summaryrefslogtreecommitdiff
path: root/src/tls/tls_drv.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2013-06-13Switch to rebar build toolEvgeniy Khramtsov1-653/+0
Use dynamic Rebar configuration Make iconv dependency optional Disable transient_supervisors compile option Add hipe compilation support Only compile ibrowse and lhttpc when needed Make it possible to generate an OTP application release Add --enable-debug compile option Add --enable-all compiler option Add --enable-tools configure option Add --with-erlang configure option. Add --enable-erlang-version-check configure option. Add lager support Improve the test suite
2013-01-24Update copyright datesAlexey Shchepin1-1/+1
2012-12-20Fixed signedness issue in tls_drv GET_DESCRYPTED_INPUT (EJAB-1591)Alexey Shchepin1-1/+2
2012-07-24Detect OpenSSL version at runtime, not at compile timeJanusz Dziemidowicz1-3/+7
2012-07-19Enable DHE key exchange in TLS driverJanusz Dziemidowicz1-0/+67
2012-07-18Enable ECDHE key exchange in TSL driverJanusz Dziemidowicz1-0/+24
2012-07-18Disable old and unsecure ciphers in TLS driverJanusz Dziemidowicz1-0/+4
Disable: - export ciphers - broken by design, 40 and 56 bit encryption - low encryption ciphers - 56 and 64 bit encryption - SSLv2 ciphers - some ciphers using MD5 MAC
2012-07-18Disable SSL 2.0 in TLS driverJanusz Dziemidowicz1-2/+2
SSL 2.0 is not used anywhere as it has security problems. Disable it unconditionally both in server and client mode. This does _not_ disable support for SSL 2.0 compatible client hello which still will be accepted in the server mode.
2012-04-06Make sure that res is initialized in all casesPaweł Chmielowski1-0/+2
2012-04-06Don't ignore Length parameter in tls:recvPaweł Chmielowski1-2/+11
2012-04-06Avoid quadratic behavior in reading SSL dataAlexey Shchepin1-2/+4
2012-02-23Update copyright datesAlexey Shchepin1-1/+1
2012-01-19http_bind webserver TLS fail on Chrome (thanks to Adam Langley)(EJAB-1530)Badlop1-1/+2
2011-12-21Support Erlang/OTP R15B driver (EJAB-1521)Badlop1-4/+26
2011-09-25Decrease CPU usage caused by tls:send with large data.Janusz Dziemidowicz1-13/+3
Sending one large chunk of data with tls:send eats lots of CPU power and blocks whole Erlang emulator. This is caused by the fact that encrypted output is read from memory BIO in 1k chunks. Memory BIO, after reading data, shifts the remaining part. If large chunks of data (few MB) is sent and then read in 1k chunks, then a _lot_ of shifting is performed eating CPU. The solution is to simply allocate binary of the needed size (amount of data in memory BIO can be retrieved with BIO_ctrl_pending) and then issue only one read that reads the whole data.
2011-02-14update copyright up to 2011Christophe Romain1-1/+1
2010-12-11Option to reject S2S connection if untrusted certificate (EJAB-464)Badlop1-3/+6
2010-11-17Set SSL_MODE_RELEASE_BUFFERS mode when available (EJAB-1351)Evgeniy Khramtsov1-0/+3
2010-06-25Inform client that SSL session caching is disabled (thanks to Pawel Chmielowski)Badlop1-2/+3
2010-01-12Update year of ProcessOne copyright from 2009 to 2010 (EJAB-1159)Badlop1-1/+1
SVN Revision: 2891
2009-06-09Add forgotten copyright and license notices. Fix blackspaces.Badlop1-1/+1
SVN Revision: 2151
2009-03-10* src/tls/tls_drv.c: Fix encryption problem for ejabberd_httpBadlop1-0/+1
after timeout (thanks to Alexey Shchepin)(EJAB-880) SVN Revision: 1986
2009-03-09* src/tls/tls_drv.c: Fix to support OpenSSL older thanBadlop1-0/+4
0.9.8f (EJAB-877)(thanks to Jonathan Schleifer) * doc/guide.tex: It is again supported OpenSSL older than 0.9.8f * doc/guide.html: Likewise SVN Revision: 1979
2009-02-27* src/tls/tls_drv.c: S2S connection with STARTTLS fails to GtalkBadlop1-1/+1
and recent Openfire (thanks to Philipp Hancke)(EJAB-877) SVN Revision: 1926
2009-01-13* src/tls/Makefile.win32: Windows compilation support.Mickaël Rémond1-2/+0
* src/tls/tls_drv.c: Likewise. * src/tls/stdint.h: Likewise. SVN Revision: 1816
2009-01-12* doc/guide.tex: Update copyright date 2008 to 2009 (EJAB-842)Badlop1-1/+1
* doc/guide.html: Likewise * src/*/*.erl: Likewise * src/*/*.erl: Remove unneeded blankspaces in license text SVN Revision: 1804
2009-01-05* src/tls/tls_drv.c: Added a flag to avoid certificate validationAlexey Shchepin1-0/+7
* src/tls/tls.erl: Likewise * src/ejabberd_c2s.erl: Likewise SVN Revision: 1774
2008-11-10* src/tls/tls_drv.c: Don't create a SSL context on everyAlexey Shchepin1-24/+235
connection and disable SSLv2 on outgoing connections (EJAB-781) SVN Revision: 1675
2008-07-31* doc/guide.tex: Update Process-one name to ProcessOne (EJAB-708)Badlop1-1/+1
* doc/guide.html: Likewise * doc/api/overview.edoc: Likewise * src/*/*.erl: Likewise * src/*/*.hrl: Likewise * src/*/*.c: Likewise * src/odbc/*.sql: Likewise SVN Revision: 1499
2008-04-11* src/tls/tls_drv.c: Fixed gcc signedness warningsAlexey Shchepin1-1/+1
* src/ejabberd_zlib/ejabberd_zlib_drv.c: Likewise SVN Revision: 1287
2008-01-15* doc/guide.tex: Updated copyright dates to 2008Badlop1-1/+1
* src/*: Likewise SVN Revision: 1153
2007-12-24* Applied copyright patch 3.Mickaël Rémond1-1/+19
SVN Revision: 1113
2007-07-30* src/tls/tls_drv.c: Sends the entire certificate chain (EJAB-209).Mickaël Rémond1-1/+1
SVN Revision: 841
2006-08-04* src/tls/tls_drv.c: Report OpenSSL error messages (thanks toAlexey Shchepin1-2/+19
Magnus Henoch) SVN Revision: 593
2005-11-03* src/ejabberd_s2s_out.erl: Support for STARTTLS+SASL EXTERNALAlexey Shchepin1-0/+48
* src/ejabberd_s2s_in.erl: Likewise * src/tls/tls.erl: Likewise * src/tls/tls_drv.c: Likewise * src/tls/XmppAddr.asn1: Likewise * src/tls/Makefile.in: Likewise SVN Revision: 430
2005-10-25* src/tls/tls_drv.c: Support for "connect" methodAlexey Shchepin1-14/+30
* src/tls/tls.erl: Likewise * src/ejabberd_s2s_in.erl: Support for STARTTLS+Dialback * src/ejabberd_s2s_out.erl: Likewise * src/ejabberd_receiver.erl: Added a few hacks ({active,once} mode should be used instead of recv/3 call to avoid them) * src/ejabberd_config.erl: Added s2s_use_starttls and s2s_certfile options * src/ejabberd.cfg.example: Likewise SVN Revision: 426
2005-04-24* src/tls/tls_drv.c: Reverted previous patchAlexey Shchepin1-2/+2
SVN Revision: 327
2005-04-09* src/ejabberd_c2s.erl: Send new id for each new stream inside oneAlexey Shchepin1-2/+2
session (thanks to Maxim Ryazanov) * src/tls/tls_drv.c: Now reads all certificates from certificate file instead of reading only first one (thanks to Karl-Johan Karlsson) * examples/transport-configs/init-scripts/jabber-gg-transport: Fixed typo (thanks to Sander Devrieze) SVN Revision: 305
2004-07-28* src/tls/tls_drv.c: Added freeing of SSL stuffAlexey Shchepin1-35/+47
* src/xml_stream.erl: Added start/2 function * src/ejabberd_receiver.erl: Now using xml_stream:start/2 SVN Revision: 250
2004-07-25* src/tls/: Library for TLS support (not completed)Alexey Shchepin1-0/+188
* src/ejabberd_auth.erl: Now uses two LDAP connections * src/ejabberd_c2s.erl: Return resource on get_presence request (thanks to Mickael Remond) * src/mod_configure2.erl: Bugfix (thanks to Sergei Golovan) * src/msgs/ua.msg: New Ukrainian translation (thanks to usercard) * src/msgs/nl.msg: Updated (thanks to Sander Devrieze) SVN Revision: 247
generated by cgit v1.2.3 (git 2.25.1) at 2025-09-06 15:40:25 +0000