History log of /trafficserver/iocore/net/SSLNetVConnection.cc (Results 1 - 25 of 486)
Revision (<<< Hide revision tags) (Show revision tags >>>) Date Author Comments
# c32fc645 01-Jul-2020 Susan Hinrichs

Fix support for openssl async engine (#6910)


# 32cb4fe2 24-Jun-2020 Randall Meyer

Move to blocklists and allowlists (#6941)

NOTE: This is backwards compatibility breaking.

proxy.config.http.proxy_protocol_whitelist renamed to proxy.config.http.proxy_protocol_allo

Move to blocklists and allowlists (#6941)

NOTE: This is backwards compatibility breaking.

proxy.config.http.proxy_protocol_whitelist renamed to proxy.config.http.proxy_protocol_allowlist

show more ...


# c7e80542 22-Jun-2020 Sudheer Vinukonda

Prevent stale netvc access on SSL Callbacks (#6925)

Since SSL Callbacks are asynchronous in nature, it's possible the
associated NetVC is already freed causing a potential use-after-free

Prevent stale netvc access on SSL Callbacks (#6925)

Since SSL Callbacks are asynchronous in nature, it's possible the
associated NetVC is already freed causing a potential use-after-free
problem.

show more ...


Revision tags: 8.0.8, 7.1.11
# fcbcd73f 18-Jun-2020 Randall Meyer

Removes SSLNetVConnection::sslContextSet

This was introduced in 044da6999442449434b282d8b537d8858505bbfc but was
never used


# 16fb8092 04-May-2020 Masakazu Kitajo

Generalize callbacks for TLS session resumption

Callback functions for session resumption were not usable with QUICNetVC because
those expect that Session Resumption is used only on SSLN

Generalize callbacks for TLS session resumption

Callback functions for session resumption were not usable with QUICNetVC because
those expect that Session Resumption is used only on SSLNetVC.

This commit introduces TLSSessionResumptionSupport that helps supporting Session
Resumption and provides generalized interface to remove the direct dependency
for SSLNetVC.

Also, by ensuring a pointer stored in SSL application specific data is always
TLSSessionResumptionSupport, it removes a use of dynamic_cast.

show more ...


Revision tags: 8.0.7, 7.1.10, 7.1.9
# 64e44402 26-Feb-2020 Susan Hinrichs

Move TestClientAction to SNIConfig class


Revision tags: 7.1.9-rc1, 8.0.6, 7.1.9-rc0, 8.0.6-rc0
# 225845dc 22-Nov-2019 Susan Hinrichs

Add mechanism to enforce SNI policy


# 63018c11 19-Feb-2020 Bryan Call

SSLNetVConnection, fixed/removed assert when running debug build


# 8236813e 14-Jan-2020 Fei Deng

TLSv1.3 0-RTT support (#5450)

* TLSv1.3 0-RTT support
TLSv1.3 0-RTT test
TLSv1.3 0-RTT anti-replay
TLSv1.3 0-RTT h2


# 770f9d4f 04-Dec-2019 Walter Karas

Copy the Client SNI Server Name out of the openssl SSL object and ensure it is null-terminated.


# d22de244 01-Nov-2019 Sudheer Vinukonda

Add Metrics to track SSL Handshake attempts

Remove debug logs


# 48771056 22-Oct-2019 xinli1

set host name in TLS extension for SNI Host check in service side with sni policy verify_with_name_source.

fix build error in autest

update document

fix wrong comment


# 75725612 27-Sep-2019 Valentin Gutierrez

Cache SSL EC explicitly


# f0d82b7d 05-Sep-2019 Fei Deng

weak mutex macros


# acf2fb75 13-Sep-2019 Valentin Gutierrez

Perform a SSL quiet shutdown when close-notify is not sent


Revision tags: 8.0.5, 7.1.8
# 4cfd5a73 15-Aug-2019 Bryan Call

Ran make clang-tidy


Revision tags: 8.0.4, 7.1.7
# 9c09dbc1 13-Aug-2019 Masakazu Kitajo

HTTP/2 rate limiting


# 54836833 07-Aug-2019 Susan Hinrichs

Refactor the alpn/npn handling into common ALPNSupport class


# cbbdd53c 02-Aug-2019 Susan Hinrichs

Adjust SNI alpn support


# d359ccd6 05-Aug-2019 Susan Hinrichs

Remove ssl_error stats that aren't really errors.


# a5577e20 24-Jul-2019 Masaori Koshiba

Cleanup debug logs around SSLWriteBuffer


# ab259056 25-Jul-2019 Masaori Koshiba

Remove unnecesary function name on debug logs in SSLNetVConnection


# 42b7694c 20-Jun-2019 Sudheer Vinukonda

Fix build error for pre openssl-1.1.1


# cac7766f 20-Jun-2019 Sudheer Vinukonda

Use SSL_version() directly instead of SSL_get_version() which returns a string
(Thanks @maskit for the pointer).


# 59b02bae 18-Jun-2019 Sudheer Vinukonda

Add metrics to track SSLv3 and TLS versions


12345678910>>...20