Jan Vidar Krey
9762b9389d
fixup! Fix OpenSSL error, wrong initialization order.
2019-04-24 10:46:59 +02:00
Jan Vidar Krey
076e75897b
Fix OpenSSL error, wrong initialization order.
2019-04-24 10:32:01 +02:00
Jan Vidar Krey
bc8974b9a3
Add better TLS protocol negotiation for OpenSSL >1.0.1
2019-04-23 16:16:36 +02:00
Boris Pek
cf3a6e06df
Secure URLs: http --> https (part 2)
2019-04-23 15:59:03 +02:00
Jan Vidar Krey
212064c166
Fix alpn_server_select_protocol to be static.
2019-03-31 19:33:46 +02:00
Denys Smirnov
566cd9a9db
advertise ADC protocol with ALPN
2019-03-15 02:19:19 +02:00
Jan Vidar Krey
f0e9b2ffd9
Add support for OpenSSL 1.1
2018-02-26 10:58:41 +00:00
Jan Vidar Krey
11538d6909
Mute debug log messages for net_send() that were incorrectly classified as error messages.
2018-01-15 17:00:56 +00:00
Jan Vidar Krey
204544298b
Cleanup debug logging.
2014-10-16 23:14:12 +02:00
Jan Vidar Krey
037ceff0a5
Disable SSLv3 explicitly also.
2014-10-16 23:09:50 +02:00
Jan Vidar Krey
76ff2a1a13
Fix TLS protocol mismatch assert causing the hub to shutdown.
2014-10-16 23:08:17 +02:00
Jan Vidar Krey
d7c8c9426d
Fix memory leak by creating the SSL context once for ADC client.
...
This is done using reference counted global memory.
2014-08-06 17:37:06 +02:00
Jan Vidar Krey
95de69efeb
Added functionality to fetch the TLS version and cipher info for a connection.
2014-08-05 17:43:24 +02:00
Jan Vidar Krey
b3b4876c08
Use TLS 1.2 when connecting to a hub when using TLS.
2014-08-05 17:42:18 +02:00
Jan Vidar Krey
b85381c0f5
Added configuration options for TLS cipher suites and TLS versions.
2014-07-29 13:31:42 +02:00
Hector Martin
0426cb523a
Fix: Rework SSL poll event handling to avoid infinite loops
...
The downstream connection callback must only be invoked when the event
that SSL requests for the connection to make progress has actually
occured. Otherwise, the downstream callback might do nothing but
re-queue an unrelated event (e.g. in user_net_io_want_write), and the
event loop comes around instantly while making no progress. Track the
SSL-requested events separately and deliver the required downstream
event when they fire.
Sample strace:
epoll_wait(0, {{EPOLLIN, {u32=96, u64=96}}}, 91, 10000) = 1
: net_ssl_callback in state tls_st_need_write calls cb NET_EVENT_WRITE
: User writes data, OpenSSL tries to write data
write(96, <snip>..., 170) = -1 EAGAIN (Resource temporarily unavailable)
: handle_openssl_error requests NET_EVENT_WRITE
epoll_ctl(0, EPOLL_CTL_MOD, 96, {EPOLLOUT, {u32=96, u64=96}}) = 0
: User callback then requests NET_EVENT_READ|NET_EVENT_WRITE
epoll_ctl(0, EPOLL_CTL_MOD, 96, {EPOLLIN|EPOLLOUT, {u32=96, u64=96}}) =
: Data available for *reading*
epoll_wait(0, {{EPOLLIN, {u32=96, u64=96}}}, 91, 10000) = 1
: net_ssl_callback in state tls_st_need_write calls cb NET_EVENT_WRITE
: again...
2014-07-29 12:09:07 +02:00
Jan Vidar Krey
9f78a2e85f
Merge branch 'master' of github.com:janvidar/uhub
2014-05-30 15:06:23 +02:00
Jan Vidar Krey
f472fc9424
Fix Clang compile warnings.
2014-05-14 21:00:42 +02:00
Jan Vidar Krey
7706e1cb8a
Fix copyright year.
2014-05-14 11:39:18 +02:00
Tillmann Karras
fa782e3d2c
Fix memleak
2013-09-06 21:17:31 +02:00
Tilka
591d0ba5bb
Support certificate chains
2013-09-06 01:44:25 +02:00
Jan Vidar Krey
52211a6bac
Updated copyright year.
2013-03-22 20:00:40 +01:00
Jan Vidar Krey
f25015927a
Clean up white space.
2013-03-22 20:00:40 +01:00
Jan Vidar Krey
ae62c35cb9
Disable SSL compression.
2012-11-01 10:39:31 +01:00
Jan Vidar Krey
19559f4974
Make sure we count OpenSSL traffic for the byte IO statistics.
2012-10-18 11:40:18 +02:00
Jan Vidar Krey
c50eb90bee
Removed the last bits of OpenSSL code called directly
2012-10-17 20:53:05 +02:00
Jan Vidar Krey
2f830d3132
Cleaned up error handling.
2012-10-17 15:39:48 +02:00
Jan Vidar Krey
5884983a2f
Return -1 as error for recv/send only to signal socket has closed, use a number < -1 for socket errors.
2012-10-17 15:02:32 +02:00
Jan Vidar Krey
c43acd97bd
Fixed accept/connect state event propagation.
...
Also removed some unused states and flags.
2012-10-17 09:25:15 +02:00
Jan Vidar Krey
b1f2c93738
Reworked the error handling of non-blocking reads and writes.
...
This should prevent busy loops where the socket is makred readable
but we are really only looking for it to become writable.
2012-10-17 09:16:02 +02:00
Jan Vidar Krey
50912bdf75
More work on splitting out OpenSSL specific bits.
2012-10-15 20:39:03 +02:00
Jan Vidar Krey
f3922bb3e0
Work on splitting out OpenSSL cleanly.
2012-10-12 14:24:03 +02:00
