osmocom
/
osmo-pcap
mirror of https://gerrit.osmocom.org/osmo-pcap
11
0
Fork 0
Code Issues Releases Wiki Activity
osmo-pcap/src
History
Holger Hans Peter Freyther c266796caa client: Initial support for TLS in the client 
Use GNUtls because it is GPL compatible and instead of mbedTLS seems
to have a working non-blocking I/O integration. GNUtls has various
issues that could not be resolved easily:

* Pick spdy as sub protocol
* gmt_time not randomized
* private key loaded to RAM (but not verified)

This is the beginning and not the end. Client support might need more
work with actual tls verification. Maybe more manual x509 cert
verification is needed and maybe client certs don't work at all. I try
to ignore renegotiation as I threw away the key.

Reload x509 creds and keys as they might have changed from one
connection to another.

Change-Id: I9128e14084da1fc2705f858393f98b8133996172
 		2016-09-08 16:16:55 +02:00
..
Makefile.am client: Initial support for TLS in the client 2016-09-08 16:16:55 +02:00
osmo_client_core.c client: Use pcap_stats and export them as statistics 2016-08-19 20:28:21 +02:00
osmo_client_main.c client: Initial support for TLS in the client 2016-09-08 16:16:55 +02:00
osmo_client_network.c client: Initial support for TLS in the client 2016-09-08 16:16:55 +02:00
osmo_client_vty.c client: Initial support for TLS in the client 2016-09-08 16:16:55 +02:00
osmo_common.c client: Initial support for TLS in the client 2016-09-08 16:16:55 +02:00
osmo_server_main.c server: Add global and per client counters and begin to count 2016-08-19 19:23:00 +02:00
osmo_server_network.c server: Add global and per client counters and begin to count 2016-08-19 19:23:00 +02:00
osmo_server_vty.c server: Add zmq based event and data interface to the server 2016-08-05 16:10:05 +02:00
osmo_tls.c client: Initial support for TLS in the client 2016-09-08 16:16:55 +02:00