Use conf->ocsp_store, as it is always set.
[freeradius.git] / src / main / tls.c
2014-12-31 Alan T. DeKokSometimes we don't need to generate ephemeral RSA keys
2014-12-22 Arran Cudbard-BellTurn on super pedantic warnings in CLANG
2014-12-17 Herwin WeststrateAdded some null checks after talloc_zero
2014-12-04 Arran Cudbard-BellCache Stripped-User-Domain too
2014-12-04 Arran Cudbard-BellUpdate range of cached TLS attributes
2014-12-04 Arran Cudbard-BellFormatting
2014-12-03 Arran Cudbard-BellMerge pull request #847 from spbnick/man_clients_update
2014-12-03 Arran Cudbard-BellUse correct type for log_lvl and add prefix to rdebug_pair
2014-12-02 Alan T. DeKokAlways get the "certs" index for SSL.
2014-12-02 Alan T. DeKokDebug attributes added in cbtls_verify
2014-11-26 Arran Cudbard-BellFix another spurious warning
2014-11-22 Arran Cudbard-BellAdd internal API for rlm_cache module
2014-11-16 Alan T. DeKokMake tlsv1.2 and tlsv1.2 conditional on having them
2014-11-16 Alan T. DeKokAllow for selective disabling of TLSv1.1 and TLSv1.2
2014-11-11 Arran Cudbard-BellMerge pull request #831 from mcnewton/patch-ocsp-host...
2014-11-11 Arran Cudbard-BellMerge pull request #832 from mcnewton/patch-softfail...
2014-11-11 Matthew Newtonadd HTTP Host: header in OCSP request
2014-11-10 Matthew Newtondisable softfail by default (in line with documentation)
2014-11-04 Arran Cudbard-BellFormatting
2014-11-03 Alan T. DeKokAllow TLS 1.1 and 1.2
2014-10-28 Arran Cudbard-BellUse rdebug_pair_list in more places and remove debug_pa...
2014-10-28 Alan DeKokMerge pull request #818 from spbnick/pool_trigger_fallt...
2014-10-27 Alan T. DeKokSet PSK callback only if we have an identity or a dynam...
2014-10-26 Alan T. DeKokDo OCSP checks only if we got issuer_cert. Closes...
2014-10-23 Nikolai KondrashovAdd --disable-openssl-version-check option
2014-10-02 Arran Cudbard-BellReorder radius_exec_program arguments to be consistent...
2014-09-11 Alan T. DeKokRevert "tls: Set umask before creating temporary file"
2014-09-10 Arran Cudbard-BellMerge pull request #788 from spbnick/coverity_fixes2
2014-09-10 Nikolai Kondrashovtls: Set umask before creating temporary file
2014-09-04 Alan T. DeKokUse "handshake_finished" instead of "finished"
2014-09-03 Alan T. DeKokExpose tls_init_ctx()
2014-09-03 Alan T. DeKokFree output bio, too
2014-09-03 Alan T. DeKokPrint debug messages only in debug mode. Closes #779
2014-08-05 Arran Cudbard-BellRename 'paircopy2' to 'paircopy_by_num'
2014-07-23 Arran Cudbard-BellFix formatting of switch statements
2014-07-16 Arran Cudbard-BellMerge pull request #732 from nchaigne/v3.0.x
2014-07-12 Alan DeKokMerge pull request #730 from nchaigne/v3.0.x
2014-07-09 Alan T. DeKokUse loop index to get description. Closes #729
2014-07-09 Arran Cudbard-BellRemove useless extern declarations
2014-06-23 Alan T. DeKokAllow for dynamically expanded PSK.
2014-06-20 Arran Cudbard-BellMerge pull request #696 from leprechau/v3.0.x
2014-06-20 Arran Cudbard-BellAdd function for allocing fr_tls_server_conf_t
2014-06-20 Arran Cudbard-BellFormatting
2014-06-20 Arran Cudbard-BellSession serialiser's buffer should not be talloced...
2014-06-20 Arran Cudbard-BellMake client_cert bool everywhere
2014-06-19 Arran Cudbard-BellAllocate SSL session ctx memory under the handler to...
2014-06-17 Arran Cudbard-BellTypo
2014-06-17 Arran Cudbard-BellParent attributes correctly when pulling them out of...
2014-06-10 Arran Cudbard-BellConvert request_free to a destructor to make double...
2014-06-10 Arran Cudbard-BellAdd inlen to fr_hex2bin. rlm_pap used fr_hex2bin with...
2014-05-28 Alan T. DeKokcerts will be NULL for outgoing proxy sockets.
2014-05-26 Alan T. DeKokAdd a fake request for outgoing TLS client connections
2014-05-26 Arran Cudbard-BellFix cbtls now we don't check for request in RDEBUG...
2014-05-26 Arran Cudbard-BellShould be error message
2014-05-26 Arran Cudbard-BellCast interval values to ints before use, so we don...
2014-05-25 Arran Cudbard-BellAdd compile time checking for config pointers
2014-05-21 Arran Cudbard-BellApply pointer type validation to config items which...
2014-05-21 Arran Cudbard-BellChange PW_TYPE_STRING_PTR to PW_TYPE_STRING
2014-05-20 Arran Cudbard-BellWe need to initialise SSL before reading the main confi...
2014-05-18 Arran Cudbard-BellRemove trailing periods in log messages
2014-05-14 Alan T. DeKokDo SSL cleanups on exit
2014-05-09 Arran Cudbard-BellReplace EDEBUG and WDEBUG with ERROR and WARN
2014-05-08 Alan T. DeKokUse talloc_ctx for new attributes, too
2014-05-08 Alan T. DeKokMake INDEX_CERTS dynamic, too.
2014-05-08 Alan T. DeKokUse proper talloc context in tls.c. Fixes #629
2014-05-08 Arran Cudbard-BellWhitespace
2014-05-08 Johnny WalkerAdded TLS-Client-Cert-Subject-Alt-Name-Upn and TLS...
2014-05-07 Arran Cudbard-BellMore SSL initialisation
2014-05-06 Arran Cudbard-BellMerge pull request #625 from leprechau/v3.0.x
2014-05-06 Alan T. DeKokClose the FD if we can't fdopen it. Found by codesonar
2014-04-25 Alan T. DeKokMore "make whitespace"
2014-04-24 Alan T. DeKokPrint error messages when we can't open a TLS context
2014-04-22 Alan T. DeKokSSL_CTX_new may return NULL
2014-04-09 Alan T. DeKokCheck for invalid TLS handshake
2014-04-08 Arran Cudbard-BellDon't be lazy when printing openssl version numbers
2014-04-08 Arran Cudbard-BellA simple framework to deal with future security issues...
2014-04-08 Arran Cudbard-BellAdd config item to toggle openssl vulnerability check
2014-04-08 Arran Cudbard-BellRefuse to start with OpenSSL 1.0.1 - 1.0.1f
2014-03-16 Arran Cudbard-BellBackport fr_cursor name changes
2014-02-27 Alan T. DeKokPrint out SSL error string in fragmentation data
2014-02-27 Alan T. DeKokSet SSL options to accept moving buffer && auto retry
2014-02-20 Alan T. DeKokSet ssn->ssl to NULL when we free it
2014-02-19 Alan T. DeKokFree ssn->ssl on error
2014-02-19 Alan T. DeKokOne more destructor for conf_free
2014-02-19 Alan T. DeKokUse talloc destructor for tls_server_conf_free
2014-02-19 Alan T. DeKokRevert "Expose tls_server_conf_free() and use it for...
2014-02-18 Alan T. DeKokExpose tls_server_conf_free() and use it for home->tls
2014-02-17 Arran Cudbard-BellFix more places where passwords are revealed in debuggi...
2014-02-17 Alan T. DeKokAdd "secret" flag to configuration items.
2014-02-11 Alan T. DeKokRemove extraneous ","
2014-02-11 Alan T. DeKokCache CUI, too
2014-02-10 Alan T. DeKokLoad 10K of randomness, rather than 1M.
2014-02-10 Alan T. DeKokProper encapsulation of information
2014-02-09 Arran Cudbard-BellDon't try and load dh_params if no dh file provided
2014-02-06 Arran Cudbard-BellAdd support for SHA-2 digests
2014-01-26 Arran Cudbard-BellBackport fr_syserror() from master
2014-01-05 Arran Cudbard-BellRevert "Add "wrapper" files for system headers which...
2014-01-04 Alan T. DeKokAdd "wrapper" files for system headers which produce...
2013-11-30 Arran Cudbard-BellInitialise TLS *ONCE* in main, don't reinitialise it...
2013-11-20 Alan T. DeKokFix typo
next