gitlab.com/quite/humla-spongycastle.git - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author
2014-04-16	Use a separate PRNG for nonces	Peter Dettman

2014-04-16	Deprecate TlsClientProtocol auto-creation of SecureRandom	Peter Dettman
	Refactor all uses of SecureRandom to be via TlsContext
2014-04-04	Use the TLS 1.0 PRF for the random block	Peter Dettman
	Remove redundant Mac.init calls
2014-01-28	Wire up the extension processing for encrypt_then_mac	Peter Dettman

2013-12-07	Add checks for ciphersuite validity vs the negotiated version	Peter Dettman

2013-12-07	Use high-precision timer, if available, to seed random	Peter Dettman
	Support optional use of deprecated gmt_unix_time in Random
2013-12-06	Fix client handshake when a NewSessionTicket is received.	Peter Dettman

2013-11-28	Fix the CertificateVerify signature calculation for (D)TLS 1.2+	Peter Dettman

2013-11-28	Refactor array utility method into Arrays class	Peter Dettman

2013-11-17	Refactoring around DeferredHash so that for (D)TLS 1.2 we can snapshot	Peter Dettman
	any/all hashes that might be needed for CertificateVerify. Defer the actual CertificateVerify hash calculation at the server until after we have seen the DigitallySigned.
2013-11-11	Fix recent regression relating to DeferredHash handling pre-TLS 1.2	Peter Dettman

2013-11-08	Rename some methods to make it clearer they relate to the PRF hash	Peter Dettman

2013-11-08	Add calls to TlsHandshakeHash.stopTracking()	Peter Dettman
	Add TODOs to reconsider how the server calculates the CertificateVerify handshake hash for TLS 1.2
2013-11-08	For TLS 1.2, client and server track the hash algorithms mentioned in	Peter Dettman
	the CertificateRequest (if any)
2013-11-08	Call sealHashAlgorithms() call after server_hello_done sent/received	Peter Dettman
	Refactor some of the calls around the handshake hash
2013-11-07	Add TODOs related to the handshake hash	Peter Dettman

2013-11-07	Add some TODOs	Peter Dettman

2013-09-17	Refactor to use TlsUtils.isSSL	Peter Dettman

2013-09-16	SSLv3 clients that refuse renegotiation SHOULD use a fatal	Peter Dettman
	handshake_failure alert.
2013-09-16	Check whether SCSV is present already before adding	Peter Dettman
	Refactor to use new append and length-array encoding methods
2013-09-01	Indicate where SignatureAndHashAlgorithm has to be selected when sending	Peter Dettman
	CertificateVerify
2013-07-17	For compatibility with latest GnuTLS/OpenSSL, just ignore any server	Peter Dettman
	extensions sent for a resumed session (instead of raising fatal alert).
2013-06-29	Add extra TODO to find out more about status_request extension during	Peter Dettman
	session resumption
2013-06-29	Exclude some extensions during session resumption	Peter Dettman
	Add TODOs for various RFC clauses
2013-06-27	Store server extensions in session parameters and process on resumption	Peter Dettman

2013-06-25	Refactor ServerHello code to bring security/session parameters into the	Peter Dettman
	same place. Validate that the server sends no extensions when resuming a session (excepting renegotiation_info).
2013-06-25	Refactoring	Peter Dettman

2013-06-23	Replace majority of usages of failWithError with TlsFatalAlert	Peter Dettman
	exceptions
2013-06-23	For consistency, only call setResumableSession at completion	Peter Dettman

2013-06-23	Add the peer certificate, if any, to the SessionParameters	Peter Dettman

2013-06-23	Add TlsClient.getResumableSession instead of new	Peter Dettman
	TlsClientProtocol.connect argument New SessionParameters class to manage session data Resumed sessions added to context immediately Javadoc
2013-06-22	Invalidate session if connection not closed gracefully	Peter Dettman

2013-06-22	Initial implementation of session resumption (client-side TLS)	Peter Dettman

2013-06-22	ChangeCipherSpec doesn't need a queue, and shouldn't have handshake	Peter Dettman
	states associated with it. Server sends ChangeCipherSpec eagerly.
2013-06-22	Add checks on various lengths to make sure they aren't overflowing their	Peter Dettman
	type
2013-06-22	Check that any server session_ticket extension_data is empty	Peter Dettman

2013-06-22	Factor out a method for checking for empty extension_data	Peter Dettman

2013-06-22	Add check that server status_request extension_data is empty (RFC 3546)	Peter Dettman

2013-06-22	Store the server certificate in a field	Peter Dettman

2013-06-22	Cleanup state after handshake	Peter Dettman

2013-06-22	Call notifyHandshakeComplete via the peer interface	Peter Dettman

2013-06-20	Add support for max_fragment_length extension to D/TLS protocols	Peter Dettman

2013-06-20	Add HandshakeMessage class to avoid unnecessary copies of byte[]	Peter Dettman
	Properly fragment handshake messages
2013-06-20	Sample code for acting on max_fragment_length extension	Peter Dettman

2013-06-20	Detect when truncated_hmac has been negotiated and apply truncation in	Peter Dettman
	TlsMac
2013-06-20	New utility method and refactoring related to extension data	Peter Dettman

2013-06-19	Add supported_signature_algorithms field to CertificateRequest for TLS	Peter Dettman
	1.2
2013-06-19	Use explicit DigitallySigned struct instead of simple signature	Peter Dettman

2013-06-16	Parse certificate_status messages at the client	Peter Dettman

2013-06-16	Track whether or not a certificate_status message is allowed	Peter Dettman