Paul Bakker 8f4ddaeea9 Ability to specify allowed ciphersuites based on the protocol version. ...

The ciphersuites parameter in the ssl_session structure changed from
'int *' to 'int *[4]'.

The new function ssl_set_ciphersuite_for_version() sets specific entries
inside this array. ssl_set_ciphersuite() sets all entries to the same
value.
(cherry picked from commit a62729888b9d8eafbfa952fca63a04100ed90f69)

Conflicts:
	ChangeLog
	library/ssl_srv.c
	library/ssl_tls.c

2013-04-16 18:09:45 +02:00

..

aes.h

- Fixed doxygen blocks

2012-11-07 19:57:39 +00:00

arc4.h

- Fixed doxygen blocks

2012-11-07 19:57:39 +00:00

asn1.h

OID functionality moved to a separate module.

2013-04-07 22:00:46 +02:00

asn1write.h

Const correctness added for asn1write functions

2013-04-07 13:11:31 +02:00

base64.h

Fixed typo in base64.h

2013-02-14 11:56:58 +01:00

bignum.h

Added missing typedef for INT64

2013-03-06 18:01:02 +01:00

blowfish.h

- Fixed doxygen blocks

2012-11-07 19:57:39 +00:00

bn_mul.h

Fixed MPI assembly for ARM when -O2 is used

2013-04-11 17:13:22 +02:00

camellia.h

- Fixed doxygen blocks

2012-11-07 19:57:39 +00:00

certs.h

- Updated Doxygen documentation generation and documentation on small parts

2011-01-27 15:24:17 +00:00

cipher_wrap.h

Moved to advanced ciphersuite representation and more dynamic SSL code

2013-03-13 14:48:32 +01:00

cipher.h

Moved to advanced ciphersuite representation and more dynamic SSL code

2013-03-13 14:48:32 +01:00

config.h

Enable PBKDF2 by default

2013-04-08 15:19:43 +02:00

ctr_drbg.h

- Changed the behaviour of x509parse_parse_crt for permissive parsing. Now returns the number of 'failed certificates' instead of having a switch to enable it.

2011-12-10 21:55:01 +00:00

debug.h

Added Ephemeral Elliptic Curve Diffie Hellman ciphersuites to SSL/TLS

2013-03-20 14:39:14 +01:00

des.h

- Fixed doxygen blocks

2012-11-07 19:57:39 +00:00

dhm.h

- Fixed doxygen blocks

2012-11-07 19:57:39 +00:00

ecdh.h

Add ecdh_calc_secret()

2013-02-11 22:05:42 +01:00

ecdsa.h

Add ECDSA signature primitive.

2013-01-26 19:11:28 +01:00

ecp.h

Fix ecp_tls_read_point's signature

2013-02-10 13:38:29 +01:00

entropy_poll.h

- Changed entropy accumulator to have per-source thresholds

2011-12-10 17:02:19 +00:00

entropy.h

- Added option to prevent default entropy sources from loading (POLARSSL_NO_DEFAULT_ENTROPY_SOURCES)

2011-12-15 20:11:16 +00:00

error.h

OID functionality moved to a separate module.

2013-04-07 22:00:46 +02:00

gcm.h

- Fixes for MSVC6

2012-11-02 10:59:36 +00:00

havege.h

- Always return 0 fixed in doc for havege_random()

2012-02-03 08:13:57 +00:00

md2.h

Added md_process() to MD layer for generic internal access to hash

2013-03-13 10:26:44 +01:00

md4.h

Added md_process() to MD layer for generic internal access to hash

2013-03-13 10:26:44 +01:00

md5.h

Removed further timing differences during SSL message decryption in ssl_decrypt_buf()

2013-02-27 14:48:00 +01:00

md_wrap.h

- Lots of minimal changes to better support WINCE as a build target

2011-11-18 14:26:47 +00:00

md.h

Minor checks to prevent NULL-pointer exceptions

2013-04-02 11:13:39 +02:00

net.h

- Added preliminary ASN.1 buffer writing support

2012-02-13 23:11:30 +00:00

oid.h

OID functionality moved to a separate module.

2013-04-07 22:00:46 +02:00

openssl.h

- Removed extraneous "polarssl/" in front on include directives in header files

2011-08-15 09:07:52 +00:00

padlock.h

- Moved from unsigned long to uint32_t throughout code

2012-10-01 14:41:15 +00:00

pbkdf2.h

- Moved from unsigned long to uint32_t throughout code

2012-10-01 14:41:15 +00:00

pem.h

- A error_strerror function() has been added to translate between error codes and their description.

2011-05-09 16:17:09 +00:00

pkcs11.h

- Fixed argument types

2012-11-14 12:14:19 +00:00

rsa.h

OID functionality moved to a separate module.

2013-04-07 22:00:46 +02:00

sha1.h

Removed further timing differences during SSL message decryption in ssl_decrypt_buf()

2013-02-27 14:48:00 +01:00

sha2.h

Removed further timing differences during SSL message decryption in ssl_decrypt_buf()

2013-02-27 14:48:00 +01:00

sha4.h

Added md_process() to MD layer for generic internal access to hash

2013-03-13 10:26:44 +01:00

ssl_cache.h

The SSL session cache module (ssl_cache) now also retains peer_cert information (not the entire chain)

2013-03-06 18:01:03 +01:00

ssl_ciphersuites.h

Added Camellia ECDHE-based CBC ciphersuites

2013-04-07 23:07:12 +02:00

ssl.h

Ability to specify allowed ciphersuites based on the protocol version.

2013-04-16 18:09:45 +02:00

timing.h

- Better timer for Windows platforms

2011-04-24 15:28:55 +00:00

version.h

Prepared for PolarSSL 1.2.6 release

2013-03-11 11:38:44 +01:00

x509.h

Indication of x509_get_numeric_string() deprecation

2013-04-07 22:34:26 +02:00

x509write.h

OID functionality moved to a separate module.

2013-04-07 22:00:46 +02:00

xtea.h

- Fixed doxygen blocks

2012-11-07 19:57:39 +00:00