robin.thoni/ipxe - git rthoni.com

Commit graph

Autor	SHA1	Nachricht	Datum
Michael Brown	56a7981d58	[tls] Allow transmitted records to be scheduled independently Signed-off-by: Michael Brown <mcb30@ipxe.org>	vor 13 Jahren
Michael Brown	b7f8d1bbfd	[tls] Add support for Server Name Indication (SNI) Signed-off-by: Michael Brown <mcb30@ipxe.org>	vor 13 Jahren
Michael Brown	d9ce3bfe4c	[tls] Support TLS version 1.1 Advertise support for TLS version 1.1, and be prepared to downgrade to TLS version 1.0. Tested against Apache with mod_gnutls, using the GnuTLSPriorities directive to force specific protocol versions. Signed-off-by: Michael Brown <mcb30@ipxe.org>	vor 13 Jahren
Michael Brown	75090f2abf	[tls] Use ANS X9.82 Approved RBG as source of random data for TLS Signed-off-by: Michael Brown <mcb30@ipxe.org>	vor 13 Jahren
Michael Brown	5eb60f4883	[tls] Eliminate polling while TX state machine is idle Signed-off-by: Michael Brown <mcb30@ipxe.org>	vor 14 Jahren
Michael Brown	e01ec74601	[process] Pass containing object pointer to process step() methods Give the step() method a pointer to the containing object, rather than a pointer to the process. This is consistent with the operation of interface methods, and allows a single function to serve as both an interface method and a process step() method. Signed-off-by: Michael Brown <mcb30@ipxe.org>	vor 14 Jahren
Michael Brown	0cc03ac76a	[tls] Send xfer_window_changed() when TLS session is established Signed-off-by: Michael Brown <mcb30@ipxe.org>	vor 14 Jahren
Michael Brown	21682afe69	[tls] Handle multiple handshake records The handshake record in TLS can contain multiple messages. Originally-fixed-by: Timothy Stack <tstack@vmware.com> Signed-off-by: Michael Brown <mcb30@ipxe.org>	vor 15 Jahren
Michael Brown	4327d5d39f	[interface] Convert all data-xfer interfaces to generic interfaces Remove data-xfer as an interface type, and replace data-xfer interfaces with generic interfaces supporting the data-xfer methods. Filter interfaces (as used by the TLS layer) are handled using the generic pass-through interface capability. A side-effect of this is that deliver_raw() no longer exists as a data-xfer method. (In practice this doesn't lose any efficiency, since there are no instances within the current codebase where xfer_deliver_raw() is used to pass data to an interface supporting the deliver_raw() method.) Signed-off-by: Michael Brown <mcb30@ipxe.org>	vor 15 Jahren
Michael Brown	4bfd5b52c1	[refcnt] Add ref_init() wrapper function Standardise on using ref_init() to initialise an embedded reference count, to match the coding style used by other embedded objects. Signed-off-by: Michael Brown <mcb30@ipxe.org>	vor 15 Jahren
Michael Brown	8406115834	[build] Rename gPXE to iPXE Access to the gpxe.org and etherboot.org domains and associated resources has been revoked by the registrant of the domain. Work around this problem by renaming project from gPXE to iPXE, and updating URLs to match. Also update README, LOG and COPYRIGHTS to remove obsolete information. Signed-off-by: Michael Brown <mcb30@ipxe.org>	vor 15 Jahren
Michael Brown	c44a193d0d	[legal] Add a selection of FILE_LICENCE declarations Add FILE_LICENCE declarations to almost all files that make up the various standard builds of gPXE.	vor 16 Jahren
Michael Brown	323cdf8c4c	[xfer] Implement xfer_vreopen() to properly handle redirections When handling a redirection event, we need to close the existing connection before opening the new connection.	vor 16 Jahren
Michael Brown	b4d3d686cc	[crypto] Change cipher_{en,de}crypt() to void functions It is a programming error, not a runtime error, if we attempt to use block ciphers with an incorrect blocksize, so use an assert() rather than an error status return.	vor 16 Jahren
Michael Brown	a3219b24a8	[crypto] Split crypto_algorithm into {digest,cipher,pubkey}_algorithm The various types of cryptographic algorithm are fundamentally different, and it was probably a mistake to try to handle them via a single common type. pubkey_algorithm is a placeholder type for now.	vor 16 Jahren
Michael Brown	5de8305feb	[crypto] Move AES_convert_key() hack into axtls_aes.c Although the nature of the hack is essentially unchanged, this allows us to remove the hardcoded assumption in tls.c that the RX cipher is AES.	vor 16 Jahren
Michael Brown	991f907d5b	[crypto] Rename aes_algorithm to aes_cbc_algorithm	vor 16 Jahren
Michael Brown	8e960eb67c	[tls] Use our own ASN.1 routines for certificate parsing Use our own, more robust, ASN.1 parsing routines to extract the RSA public key from a server certificate. Remove the now-unused AXTLS ASN.1 parser.	vor 16 Jahren
Michael Brown	54fbd11221	[build] Keep gcc 4.4 happy gcc 4.4 adds another few warnings, and also seems to complain if we place %ebp in the clobber list for any inline asm.	vor 16 Jahren
Michael Brown	f6a8158eed	Make seek information part of the xfer metadata, rather than an entirely separate xfer method. Add missing .alloc_iob entries to several xfer_interface_operations structures.	vor 17 Jahren
Michael Brown	df868476e7	Various warnings fixups for OpenBSD with gcc-3.3.5.	vor 17 Jahren
Holger Lubitz	f92096d180	use malloc attribute	vor 18 Jahren
Michael Brown	847ac4f336	tls_change_cipher() can complain about null cipher and digest algorithms; we only need the pubkey check disabled (and only because pubkey algorithms are not yet integrated into the crypto_algorithm subsystem).	vor 18 Jahren
Michael Brown	60e3aa4d75	Change #warnings to FIXMEs, so that we can build without NO_WERROR=1	vor 18 Jahren
Michael Brown	6fc9ed167e	TLS now working again.	vor 18 Jahren

25 Commits (56a7981d5889c91fb333c6b98daf7b9a9d1ec0ee)