Origin for each line in ChangeLog from check-in b3dc06600e:
b3dc06600e 2015-05-01 andreas_kupri: 2015-05-01 Andreas Kupries <[email protected]> b3dc06600e 2015-05-01 andreas_kupri: b3dc06600e 2015-05-01 andreas_kupri: * configure.in: Bump to version 1.6.5. b3dc06600e 2015-05-01 andreas_kupri: * win/makefile.vc: b3dc06600e 2015-05-01 andreas_kupri: * configure: regen with ac-2.59 b3dc06600e 2015-05-01 andreas_kupri: * tls.c: Accepted SF TLS [bug/patch #57](https://sourceforge.net/p/tls/bugs/57/). b3dc06600e 2015-05-01 andreas_kupri: * tlsIO.c: Accepted core Tcl patch in [ticket](http://core.tcl.tk/tcl/tktview/0f94f855cafed92d0e174b7d835453a02831b4dd). b3dc06600e 2015-05-01 andreas_kupri: 54d14de805 2014-12-08 andreas_kupri: 2014-12-05 Andreas Kupries <[email protected]> 54d14de805 2014-12-08 andreas_kupri: 54d14de805 2014-12-08 andreas_kupri: * configure.in: Bump to version 1.6.4. 54d14de805 2014-12-08 andreas_kupri: * win/makefile.vc: 54d14de805 2014-12-08 andreas_kupri: * configure: regen with ac-2.59 54d14de805 2014-12-08 andreas_kupri: * tls.c: Accepted SF TLS patches #12 and #13 implementing 54d14de805 2014-12-08 andreas_kupri: * tls.htm: support for SNI, and TLS 1.1 + 1.2 54d14de805 2014-12-08 andreas_kupri: * tlsInt.h: 9cdfbcc18f 2015-02-26 andreas_kupri: * tlsIO.c: This also accepted patch for bug #53. 9cdfbcc18f 2015-02-26 andreas_kupri: * tls.tcl: Patch available since June, now committed. 54d14de805 2014-12-08 andreas_kupri: c1eb553b32 2012-07-09 andreas_kupri: 2012-07-09 Andreas Kupries <[email protected]> c1eb553b32 2012-07-09 andreas_kupri: c1eb553b32 2012-07-09 andreas_kupri: * configure.in: Bump to version 1.6.3. c1eb553b32 2012-07-09 andreas_kupri: * win/makefile.vc: c1eb553b32 2012-07-09 andreas_kupri: * configure: regen with ac-2.59 c1eb553b32 2012-07-09 andreas_kupri: c1eb553b32 2012-07-09 andreas_kupri: * tls.c (MiscObjCmd): Fixed non-static string array used in call c1eb553b32 2012-07-09 andreas_kupri: of Tcl_GetIndexFromObj(). Memory smash waiting to happen. Thanks c1eb553b32 2012-07-09 andreas_kupri: to Brian Griffin for alerting us all to the problem. c1eb553b32 2012-07-09 andreas_kupri: a652b4f6a7 2012-06-01 andreas_kupri: 2012-06-01 Andreas Kupries <[email protected]> a652b4f6a7 2012-06-01 andreas_kupri: a652b4f6a7 2012-06-01 andreas_kupri: * tls.c: Applied Jeff's patch from a652b4f6a7 2012-06-01 andreas_kupri: http://www.mail-archive.com/[email protected]/msg12356.html e8bcabbd0a 2012-06-01 andreas_kupri: e8bcabbd0a 2012-06-01 andreas_kupri: * configure.in: Bump to version 1.6.2. e8bcabbd0a 2012-06-01 andreas_kupri: * win/makefile.vc: e8bcabbd0a 2012-06-01 andreas_kupri: * configure: regen with ac-2.59 a652b4f6a7 2012-06-01 andreas_kupri: 366542d9a0 2010-08-11 hobbs2: 2010-08-11 Jeff Hobbs <[email protected]> 4cb2697d98 2010-08-12 hobbs2: 4cb2697d98 2010-08-12 hobbs2: *** TLS 1.6.1 TAGGED *** 05b7445366 2010-08-12 hobbs2: 05b7445366 2010-08-12 hobbs2: * configure: regen with ac-2.59 05b7445366 2010-08-12 hobbs2: * win/makefile.vc, configure.in: bump version to 1.6.1 05b7445366 2010-08-12 hobbs2: * tclconfig/tcl.m4: updated to TEA 3.8 366542d9a0 2010-08-11 hobbs2: 366542d9a0 2010-08-11 hobbs2: * tls.c (StatusObjCmd): memleak: free peer if loaded. [Bug 3041925] 366542d9a0 2010-08-11 hobbs2: 119a8780e7 2010-07-27 hobbs2: 2010-07-27 Jeff Hobbs <[email protected]> 119a8780e7 2010-07-27 hobbs2: 119a8780e7 2010-07-27 hobbs2: * tls.tcl (tls::socket): some socket implementations have a -type 119a8780e7 2010-07-27 hobbs2: support (e.g. for inet6). 119a8780e7 2010-07-27 hobbs2: 573dc5879d 2009-04-23 hobbs2: 2009-04-23 Jeff Hobbs <[email protected]> 573dc5879d 2009-04-23 hobbs2: 573dc5879d 2009-04-23 hobbs2: * tls.tcl (tls::initlib): add support for Windows starpack 573dc5879d 2009-04-23 hobbs2: operation that unbundles any constituent libraries. [AS Bug 82888] 573dc5879d 2009-04-23 hobbs2: 4b6990b1fa 2008-06-18 patthoyts: 2008-06-18 Pat Thoyts <[email protected]> 4b6990b1fa 2008-06-18 patthoyts: 4b6990b1fa 2008-06-18 patthoyts: * tests/ciphers.test: Fix for different openssl versions. 4b6990b1fa 2008-06-18 patthoyts: * win/makefile.vc: Updates to support tests. 4b6990b1fa 2008-06-18 patthoyts: * win/rules.vc: 4b6990b1fa 2008-06-18 patthoyts: * win/nmakehlp.c: 4b6990b1fa 2008-06-18 patthoyts: 8dd7366fcc 2008-03-19 hobbs2: 2008-03-19 Jeff Hobbs <[email protected]> 10599ca96e 2008-03-19 hobbs2: 10599ca96e 2008-03-19 hobbs2: *** TLS 1.6 TAGGED *** 10599ca96e 2008-03-19 hobbs2: 10599ca96e 2008-03-19 hobbs2: * Makefile.in (dist): update to include win/ and file.srl 7530d26995 2008-03-19 hobbs2: 7530d26995 2008-03-19 hobbs2: * win/makefile.vc: bump version to 1.6 7530d26995 2008-03-19 hobbs2: * configure.in: use -L and -R where necessary. [Bug 1742859] 0adce51010 2008-03-19 hobbs2: 0adce51010 2008-03-19 hobbs2: * aclocal.m4: improve --with-ssl-dir check. 0adce51010 2008-03-19 hobbs2: 0adce51010 2008-03-19 hobbs2: * tests/tlsIO.test (tlsIO-14.*): Add tls::unimport for symmetry 0adce51010 2008-03-19 hobbs2: * tls.htm, tls.c (UnimportObjCmd): to tls::import. [Bug 1203273] 5804017ad3 2008-03-19 hobbs2: 8dd7366fcc 2008-03-19 hobbs2: * tls.c (Tls_Clean, ImportObjCmd): Fix cleanup mem leak [Bug 1414045] 5804017ad3 2008-03-19 hobbs2: Use better Eval APIs, cleaner Tcl_Obj-handling. 8dd7366fcc 2008-03-19 hobbs2: 5fb2d63afa 2008-03-19 patthoyts: 2008-03-19 Pat Thoyts <[email protected]> 5fb2d63afa 2008-03-19 patthoyts: 5fb2d63afa 2008-03-19 patthoyts: * win/Makefile.vc Updated the nmake build files with MSVC9 support 5fb2d63afa 2008-03-19 patthoyts: * win/rules.vc: and fixed to run the test-suite properly. 5fb2d63afa 2008-03-19 patthoyts: * win/nmakehlp.c: 5fb2d63afa 2008-03-19 patthoyts: * tls.tcl (tls::initlib): Corrected namespace handling. 5fb2d63afa 2008-03-19 patthoyts: * tls.c: Applied #1890223 to fix handshake on non-blocking sockets 8dd7366fcc 2008-03-19 hobbs2: 8dd7366fcc 2008-03-19 hobbs2: 2008-03-17 Jeff Hobbs <[email protected]> 8dd7366fcc 2008-03-19 hobbs2: 8dd7366fcc 2008-03-19 hobbs2: * tls.tcl (tls::initlib): load tls.tcl first and call 8dd7366fcc 2008-03-19 hobbs2: * Makefile.in (pkgIndex.tcl): tls::initlib to load library to 8dd7366fcc 2008-03-19 hobbs2: handle cwd changes. [Bug 1888113] 5fb2d63afa 2008-03-19 patthoyts: 0fdb07692d 2007-09-06 patthoyts: 2007-09-06 Pat Thoyts <[email protected]> 0fdb07692d 2007-09-06 patthoyts: 0fdb07692d 2007-09-06 patthoyts: * tls.c: Silence 64 bit integer conversion warnings 0fdb07692d 2007-09-06 patthoyts: * win/nmakehlp.c: Update build system to support AMD64 target 0fdb07692d 2007-09-06 patthoyts: * win/makefile.vc: with MSVC8 0fdb07692d 2007-09-06 patthoyts: * win/rules.vc: 0fdb07692d 2007-09-06 patthoyts: c692cb9684 2007-06-22 hobbs2: 2007-06-22 Jeff Hobbs <[email protected]> c692cb9684 2007-06-22 hobbs2: c692cb9684 2007-06-22 hobbs2: * tlsIO.c (TlsInputProc, TlsOutputProc, TlsWatchProc): c692cb9684 2007-06-22 hobbs2: * tls.c (VerifyCallback): add an state flag in the verify callback c692cb9684 2007-06-22 hobbs2: that prevents possibly recursion (on 'update'). [Bug 1652380] c692cb9684 2007-06-22 hobbs2: c692cb9684 2007-06-22 hobbs2: * tests/ciphers.test: reworked to make test output cleaner to c692cb9684 2007-06-22 hobbs2: understand missing ciphers (if any) c692cb9684 2007-06-22 hobbs2: c692cb9684 2007-06-22 hobbs2: * Makefile.in, tclconfig/tcl.m4: update to TEA 3.6 c692cb9684 2007-06-22 hobbs2: * configure, configure.in: using autoconf-2.59 c692cb9684 2007-06-22 hobbs2: 6613ecd570 2007-02-28 patthoyts: 2007-02-28 Pat Thoyts <[email protected]> 6613ecd570 2007-02-28 patthoyts: 6613ecd570 2007-02-28 patthoyts: * win/makefile.vc: Rebase the DLL sensibly. Additional libs for 6613ecd570 2007-02-28 patthoyts: static link of openssl. 6613ecd570 2007-02-28 patthoyts: * tls.tcl: bug #1579837 - TIP 278 bug (possibly) - fixed. 6613ecd570 2007-02-28 patthoyts: 0fa0ca923c 2006-06-22 patthoyts: 2006-03-30 Pat Thoyts <[email protected]> 0fa0ca923c 2006-06-22 patthoyts: 0fa0ca923c 2006-06-22 patthoyts: * tclconfig/*: Updated to TEA 3.5 in response to bug 1460491 0fa0ca923c 2006-06-22 patthoyts: * configure*: Regenerated configure. 0fa0ca923c 2006-06-22 patthoyts: eb8d3c2bf0 2005-02-09 hobbs2: 2005-02-08 Jeff Hobbs <[email protected]> eb8d3c2bf0 2005-02-09 hobbs2: eb8d3c2bf0 2005-02-09 hobbs2: * Makefile.in, tclconfig/tcl.m4: update to TEA 3.2 d3d9ecf47d 2005-02-09 hobbs2: * configure, configure.in: using autoconf-2.59 eb8d3c2bf0 2005-02-09 hobbs2: 7f9a0592f7 2004-12-23 patthoyts: 2004-12-23 Pat Thoyts <[email protected]> 7f9a0592f7 2004-12-23 patthoyts: 7f9a0592f7 2004-12-23 patthoyts: * Makefile.in: Removed spurious copying of tls.tcl into the 7f9a0592f7 2004-12-23 patthoyts: build directory. 7f9a0592f7 2004-12-23 patthoyts: fa0664ed31 2004-12-23 patthoyts: 2004-12-22 Pat Thoyts <[email protected]> fa0664ed31 2004-12-23 patthoyts: fa0664ed31 2004-12-23 patthoyts: * configure.in: Incremented minor version to 1.5.1 fa0664ed31 2004-12-23 patthoyts: * configure: fa0664ed31 2004-12-23 patthoyts: fe79338a36 2004-12-17 patthoyts: 2004-12-17 Pat Thoyts <[email protected]> fe79338a36 2004-12-17 patthoyts: fe79338a36 2004-12-17 patthoyts: * win/makefile.vc: Added the MSVC build system (from the Tcl fe79338a36 2004-12-17 patthoyts: * win/rules.vc: sampleextension). fe79338a36 2004-12-17 patthoyts: * win/nmakehlp.c: fe79338a36 2004-12-17 patthoyts: * win/tls.rc Added Windows resource file. fe79338a36 2004-12-17 patthoyts: fe79338a36 2004-12-17 patthoyts: * tls.tcl: From patch #948155, added support for fe79338a36 2004-12-17 patthoyts: alternate socket commands. fe79338a36 2004-12-17 patthoyts: * tls.c: Quieten some MSVC warnings. Prefer ckalloc fe79338a36 2004-12-17 patthoyts: over Tcl_Alloc. (David Graveraux). fe79338a36 2004-12-17 patthoyts: ae154f5bb8 2004-06-29 patthoyts: 2004-06-29 Pat Thoyts <[email protected]> 9633ce0e5c 2004-06-29 patthoyts: 9633ce0e5c 2004-06-29 patthoyts: * tls.c: Fixup to build against tcl 8.3.3. Handle 9633ce0e5c 2004-06-29 patthoyts: * tlsIO.c: 8.4 constification. 792b3e0524 2004-06-29 patthoyts: 792b3e0524 2004-06-29 patthoyts: * tlsInt.h: Added headers required with MSVC on Win32. 792b3e0524 2004-06-29 patthoyts: * tlsX509.c: undef min and max if defined (win32). ae154f5bb8 2004-06-29 patthoyts: ae154f5bb8 2004-06-29 patthoyts: * Makefile.in: Fixed to build on win32 using msys with ae154f5bb8 2004-06-29 patthoyts: * aclocal.m4: MSVC. Also fixed the test target. ae154f5bb8 2004-06-29 patthoyts: * configure.in: ae154f5bb8 2004-06-29 patthoyts: * configure: Regenerated. ae154f5bb8 2004-06-29 patthoyts: * tclconfig/tcl.m4: Updated to most recent version. ae154f5bb8 2004-06-29 patthoyts: 67bf2dd40d 2004-03-24 razzell: 2004-03-23 Dan Razzell <[email protected]> 67bf2dd40d 2004-03-24 razzell: * tls.c: 67bf2dd40d 2004-03-24 razzell: * tlsBIO.c: 67bf2dd40d 2004-03-24 razzell: * tlsIO.c: 67bf2dd40d 2004-03-24 razzell: * tlsInt.h: Fixed type match warnings. 67bf2dd40d 2004-03-24 razzell: bf83205ca8 2004-03-19 hobbs: 2004-03-19 Jeff Hobbs <[email protected]> bf83205ca8 2004-03-19 hobbs: bf83205ca8 2004-03-19 hobbs: * tls.c (Tls_Init): replaced older TEA config with newer bf83205ca8 2004-03-19 hobbs: * config/* (removed): bf83205ca8 2004-03-19 hobbs: * pkgIndex.tcl.in, strncasecmp.c (removed): bf83205ca8 2004-03-19 hobbs: * Makefile.in, aclocal.m4, configure, configure.in: bf83205ca8 2004-03-19 hobbs: * tclconfig/README.txt, tclconfig/install-sh, tclconfig/tcl.m4: bf83205ca8 2004-03-19 hobbs: 46cae05dcb 2004-03-17 razzell: 2004-03-17 Dan Razzell <[email protected]> 46cae05dcb 2004-03-17 razzell: 46cae05dcb 2004-03-17 razzell: * tlsX509.c: Add support for long serial numbers per RFC 3280. 46cae05dcb 2004-03-17 razzell: Format is now hexadecimal. 46cae05dcb 2004-03-17 razzell: [Request #915313] 46cae05dcb 2004-03-17 razzell: Correctly convert certificate Distinguished Names 46cae05dcb 2004-03-17 razzell: to Tcl string representation. Eliminates use of 46cae05dcb 2004-03-17 razzell: deprecated OpenSSL function. Format is now compliant 46cae05dcb 2004-03-17 razzell: with RFC 2253. [Request #915315] 46cae05dcb 2004-03-17 razzell: ba5a968fc6 2004-02-17 razzell: 2004-02-17 Dan Razzell <[email protected]> ba5a968fc6 2004-02-17 razzell: ba5a968fc6 2004-02-17 razzell: TLS 1.5.0 RELEASE ba5a968fc6 2004-02-17 razzell: 20fd9291ba 2004-02-13 razzell: 2004-02-12 Dan Razzell <[email protected]> 20fd9291ba 2004-02-13 razzell: 20fd9291ba 2004-02-13 razzell: * tls.c: Allow verify callback to return empty result. 20fd9291ba 2004-02-13 razzell: * tls.htm: Document callback behaviors. 20fd9291ba 2004-02-13 razzell: 20fd9291ba 2004-02-13 razzell: 2004-02-11 Dan Razzell <[email protected]> 20fd9291ba 2004-02-13 razzell: 20fd9291ba 2004-02-13 razzell: * tests/tlsIO.test: 20fd9291ba 2004-02-13 razzell: * remote.tcl: Complete private key name changes from 2001-06-21. 20fd9291ba 2004-02-13 razzell: bc575f4a87 2004-02-04 razzell: 2004-02-03 Dan Razzell <[email protected]> bc575f4a87 2004-02-04 razzell: bc575f4a87 2004-02-04 razzell: * Makefile.in: Removed circular dependency. bc575f4a87 2004-02-04 razzell: * tlsInt.h: Make function declarations explicit. bc575f4a87 2004-02-04 razzell: * tls.c: Fix type match and unused variable warnings. bc575f4a87 2004-02-04 razzell: * tlsBIO.c: Fix type match warning. bc575f4a87 2004-02-04 razzell: 64bce88b33 2003-12-15 razzell: 2003-12-15 Dan Razzell <[email protected]> 64bce88b33 2003-12-15 razzell: 64bce88b33 2003-12-15 razzell: * pkgIndex.tcl.in: 64bce88b33 2003-12-15 razzell: * tls.htm: 64bce88b33 2003-12-15 razzell: * tests/tlsIO.test: updated version to 1.5. 64bce88b33 2003-12-15 razzell: 70adf652c5 2003-10-08 razzell: 2003-10-07 Dan Razzell <[email protected]> 70adf652c5 2003-10-08 razzell: 70adf652c5 2003-10-08 razzell: * tests/ciphers.test: updated list of tested ciphers to correspond 70adf652c5 2003-10-08 razzell: * with those available from OpenSSL. [Request #811981] 70adf652c5 2003-10-08 razzell: bb720c804e 2003-10-07 razzell: 2003-10-07 Dan Razzell <[email protected]> bb720c804e 2003-10-07 razzell: bb720c804e 2003-10-07 razzell: * tls.c: added CONST with intent similar to those from 2002-02-04. bb720c804e 2003-10-07 razzell: [Request #811911] bb720c804e 2003-10-07 razzell: b423807e0e 2003-07-07 hobbs: 2003-07-07 Jeff Hobbs <[email protected]> b423807e0e 2003-07-07 hobbs: b423807e0e 2003-07-07 hobbs: * tls.c (Tls_Init): added tls::misc command provided by b423807e0e 2003-07-07 hobbs: * tlsX509.c: Wojciech Kocjan (wojciech kocjan.org) b423807e0e 2003-07-07 hobbs: * tests/keytest1.tcl: to expose more low-level SSL commands b423807e0e 2003-07-07 hobbs: * tests/keytest2.tcl: b423807e0e 2003-07-07 hobbs: 509dd7a9b6 2003-05-15 razzell: 2003-05-15 Dan Razzell <[email protected]> 3631274d64 2003-05-15 razzell: 3631274d64 2003-05-15 razzell: * tls.tcl: 3631274d64 2003-05-15 razzell: * tlsInt.h: 3631274d64 2003-05-15 razzell: * tls.c: add support for binding a password callback to the socket. 3631274d64 2003-05-15 razzell: Now each socket can have its own command and password callbacks instead 3631274d64 2003-05-15 razzell: of being forced to have all password management pass through a common 3631274d64 2003-05-15 razzell: procedure. The common password procedure is retained for compatibility 3631274d64 2003-05-15 razzell: but its use should be DEPRECATED. 3631274d64 2003-05-15 razzell: Add version command to return OpenSSL version string. 3631274d64 2003-05-15 razzell: Remove unstable workarounds needed for verify in obsolete versions of 3631274d64 2003-05-15 razzell: OpenSSL. 3631274d64 2003-05-15 razzell: Fix memory leak. [Request #640660] 3631274d64 2003-05-15 razzell: More casts to eliminate compiler warnings. 3631274d64 2003-05-15 razzell: 3631274d64 2003-05-15 razzell: * tls.htm: document password callback. 3631274d64 2003-05-15 razzell: Correct technical and typographic errors. 3631274d64 2003-05-15 razzell: 3631274d64 2003-05-15 razzell: * README.txt: identify versions of OpenSSL which fix known problems. 3631274d64 2003-05-15 razzell: General warning of security problems in older versions of OpenSSL. 3631274d64 2003-05-15 razzell: c34385bbcd 2002-02-04 hobbs: 2002-02-04 Jeff Hobbs <[email protected]> c34385bbcd 2002-02-04 hobbs: c34385bbcd 2002-02-04 hobbs: * tls.htm: c34385bbcd 2002-02-04 hobbs: * tls.c: added support for local certificate status check, as well c34385bbcd 2002-02-04 hobbs: as returning the # of bits in the session key. [Patch #505698] (rose) c34385bbcd 2002-02-04 hobbs: c34385bbcd 2002-02-04 hobbs: * tls.c: c34385bbcd 2002-02-04 hobbs: * tlsIO.c: c34385bbcd 2002-02-04 hobbs: * tlsBIO.c: added CONSTs to satisfy Tcl 8.4 sources. This may c34385bbcd 2002-02-04 hobbs: give warnings when compiled against 8.3, but they can be ignored. c34385bbcd 2002-02-04 hobbs: c34385bbcd 2002-02-04 hobbs: * tests/simpleClient.tcl: c34385bbcd 2002-02-04 hobbs: * tests/simpleServer.tcl: point to updated client/server key files. c34385bbcd 2002-02-04 hobbs: c34385bbcd 2002-02-04 hobbs: * tests/tlsIO.test: c34385bbcd 2002-02-04 hobbs: * tests/ciphers.test: updated to load tls from build dir. c34385bbcd 2002-02-04 hobbs: c34385bbcd 2002-02-04 hobbs: * Makefile.in: removed strncasecmp from default object set. This c34385bbcd 2002-02-04 hobbs: is only needed on the Mac, and Tcl stubs provides it. c34385bbcd 2002-02-04 hobbs: c34385bbcd 2002-02-04 hobbs: * configure: regen'ed. c34385bbcd 2002-02-04 hobbs: * configure.in: updated to 1.5.0 for next release. c34385bbcd 2002-02-04 hobbs: Changed default openssl location to /usr/local/ssl (this is where c34385bbcd 2002-02-04 hobbs: openssl 0.9.6c installs by default). c34385bbcd 2002-02-04 hobbs: Changed to use public Tcl headers (private not needed). c34385bbcd 2002-02-04 hobbs: ea64ff013f 2001-06-21 hobbs: 2001-06-21 Jeff Hobbs <[email protected]> c34385bbcd 2002-02-04 hobbs: c34385bbcd 2002-02-04 hobbs: TLS 1.4.1 RELEASE ea64ff013f 2001-06-21 hobbs: ea64ff013f 2001-06-21 hobbs: * configure: added configure to CVS ea64ff013f 2001-06-21 hobbs: * configure.in: moved to patchlevel 1.4.1 ea64ff013f 2001-06-21 hobbs: ea64ff013f 2001-06-21 hobbs: * Makefile.in: corrected 'dist' target ea64ff013f 2001-06-21 hobbs: ea64ff013f 2001-06-21 hobbs: * tests/certs/file.srl: ea64ff013f 2001-06-21 hobbs: * tests/certs/ca.pem: ea64ff013f 2001-06-21 hobbs: * tests/certs/client.key: ea64ff013f 2001-06-21 hobbs: * tests/certs/client.pem: ea64ff013f 2001-06-21 hobbs: * tests/certs/client.req: ea64ff013f 2001-06-21 hobbs: * tests/certs/privkey.pem: ea64ff013f 2001-06-21 hobbs: * tests/certs/server.key: ea64ff013f 2001-06-21 hobbs: * tests/certs/server.pem: ea64ff013f 2001-06-21 hobbs: * tests/certs/server.req: ea64ff013f 2001-06-21 hobbs: * tests/certs/cacert.pem: replaced by new ca.pem ea64ff013f 2001-06-21 hobbs: * tests/certs/skey.pem: replaced by new server.key ea64ff013f 2001-06-21 hobbs: * tests/certs/ckey.pem: replaced by new client.key ea64ff013f 2001-06-21 hobbs: * tests/certs/README.txt: new set of test certificates with some ea64ff013f 2001-06-21 hobbs: README info on their generation. ea64ff013f 2001-06-21 hobbs: ea64ff013f 2001-06-21 hobbs: * tests/ciphers.test: updated ciphers expected with default ea64ff013f 2001-06-21 hobbs: openssl build. ea64ff013f 2001-06-21 hobbs: ea64ff013f 2001-06-21 hobbs: * tests/tclIO.test: updated to use new names for certs/keys. ea64ff013f 2001-06-21 hobbs: dfc33d3b84 2001-03-14 hobbs: 2001-03-14 Jeff Hobbs <[email protected]> dfc33d3b84 2001-03-14 hobbs: dfc33d3b84 2001-03-14 hobbs: * tls.c (Tls_Init): add do/while for random number initialization dfc33d3b84 2001-03-14 hobbs: to work around some OSes quirks. ([email protected]) dfc33d3b84 2001-03-14 hobbs: 44b2bc9c7a 2000-09-07 hobbs: 2000-09-07 Jeff Hobbs <[email protected]> 44b2bc9c7a 2000-09-07 hobbs: 44b2bc9c7a 2000-09-07 hobbs: * tlsIO.c (Tls_ChannelType): set typeName field of channel type to 44b2bc9c7a 2000-09-07 hobbs: "tls" (this got lost in move to dynamic version compatability 44b2bc9c7a 2000-09-07 hobbs: checking). 44b2bc9c7a 2000-09-07 hobbs: 9baaa78c49 2000-08-23 hobbs: 2000-08-23 Jeff Hobbs <[email protected]> 44b2bc9c7a 2000-09-07 hobbs: 44b2bc9c7a 2000-09-07 hobbs: TLS 1.4 RELEASED 63fc070abe 2000-08-23 hobbs: 63fc070abe 2000-08-23 hobbs: * Makefile.in (dist): create dist target for archive distributions 9baaa78c49 2000-08-23 hobbs: 9baaa78c49 2000-08-23 hobbs: * tests/tlsIO.test (tlsIO-8.1): added a delay on the accept close 9baaa78c49 2000-08-23 hobbs: to make the test work with OpenSSL on Windows (doesn't affect 9baaa78c49 2000-08-23 hobbs: other builds). 9baaa78c49 2000-08-23 hobbs: 9baaa78c49 2000-08-23 hobbs: * tls.htm: updated with notes for 1.4. 9baaa78c49 2000-08-23 hobbs: 204da759a0 2000-08-23 hobbs: 2000-08-21 Jeff Hobbs <[email protected]> 204da759a0 2000-08-23 hobbs: 204da759a0 2000-08-23 hobbs: * tests/tlsIO.test: require at least tls1.4 in test suite. 204da759a0 2000-08-23 hobbs: 4b5fd24dad 2000-08-18 hobbs: 2000-08-18 Jeff Hobbs <[email protected]> 4b5fd24dad 2000-08-18 hobbs: 4b5fd24dad 2000-08-18 hobbs: * tls.c (Tls_Init): added call to RAND_seed to seed the SSL random 4b5fd24dad 2000-08-18 hobbs: number generator. Without this, OpenSSL 0.9.5 chokes, and in any 4b5fd24dad 2000-08-18 hobbs: case it is a big security hole to do without it. 4b5fd24dad 2000-08-18 hobbs: 4b5fd24dad 2000-08-18 hobbs: * configure.in (OPENSSL): added NO_IDEA and NO_RC5 defines by 4b5fd24dad 2000-08-18 hobbs: default when compiling with OpenSSL. 4b5fd24dad 2000-08-18 hobbs: 4b5fd24dad 2000-08-18 hobbs: * tlsInt.h: added err.h include 4b5fd24dad 2000-08-18 hobbs: 4b5fd24dad 2000-08-18 hobbs: * tlsBIO.c: 4b5fd24dad 2000-08-18 hobbs: * tlsIO.c: corrected pedantic cast errors. 4b5fd24dad 2000-08-18 hobbs: 090741a97a 2000-08-16 hobbs: 2000-08-16 Jeff Hobbs <[email protected]> b46031d19e 2000-08-16 hobbs: b46031d19e 2000-08-16 hobbs: * tests/ciphers.test: improved ability to change constraint b46031d19e 2000-08-16 hobbs: setting for whether user compiled against RSA or OpenSSL libs. 090741a97a 2000-08-16 hobbs: 090741a97a 2000-08-16 hobbs: * tls.c (Tls_Init): corrected interpretation of version number 090741a97a 2000-08-16 hobbs: (patchlevel and release/serial were swapped). 090741a97a 2000-08-16 hobbs: 2f852e2ef6 2000-08-15 hobbs: 2000-08-15 Jeff Hobbs <[email protected]> e7ef654f47 2000-08-15 hobbs: e7ef654f47 2000-08-15 hobbs: * README.txt: added notes about need to use 8.2.0+. e7ef654f47 2000-08-15 hobbs: e7ef654f47 2000-08-15 hobbs: * tlsInt.h: e7ef654f47 2000-08-15 hobbs: * tls.c: e7ef654f47 2000-08-15 hobbs: * tlsIO.c: corrected structure initialization to work when e7ef654f47 2000-08-15 hobbs: compiling with 8.2. Now compiles with 8.2+ and tested to work e7ef654f47 2000-08-15 hobbs: with 8.2+ and dynamically adjust to the version of Tcl it was e7ef654f47 2000-08-15 hobbs: loaded into. TLS will fail the test suite with Tcl 8.2-8.3.1. e7ef654f47 2000-08-15 hobbs: e7ef654f47 2000-08-15 hobbs: * tests/all.tcl: added catch around ::tcltest::normalizePath e7ef654f47 2000-08-15 hobbs: because it doesn't exist in pre-8.3 tcltest. 2f852e2ef6 2000-08-15 hobbs: 2f852e2ef6 2000-08-15 hobbs: * tests/simpleClient.tcl: 2f852e2ef6 2000-08-15 hobbs: * tests/simpleServer.tcl: added simple client/server test scripts 2f852e2ef6 2000-08-15 hobbs: that use test certs and can do simple stress tests. 2f852e2ef6 2000-08-15 hobbs: 2b0ce3e01b 2000-08-14 hobbs: 2000-08-14 Jeff Hobbs <[email protected]> 33ea0b5a9d 2000-08-15 hobbs: 33ea0b5a9d 2000-08-15 hobbs: * tlsInt.h: 33ea0b5a9d 2000-08-15 hobbs: * tlsIO.c: 33ea0b5a9d 2000-08-15 hobbs: * tlsBIO.c: 33ea0b5a9d 2000-08-15 hobbs: * tls.c: changed around to only working with 8.2.0+ (8.3.2+ 33ea0b5a9d 2000-08-15 hobbs: preferred), with runtime checks for pre- and post-io-rewrite. 2b0ce3e01b 2000-08-14 hobbs: 2b0ce3e01b 2000-08-14 hobbs: * tls.c (Tls_Init): changed it to require 8.3.2 when Tcl_InitStubs 2b0ce3e01b 2000-08-14 hobbs: was called because we don't want people using TLS with the 2b0ce3e01b 2000-08-14 hobbs: original stacked channel implementation. 2b0ce3e01b 2000-08-14 hobbs: a636fa7c56 2000-07-27 hobbs: 2000-07-26 Jeff Hobbs <[email protected]> a636fa7c56 2000-07-27 hobbs: a636fa7c56 2000-07-27 hobbs: * merged all changes from tls-1-3-io-rewrite back into main branch a636fa7c56 2000-07-27 hobbs: a636fa7c56 2000-07-27 hobbs: * tests/tlsIO.test: updated comments, fixed a pcCrash case that a636fa7c56 2000-07-27 hobbs: was due to debug assertion in Windows SSL. a636fa7c56 2000-07-27 hobbs: a636fa7c56 2000-07-27 hobbs: * tls.c (ImportObjCmd): removed unnecessary use of 'bio' arg. a636fa7c56 2000-07-27 hobbs: (Tls_Init): check return value of SSL_library_init. Also lots of a636fa7c56 2000-07-27 hobbs: whitespace cleanup (more like Tcl Eng style guide), but not all a636fa7c56 2000-07-27 hobbs: code was cleaned up. a636fa7c56 2000-07-27 hobbs: a636fa7c56 2000-07-27 hobbs: * tlsBIO.c: minor whitespace cleanup a636fa7c56 2000-07-27 hobbs: a636fa7c56 2000-07-27 hobbs: * tlsIO.c: minor whitespace cleanup. a636fa7c56 2000-07-27 hobbs: (TlsInputProc, TlsOutputProc): Added ERR_clear_error before calls a636fa7c56 2000-07-27 hobbs: to BIO_read or BIO_write, because we could otherwise end up a636fa7c56 2000-07-27 hobbs: pulling an error off the stack that didn't belong to us. Also a636fa7c56 2000-07-27 hobbs: cleanup up excessive use of gotos. a636fa7c56 2000-07-27 hobbs: a636fa7c56 2000-07-27 hobbs: 2000-07-20 Jeff Hobbs <[email protected]> a636fa7c56 2000-07-27 hobbs: a636fa7c56 2000-07-27 hobbs: * tests/tlsIO.test: corrected various tests to be correct for TLS a636fa7c56 2000-07-27 hobbs: stacked channels (as opposed to the standard sockets the test a636fa7c56 2000-07-27 hobbs: suite was adopted from). Key differences are that TLS cannot a636fa7c56 2000-07-27 hobbs: operate in one process without all channels being non-blocking, or a636fa7c56 2000-07-27 hobbs: the handshake will block, and handshaking must be forced in some a636fa7c56 2000-07-27 hobbs: cases. Also, handshakes don't seem to complete unless the client a636fa7c56 2000-07-27 hobbs: has placed at least one byte for the server to read in the channel. a636fa7c56 2000-07-27 hobbs: a636fa7c56 2000-07-27 hobbs: * tests/remote.tcl: corrected the finding of tests certificates a636fa7c56 2000-07-27 hobbs: a636fa7c56 2000-07-27 hobbs: * tlsIO.c (TlsCloseProc): removed deleting of timer handler as a636fa7c56 2000-07-27 hobbs: that is handled by Tls_Clean. a636fa7c56 2000-07-27 hobbs: a636fa7c56 2000-07-27 hobbs: * tls.tcl (tls::_accept): corrected the internal _accept to a636fa7c56 2000-07-27 hobbs: trickle callback errors to the user. a636fa7c56 2000-07-27 hobbs: a636fa7c56 2000-07-27 hobbs: * Makefile.in: made the install-binaries target regenerate the a636fa7c56 2000-07-27 hobbs: pkgIndex.tcl correctly. The test target probably shouldn't screw a636fa7c56 2000-07-27 hobbs: it up, but this is to be on the safe side. a636fa7c56 2000-07-27 hobbs: a636fa7c56 2000-07-27 hobbs: 2000-07-17 Jeff Hobbs <[email protected]> a636fa7c56 2000-07-27 hobbs: a636fa7c56 2000-07-27 hobbs: * pkgIndex.tcl.in: a636fa7c56 2000-07-27 hobbs: * configure.in: updated version to 1.4 a636fa7c56 2000-07-27 hobbs: a636fa7c56 2000-07-27 hobbs: 2000-07-13 Jeff Hobbs <[email protected]> a636fa7c56 2000-07-27 hobbs: a636fa7c56 2000-07-27 hobbs: * tests/tlsIO.test: enabled tests 2.10, 7.[1245] (there is no 3), a636fa7c56 2000-07-27 hobbs: which now pass. Added some comments to other failing tests. a636fa7c56 2000-07-27 hobbs: a636fa7c56 2000-07-27 hobbs: 2000-07-11 Jeff Hobbs <[email protected]> a636fa7c56 2000-07-27 hobbs: a636fa7c56 2000-07-27 hobbs: * tlsIO.c: changed all the channel procs to start with Tls* for a636fa7c56 2000-07-27 hobbs: better parity when comparing with Transform channel procs. a636fa7c56 2000-07-27 hobbs: Rewrote TlsWatchProc, added TlsNotifyProc according to the new a636fa7c56 2000-07-27 hobbs: channel design, which also leaves TlsChannelHandler unused. a636fa7c56 2000-07-27 hobbs: a636fa7c56 2000-07-27 hobbs: * tlsBIO.c (BioCtrl): changed BIO_CTRL_FLUSH case to use a636fa7c56 2000-07-27 hobbs: Tcl_WriteRaw instead of Tcl_Flush (to operate on correct channel a636fa7c56 2000-07-27 hobbs: in the stack instead of starting at the top again). Would a636fa7c56 2000-07-27 hobbs: otherwise cause a recursive stack bomb when implicit handshaking a636fa7c56 2000-07-27 hobbs: took effect. a636fa7c56 2000-07-27 hobbs: a636fa7c56 2000-07-27 hobbs: * tests/tlsIO.test: removed changes made to test suite (all tests a636fa7c56 2000-07-27 hobbs: that ran before now pass correctly), and changed some accept proc a636fa7c56 2000-07-27 hobbs: args to reflect that a sock is an arg, not a file. a636fa7c56 2000-07-27 hobbs: a636fa7c56 2000-07-27 hobbs: 2000-07-10 Jeff Hobbs <[email protected]> a636fa7c56 2000-07-27 hobbs: a636fa7c56 2000-07-27 hobbs: * tlsBIO.c (BioWrite, BioRead): changed Tcl_Read/Write to a636fa7c56 2000-07-27 hobbs: Tcl_ReadRaw/TclWriteRaw. a636fa7c56 2000-07-27 hobbs: a636fa7c56 2000-07-27 hobbs: * tls.c: added use of Tcl_GetTopChannel after Tcl_GetChannel and a636fa7c56 2000-07-27 hobbs: got return value from Tcl_StackChannel. a636fa7c56 2000-07-27 hobbs: a636fa7c56 2000-07-27 hobbs: * tests/tlsIO.test: added some handshaking that shouldn't be a636fa7c56 2000-07-27 hobbs: necessary, but we crash otherwise (needs more testing). a636fa7c56 2000-07-27 hobbs: a636fa7c56 2000-07-27 hobbs: * tlsIO.c: added support for "corrected" stacked channels. All a636fa7c56 2000-07-27 hobbs: the above channels are in TCL_CHANNEL_VERSION_2 #ifdefs. a636fa7c56 2000-07-27 hobbs: a80f56532a 2000-06-06 stanton: 2000-06-05 Scott Stanton <[email protected]> 30c21e2028 2000-06-06 stanton: 30c21e2028 2000-06-06 stanton: * Makefile.in: Fixed broken test target. a80f56532a 2000-06-06 stanton: a80f56532a 2000-06-06 stanton: * tlsInt.h: a80f56532a 2000-06-06 stanton: * tls.c: Cleaned up declarations of Tls_Clean to avoid errors on a80f56532a 2000-06-06 stanton: Windows (lint). a80f56532a 2000-06-06 stanton: b3abc0c1c4 2000-06-05 welch: 2000-06-05 Brent Welch <[email protected]> b3abc0c1c4 2000-06-05 welch: b3abc0c1c4 2000-06-05 welch: * tls.c, tlsIO.c: Split Tls_Free into Tls_Clean, which does b3abc0c1c4 2000-06-05 welch: the SSL cleanup, and the Tcl_Free call. It is important to shutdown b3abc0c1c4 2000-06-05 welch: the SSL state "synchronously" during a stacked flush. b3abc0c1c4 2000-06-05 welch: 0d55961d2f 2000-06-01 stanton: 2000-06-01 Scott Stanton <[email protected]> 0d55961d2f 2000-06-01 stanton: 0d55961d2f 2000-06-01 stanton: * tlsIO.c: Restored call to Tcl_NotifyChannel from ChannelHandler 0d55961d2f 2000-06-01 stanton: to ensure that events propagate from the lower driver. This may 0d55961d2f 2000-06-01 stanton: result in an infinite loop in some cases, so this is not a total 0d55961d2f 2000-06-01 stanton: fix. This may be sufficient for now, however. [Bug: 5623] 0d55961d2f 2000-06-01 stanton: a16da7868e 2000-06-01 stanton: 2000-06-01 Scott Stanton <[email protected]> a16da7868e 2000-06-01 stanton: a16da7868e 2000-06-01 stanton: * tlsIO.c: Restore the previous version. Fixed the CloseProc so a16da7868e 2000-06-01 stanton: it unregisters the channel handler on the superceded channel a16da7868e 2000-06-01 stanton: instead of the upper channel. Also removed the call to a16da7868e 2000-06-01 stanton: Tcl_NotifyChannel in the ChannelHandler because this will result a16da7868e 2000-06-01 stanton: in an infinite loop if data is ever buffered in the BIO a16da7868e 2000-06-01 stanton: structure. [Bug: 5623] a16da7868e 2000-06-01 stanton: b29663e789 2000-05-31 welch: 2000-05-31 Brent Welch <[email protected]> b29663e789 2000-05-31 welch: b29663e789 2000-05-31 welch: * tls.c: Change the ChannelHandler to be registered on the main b29663e789 2000-05-31 welch: channel as oppsed to the "parent", or superceeded, channel. This a16da7868e 2000-06-01 stanton: is because the socket driver notifies the main channel, and there a16da7868e 2000-06-01 stanton: are times with the main channel gets closed, but the superceded a16da7868e 2000-06-01 stanton: one is not yet closed. If the channel handler gets triggered in a16da7868e 2000-06-01 stanton: this half-open state it is associated with the superceeded a16da7868e 2000-06-01 stanton: channedl, but uses its private pointer to the main channel, which a16da7868e 2000-06-01 stanton: is mostly destroyed. Eliminated the redundant call to a16da7868e 2000-06-01 stanton: Tcl_NotifyChannel from TlsWatchProc. [Bug: 5623]