summaryrefslogtreecommitdiffstats
path: root/tdeio/kssl
Commit message (Collapse)AuthorAgeFilesLines
* Fix remaining brandings in tdelibs and adopt to modern age.Chris2019-07-211-1/+1
| | | | | Signed-off-by: Chris <[email protected]> (cherry picked from commit 0e071064b91e64638e14f3756d477f9e2fd3317e)
* Added some checks in KSSL (in TDEIO) to correctly recognize LibreSSL (which ↵Mavridis Philippe2019-05-102-3/+4
| | | | | | | | | is a fork of OpenSSL 1.0.1b) This resolves issue #28. Signed-off-by: Mavridis Philippe <[email protected]> (cherry picked from commit 86fea6f5c542ba7113dbc598d8b4c18be69901f2)
* Use system libdir when searching for dynamically loaded libraries.Slávek Banko2019-02-271-33/+8
| | | | | | | This prevents finding an incorrect architecture on multi-arch systems. Signed-off-by: Slávek Banko <[email protected]> (cherry picked from commit 8a859540c3cb306844288144a06028dc302408d6)
* Fix SSL initialization for OpenSSL >= 1.1.Slávek Banko2019-02-211-2/+24
| | | | | Signed-off-by: Slávek Banko <[email protected]> (cherry picked from commit 43609c8a21144b56a53d53757639fc6c6298c10d)
* KSSL: Set hostname in TLSext to enable SNI supportSlávek Banko2017-04-091-0/+6
| | | | | Signed-off-by: Slávek Banko <[email protected]> (cherry picked from commit 45cf7d13eb68be0fd469fd49275c000a2c7bcc2f)
* KSSL: Use TLS_client_method instead of TLSv1_client_methodSlávek Banko2017-04-091-7/+9
| | | | | | | | This enables TLS protocols newer than v1.0 This resolves bug 2764 Signed-off-by: Slávek Banko <[email protected]> (cherry picked from commit adb9d9d2b0bfbb0f856673e663aad7c4a63020eb)
* Added support for OpenSSL 1.1Slávek Banko2017-01-0112-362/+975
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Some KOpenSSLProxy methods have been renamed to be consistent with OpenSSL 1.1 API names and to prevent hidden API changes. To ensure API / ABI compatibility, the original methods are still included but have been marked as deprecated. + SSLv23_client_method => TLS_client_method + X509_STORE_CTX_set_chain => X509_STORE_CTX_set0_untrusted + sk_dup => OPENSSL_sk_dup + sk_free => OPENSSL_sk_free + sk_new => OPENSSL_sk_new + sk_num => OPENSSL_sk_num + sk_pop => OPENSSL_sk_pop + sk_push => OPENSSL_sk_push + sk_value => OPENSSL_sk_value Additional methods have been added to KOpenSSLProxy to support the new OpenSSL 1.1 API functions that provide access to the (now) opaque SSL structures. Compatibility with OpenSSL < 1.1 is handled internally in KOpenSSLProxy. + BIO_get_data + DSA_get0_key + DSA_get0_pqg + EVP_PKEY_base_id + EVP_PKEY_get0_DSA + EVP_PKEY_get0_RSA + RSA_get0_key + X509_CRL_get0_lastUpdate + X509_CRL_get0_nextUpdate + X509_OBJECT_get0_X509 + X509_OBJECT_get_type + X509_STORE_CTX_get_current_cert + X509_STORE_CTX_get_error + X509_STORE_CTX_get_error_depth + X509_STORE_CTX_set_error + X509_STORE_get0_objects + X509_STORE_set_verify_cb + X509_get0_signature + X509_getm_notAfter + X509_getm_notBefore + X509_subject_name_cmp + _SSL_session_reused + _SSL_set_options Method "KSSL::setSession" has been renamed to "KSSL::takeSession" and its functionality has changed: the session is now transferred from the argument object to the invoked object. Since it is only used internally in TDE and the functionality is different, the method with the previous name has not been preserved. Signed-off-by: Slávek Banko <[email protected]> Signed-off-by: Michele Calgaro <[email protected]> (cherry picked from commit e1861cb6811f7bac405ece204407ca46c000a453)
* Fix crash on KSSLCertificate deallocation when a CRL is held in the ↵Timothy Pearson2017-01-011-0/+2
| | | | | | KSSLCertificate object (cherry picked from commit 62a597d75224844be9a98952a586fc5c0406561e)
* Fix memory leak when deleting a KSSLCertificate that holds a CRLTimothy Pearson2017-01-013-1/+17
| | | | (cherry picked from commit 9bf244dd97e89bf47dd70fe47a4f00a3f372f875)
* Add initial CRL support to KSSLCertificateTimothy Pearson2017-01-014-4/+88
| | | | (cherry picked from commit 5896a404bcc63085cf0a50d232d2d631a5107228)
* Parse GENERALIZEDTIME ASN structuresTimothy Pearson2016-09-081-12/+21
| | | | | | This fixes certificate dates beyond year 2049. (cherry picked from commit 07dbb3b5c92ed22f71123eb84806d55f9962c60b)
* Check if SSL symbols exist before attempting to load themTimothy Pearson2013-11-101-171/+174
| | | | This relates to Bug 1655
* Rename KWallet to TDEWalletTimothy Pearson2013-08-271-2/+2
|
* Fix security issue when displaying certificate informations (CVE-2011-3365)Francois Andriot2013-06-011-6/+15
|
* Rename additional header files to avoid conflicts with KDE4Timothy Pearson2013-02-1510-18/+18
|
* Rename common header files for consistency with class renamingTimothy Pearson2013-02-143-3/+3
|
* Rename KLocale to enhance compatibility with KDE4Timothy Pearson2013-02-011-2/+2
|
* Rename KStandard for enhanced compatibility with KDE4Timothy Pearson2013-01-313-4/+4
|
* Rename a number of libraries and executables to avoid conflicts with KDE4Timothy Pearson2013-01-27126-0/+17878
generated by cgit v1.2.1 (git 2.18.0) at 2024-12-30 22:28:39 +0000