Rainer Gerhards
ffa17a25d2
client provides x.509 and server prints fingerprint
2008-05-15 16:58:25 +02:00
Rainer Gerhards
e623b1a06b
added TODO item
2008-05-15 11:57:18 +02:00
Rainer Gerhards
d8b191a1f3
bugfix: TLS server went into an endless loop in some situations.
...
Thanks to Michael Biebl for reporting the problem.
2008-05-15 07:58:01 +02:00
Rainer Gerhards
d594f83a89
server's X509 cert fingerprint is obtained by client on connect
2008-05-08 16:00:57 +02:00
Rainer Gerhards
3d74096021
added a bit of doc (at least something...)
2008-05-08 13:24:20 +02:00
Rainer Gerhards
f027201679
bugfix: gtls netstram driver did not specify threading model
...
(could possibly lead to "interesting effects" ;))
2008-05-08 10:17:03 +02:00
Rainer Gerhards
442dad3521
limited number of unavoidable compiler warnings when compiling with GnuTLS
2008-05-07 12:33:18 +02:00
Rainer Gerhards
346a9e6379
added missing includes (noticed under SuSe Linux)
2008-05-06 18:32:59 +02:00
Rainer Gerhards
02795031a3
final touches for 3.19.0
2008-05-06 10:58:06 +02:00
Rainer Gerhards
fcbead3d4c
trying to remove compiler warnings
2008-05-05 14:50:04 +02:00
Rainer Gerhards
74ab20fa5c
made default certificate file locations configurable
...
- added $DefaultNetstreamDriverCAFile config directive
- added $DefaultNetstreamDriverCertFile config directive
- added $DefaultNetstreamDriverKeyFile config directive
2008-05-05 12:59:06 +02:00
Rainer Gerhards
b9cbb0d696
made imgssapi work with new netstrm driver model
...
there were a couple of things where imgssapi was not compatible
with the new encapsulation. I did a somewhat dirty fix. The real
solution would be to turn gssapi functionality into a netstream
driver, which is too much for now (after all, we want to release
some time AND we need to have the code mature in practice
before we go for the next target...).
2008-05-05 11:45:41 +02:00
Rainer Gerhards
da88900143
added $InputTCPServerStreamDriverMode config directive
2008-04-30 18:53:21 +02:00
Rainer Gerhards
1c2268faa8
restructured netstrm driver layer
...
the new structure prevents repetitive loads and unloads of
driver files; it also has less overhead
The "select" and regular driver are now contained in a single
file.
2008-04-30 17:41:17 +02:00
Rainer Gerhards
c370fc6305
server handshake now works with nonblocking sockets
2008-04-30 16:35:35 +02:00
Rainer Gerhards
b0d63ea8f2
made plain tcp syslog via TLS work on the server
...
... but so far only in blocking mode
2008-04-30 14:51:45 +02:00
Rainer Gerhards
a3ff7eaf85
added $ActionSendStreamDriverMode config directive
2008-04-28 14:21:58 +02:00
Rainer Gerhards
76e4eb29d4
fixed memory leaks
2008-04-28 08:09:21 +02:00
Rainer Gerhards
75cf92117c
made gtls server driver work in plain tcp mode
2008-04-25 12:54:59 +02:00
Rainer Gerhards
af30c9f8f2
added select() driver for GnuTls
2008-04-24 20:10:24 +02:00
Rainer Gerhards
af50a76c3f
made this compile with the new abstracted socket server calls
...
undid some invalid changes during merge plus did a few wrappers.
Compiles, but does not yet work.
2008-04-24 17:59:43 +02:00
Rainer Gerhards
d3b135ba9f
improved TLS session closure
2008-04-18 18:52:51 +02:00
Rainer Gerhards
2069ab114e
first working TLS-enabled plain TCP sender
...
implemented a first working version of a TLS-enabled plain TCP
sender (but, of course, the implementation is insecure as it is)
2008-04-18 18:29:02 +02:00
Rainer Gerhards
fd6c3bc36a
set stage for TLS client implementation
2008-04-18 14:25:29 +02:00
