aboutsummaryrefslogtreecommitdiffstats
path: root/src/eap_peer/eap_tls_common.c
Commit message (Expand)AuthorAgeFilesLines
* EAP-TEAP peer: Add support for machine credentials using certificatesJouni Malinen2019-09-011-4/+19
* EAP peer config: Move ocsp param to phase1/phase2Jouni Malinen2019-09-011-6/+6
* EAP peer: Move certificate configuration params into shared structJouni Malinen2019-09-011-21/+12
* Replace EapType typedef with enum eap_typeJouni Malinen2019-08-171-6/+7
* Add Type-Code context to EAP-TLS 1.3 exported Key_Material and Method-IdErvin Oro2019-07-111-2/+3
* EAP-TEAP server and peer implementation (RFC 7170)Jouni Malinen2019-07-091-1/+10
* Add support for an optional context parameter to TLS exporterErvin Oro2019-03-161-4/+9
* OpenSSL: Add 'check_cert_subject' support for TLS serverJared Bents2019-03-111-0/+2
* Use char pointers for EAP configuration parameters without lengthJouni Malinen2019-03-111-16/+16
* EAP-TLS: Update Session-Id derivation with TLS v1.3Jouni Malinen2019-01-051-4/+20
* OpenSSL: Allow systemwide policies to be overriddenJouni Malinen2019-01-051-3/+9
* OSEN: Disable TLS v1.3 by defaultJouni Malinen2019-01-051-2/+4
* EAP-TLS: Derive Session-Id using TLS-Exporter when TLS v1.3 is usedJouni Malinen2018-06-011-0/+7
* EAP-TLS peer: Disable TLS v1.3 by defaultJouni Malinen2018-05-011-0/+17
* EAP-TLS: Extend TLS version config to allow TLS v1.3 to be disabledJouni Malinen2018-05-011-0/+4
* EAP-TLS peer: Determine whether TLS v1.3 or newer is usedJouni Malinen2018-05-011-0/+8
* OpenSSL: Add option to disable ECDHE with Suite B RSAJouni Malinen2017-09-181-0/+4
* Suite B: Add tls_suiteb=1 parameter for RSA 3k key caseJouni Malinen2017-09-161-0/+4
* TLS: Split tls_connection_prf() into two functionsDavid Benjamin2016-05-231-2/+2
* Add ocsp=3 configuration parameter for multi-OCSPJouni Malinen2015-12-231-1/+3
* EAP-TTLS/PEAP/FAST: Reject unsupported Phase 2 method in configurationJouni Malinen2015-12-201-0/+3
* EAP-TLS: Merge common error pathsJouni Malinen2015-12-201-4/+2
* EAP peer: External server certificate chain validationJouni Malinen2015-12-121-0/+6
* Rename tls_connection_get_keys() to tls_connection_get_random()Jouni Malinen2015-08-021-2/+2
* EAP-TLS/TTLS/PEAP/FAST peer: Stop connection more quickly on local failureJouni Malinen2015-07-281-2/+8
* Make TLS version number available in STATUS commandJouni Malinen2015-07-081-12/+16
* OpenSSL: Add option to disable use of TLSv1.0Jouni Malinen2015-07-081-0/+4
* EAP-TLS/PEAP/TTLS/FAST: Move more towards using struct wpabufJouni Malinen2015-05-031-10/+6
* OpenSSL: Try to ensure we don't throw away the PIN unnecessarilyMike Gerow2015-04-251-15/+12
* EAP peer: Use 32-bit EAP method type for Phase 2 processingJouni Malinen2015-04-011-1/+1
* Make tls_connection_get_keyblock_size() internal to tls_*.cJouni Malinen2015-04-011-1/+2
* Use tls_connection_prf() for all EAP TLS-based key derivationJouni Malinen2015-03-311-40/+5
* Add domain_match network profile parameterJouni Malinen2015-01-141-0/+2
* Add tls_session_reused=<0/1> into EAP peer TLS statusJouni Malinen2014-12-091-1/+4
* OpenSSL: Fix EAP-FAST peer regressionJouni Malinen2014-12-091-0/+2
* Check os_snprintf() result more consistently - automatic 1Jouni Malinen2014-12-081-1/+1
* EAP peer: Clean up TLS Session-Id derivation functionJouni Malinen2014-11-301-7/+2
* wpa_supplicant: Allow OpenSSL cipherlist string to be configuredJouni Malinen2014-10-121-0/+2
* HS 2.0R2: Add WFA server-only EAP-TLS peer methodJouni Malinen2014-02-251-0/+8
* TLS: Add tls_disable_tlsv1_1 and tls_disable_tlsv1_2 phase1 paramsDmitry Shmidt2014-02-201-0/+8
* Add AAA server domain name suffix matching constraintJouni Malinen2013-10-181-0/+2
* Add support for OCSP stapling to validate server certificateJouni Malinen2013-06-291-1/+5
* EAP peer: Add Session-Id derivationStevent Li2013-02-081-0/+46
* EAP-TLS: Add extra validation for TLS Message LengthJouni Malinen2012-10-071-0/+8
* Add UNAUTH-TLS vendor specific EAP typeJouni Malinen2012-08-221-6/+22
* Disable TLS Session Ticket extension by default for EAP-TLS/PEAP/TTLSJouni Malinen2012-08-171-1/+15
* Add phase1/phase2 parameter for disabling TLS Session Ticket extensionJouni Malinen2012-08-171-0/+4
* Do not export TLS keys in FIPS modeJouni Malinen2012-08-161-0/+4
* Convert os_realloc() for an array to use os_realloc_array()Jouni Malinen2012-08-131-2/+2
* TLS: Use separate TLS library context for tunneled TLSJouni Malinen2012-04-071-19/+22