls_server.c tls-server: Mutual authentication support for TLS 1.3 2021-02-12 14:35:23 +01:00
tls_server.h Delegate tls_t.get_{peer,server}_id to handshake layer 2013-02-28 16:46:08 +01:00
tls_socket.c tls-socket: Change how EOF of the underlying socket is handled 2021-02-12 11:45:44 +01:00
tls_socket.h tls-socket: Allow configuring both minimum and maximum TLS versions 2021-02-12 11:45:44 +01:00