- 02 Feb, 2019 1 commit
-
-
Nathaniel Wesley Filardo authored
Purge the never-functional :dns() method, but document the DNS callback in :on(). Fixes #2640
-
- 15 Jan, 2019 1 commit
-
-
Nathaniel Wesley Filardo authored
* Update TLS protocol support TLS1.0 is past PCI's EOL; BEAST is no more Enable elliptic curve key exchanges Do not enable the smallest ECs for security Do not enable the largest ECs for computational time Do not enable 25519 (sad) because it doesn't go across the wire Drop non-PFS key exchanges Drop ARC4, Blowfish, DES, genprime, XTEA code Drop renegotiation support completely It takes so much heap that it's not likely to work out well Tidy handling of SSL_BUFFER_SIZE Update docs Drop mention of startcom, since they are no more, for letsencrypt * Update mbedtls to 2.7.7 Preserve our vsnprintf and platform hacks * Introduce TLS maximum fragment size knob Reduce buffer size to 4Ki by default and advertize that. That's the largest we can advertize with the TLS MFL extension, so there's no point in making them larger. The truly adventurous can re-raise SSL_BUFFER_SIZE and undefine the SSL_MAX_FRAGMENT_LENGTH_CODE and get back to the earlier behavior. * Default to mbedTLS debug with DEVELOP_VERSION
-
- 13 Jan, 2019 1 commit
-
-
Marcel Stör authored
Drop support for localized content, #2213 Restructure some content to match more closely what we have in master, #2542
-
- 03 Mar, 2018 1 commit
-
-
Nathaniel Wesley Filardo authored
* mbedtls 2.7.0 (mbedtls-2.7.0-0-g32605dc8) Wholesale import, with a few changes from earlier preserved through. Ideally we would soon get to the point of having no divergences from upstream. * tls: add function to adjust mbedTLS debug level
-
- 09 Mar, 2017 1 commit
-
-
Marcel Stör authored
-
- 21 Jan, 2017 1 commit
-
-
Marcel Stör authored
-
- 31 Dec, 2016 2 commits
-
-
Marcel Stör authored
-
Yury Popov authored
* Rewrite net.dns.resolve on LWIP * Move IGMP (net multicast) to LWIP * Cleanup net module * Move secure connection operations to tls module * Net module on LWIP * Server timeout parameter * TCP hold * Fixes in documentation * Documentation fixes * Note TLS module depends on net * Add TLS module to user_modules.h * Callback on connect event * Fix depends net module on tls module * Fix unhold exponential time issue
-