Sean Cunningham
eb99083d0b
tls: add client-side session resumption support
2011-09-07 20:01:14 +02:00
koichik
28a908471d
crypto: Fix BIO's usage.
...
Fixes #1612 .
Fixes #1296 .
2011-09-03 00:53:47 +09:00
Ben Noordhuis
5ded5e274f
crypto: use X509_get_ext_by_NID(NID_subject_alt_name)
2011-09-03 00:49:37 +09:00
Niclas Hoyer
7b2536a1a2
Added additional properties to getPeerCertificate, now includes subjectAltName, Exponent and Modulus (FOAF+SSL friendly).
...
Patch written by Nathan,
http://groups.google.com/group/nodejs/browse_thread/thread/1d42da4cb2e51536
2011-09-03 00:49:37 +09:00
Ryan Dahl
84cf0c5280
crypto: set data before sending to thread pool
...
fixes test-crypto
2011-08-31 16:11:08 -07:00
Ryan Dahl
21cc4c4985
Upgrade libuv to ea4271f
...
Required adding uv_default_loop() in many places.
2011-08-31 01:53:30 -07:00
koichik
6f60683802
tls: x509 certificate subject parsing fail
...
Fixes #1568 .
2011-08-31 03:47:23 +09:00
Igor Zinkovsky
bce41fac94
Use new uv_fs_ apis
...
This will cause master to be unstable for a while as we replace existing eio
calls with uv_fs calls.
2011-08-30 01:36:10 -07:00
Peter Bright
0110c90382
Upgrade to 0.9.8r.
...
Build in Win32.
2011-08-22 11:30:47 -07:00
Bert Belder
9728723508
node_crypto: interface with libuv, not libev
2011-08-15 02:30:35 +02:00
Glen Low
04122ad2d3
crypto: PBKDF2 function from OpenSSL
2011-08-12 16:23:11 +02:00
Tom Hughes
94db871ecf
crypto: fix incorrect ssl shutdown check
2011-08-09 23:54:49 +02:00
Fedor Indutny
9010f5fbab
Add support for TLS SNI
...
Fixes #1411
2011-07-29 16:57:28 -07:00
SAWADA Tadashi
d3a84bea7b
Fix crypto encryption/decryption with Base64.
...
Fixes #738 .
Fixes #1205 .
2011-07-27 00:19:02 +02:00
Stefan Bühler
db993956d6
Fix crypto hmac to accept binary keys + add test cases from rfc 2202 and 4231
...
Fixes #324 .
Fixes #1027 .
Instead of converting buffers to strings and back again to char array
directly use the buffer data in hmac_init (same as in hmac_update).
2011-07-24 19:48:18 +09:00
Ben Noordhuis
6f0740e67b
crypto: check for SSL_COMP_get_compression_methods()
...
Function was named SSL_COMP_get_compression_method() (singular)
in OpenSSL 0.9.7 and older.
Fixes #1242 .
2011-07-20 22:24:11 +02:00
Ryan Dahl
23b8931b62
Merge branch 'v0.4'
...
Conflicts:
src/node.js
src/node_version.h
2011-06-29 14:50:03 +02:00
Mark Cavage
7c51275bce
Cleanup crypto verify to not print unnecessary errors
2011-06-15 20:02:21 +02:00
Ryan Dahl
3d7d994ffc
Merge branch 'v0.4'
...
Conflicts:
doc/api/modules.markdown
test/simple/test-crypto.js
2011-06-15 14:43:37 +02:00
Mark Cavage
88552c51ae
Support for signature verification with RSA/DSA public keys
...
Fixes #1166 .
2011-06-14 12:50:00 +02:00
Ryan Dahl
b6a742d76f
Merge branch 'v0.4'
2011-06-03 16:37:56 +02:00
Ryan Dahl
1d7a46a588
Disabling SSL compression is dependent on OpenSSL version 0.9.8
...
Fixes #1087 .
2011-06-03 14:50:02 +02:00
Jérémy Lal
f23c45f7f4
Option to disable SSL v2
...
Fixes #880
2011-06-03 08:37:28 +02:00
Ben Noordhuis
eb4c9ed881
Fix resource leaks in node_crypto.cc
...
Fixes #1097 .
2011-05-24 23:36:54 -07:00
Ryan Dahl
85bc8d02fa
Merge branch 'v0.4'
...
Conflicts:
src/node_crypto.cc
2011-05-16 19:29:02 -07:00
Ryan Dahl
e83c6959db
Disable compression with OpenSSL.
...
This improves memory and speed. Users may apply compression in "userland"
above the CryptoStream layer if they desire.
2011-05-16 10:33:19 -07:00
Håvard Stranden
9f0b1a9bc6
Add Diffie-Hellman support to crypto module
...
Fixes #573
2011-05-06 14:36:04 -07:00
Fedor Indutny
c9b40da368
OpenSSL NPN in node.js
...
closes #926 .
2011-04-19 11:32:26 -07:00
Theo Schlossnagle
2a88dd3bc1
TLS: Add secureOptions flag
...
Also, secureOptions flag was added (and passed through) and allows
the context to have all supported SSL_OP_* set via createCredentials.
All SSL_OP_ flags (outside of ALL) have been added to constants.
2011-04-13 18:25:33 -07:00
Ryan Dahl
a7254f3df9
Revert "Disable compression with OpenSSL."
...
This reverts commit 362785f704 .
2011-04-01 12:38:42 -07:00
Ryan Dahl
362785f704
Disable compression with OpenSSL.
...
This improves memory and speed. Users may apply compression in "userland"
above the CryptoStream layer if they desire.
2011-04-01 09:49:25 -07:00
Ryan Dahl
5c35dff419
Don't load root certs for each SSL context
2011-03-31 23:40:19 -07:00
Ryan Dahl
55048cdf79
Update copyright headers
2011-03-14 17:37:05 -07:00
Felix Geisendörfer
9d4c5a12f4
Crypto update should only accept strings / buffers
...
I have seen a lot of people trying to pass objects to crypto's update
functions, assuming that it would somehow serialize the object before
hashing.
In reality, the object was converted to '[object Object]' which was
then hashed, without any error message showing.
This patch modifies the DecodeBytes function (used exclusively by
crypto at this point) to complain when receiving anything but a
string or buffer.
Overall this should be a less-suprising, more robust behavior.
2011-03-14 13:16:31 -07:00
Theo Schlossnagle
2a61e1cd49
without this the server will not advertise support for client certs
...
Closes GH-774.
2011-03-11 16:14:39 -08:00
Theo Schlossnagle
01a864a29d
TLS: CRL support
...
Needs more tests.
2011-02-10 00:49:15 -08:00
Ryan Dahl
8cd07bb273
TLS: handle cert chains
2011-02-09 17:51:05 -08:00
Ryan Dahl
56ab929c55
Remove unused parameter from crypto::Handle*Error
2011-02-09 01:30:31 -08:00
Ryan Dahl
519dc2c114
tls: split bio errors from ssl errors
2011-02-08 21:15:55 -08:00
Ryan Dahl
448e0f4394
tls fixes
2011-02-07 21:11:43 -08:00
Ryan Dahl
807fca6803
TLS: Set ssl.receivedShutdown after each read
...
Closes GH-613.
2011-02-01 14:40:17 -08:00
Ryan Dahl
2ff593ad23
TLS: better error reporting at binding layer
...
Closes GH-612.
2011-02-01 14:14:50 -08:00
Greg Hughes
1a5e513084
Fix style issues with ext_key_usage patch
...
Closes GH-586.
2011-01-27 16:16:22 -08:00
Greg Hughes
6c32e155d3
Add ext_key_usage to getPeerCertificate
2011-01-27 14:06:40 -08:00
Tom Hughes
54b1f8028a
Free (ref-counted) private key.
2010-12-24 23:50:33 -08:00
Tom Hughes
b38f4712c4
Fix memory leak in node_crypto.cc.
...
Both HexDecode and unbase64 allocate buffers, which weren't being freed.
2010-12-22 10:32:20 -08:00
Ryan Dahl
e3d1808ef0
Rename node::SecureStream to node::crypto::Connection
...
node::SecureStream is definitely not a "stream" in the Node sense. Renaming
it to avoid ambiguity. (Adding namespace to not confuse with some other
Connection object.)
2010-12-11 02:13:29 -08:00
Ryan Dahl
70baeba8a9
Add receivedShutdown() binding
2010-12-10 22:09:46 -08:00
Ryan Dahl
dac4d486ec
Accept Buffers as well as strings for addCert, addKey
2010-12-08 13:21:50 -08:00
Ryan Dahl
6bc9b2ef92
clients without certs are unauthed.
2010-12-07 16:51:23 -08:00