Zhi Guan
|
808d22e2a5
|
Refactor TLS
|
2026-06-14 23:04:39 +08:00 |
|
Zhi Guan
|
5c67b5963d
|
Clean code
|
2026-06-14 15:11:06 +08:00 |
|
Zhi Guan
|
ec5705ae29
|
Update TLS crypto
|
2026-06-14 10:15:05 +08:00 |
|
Zhi Guan
|
545e6a56f0
|
Add CCM cipher suites
|
2026-06-14 00:12:10 +08:00 |
|
Zhi Guan
|
5d12858d41
|
Clean TLS code
|
2026-06-13 23:52:29 +08:00 |
|
Zhi Guan
|
23375d1fa3
|
Unify connection established print
|
2026-06-13 09:10:09 +08:00 |
|
Zhi Guan
|
2c6ea95cec
|
Fix TLS 1.3 middlebox
|
2026-06-12 17:03:49 +08:00 |
|
Zhi Guan
|
c56d7edfab
|
Update TLS -verbose options
|
2026-06-12 14:23:56 +08:00 |
|
Zhi Guan
|
8b586d4299
|
Update TLS/TLCP shutdown
|
2026-06-12 14:09:42 +08:00 |
|
Zhi Guan
|
6f42fdf31f
|
Update TLS state machine
|
2026-06-12 13:28:10 +08:00 |
|
Zhi Guan
|
fb93fba5ff
|
Clean TLS_CTX/CONNECT
|
2026-06-12 12:01:30 +08:00 |
|
Zhi Guan
|
30bc6a2a4c
|
Update TLS commands
|
2026-06-12 10:55:29 +08:00 |
|
Zhi Guan
|
dbbee6dbe0
|
Add trusted_ca_keys to TLS1.2/TLCP
|
2026-06-12 10:24:32 +08:00 |
|
Zhi Guan
|
d4be17a01f
|
Update TLCP ServerKeyExchange
|
2026-06-12 09:40:35 +08:00 |
|
Zhi Guan
|
f37938991c
|
Move TLS1.2/TLCP common functions to tls.c
|
2026-06-12 09:24:27 +08:00 |
|
Zhi Guan
|
8a90eb9c91
|
Update TLCP to support SNI
|
2026-06-12 09:08:49 +08:00 |
|
Zhi Guan
|
d999e8879c
|
Update TLS 1.2 GCM
|
2026-06-11 23:53:42 +08:00 |
|
Zhi Guan
|
0c974eaa25
|
Add renegotiation_info and SCSV support
|
2026-06-11 23:46:16 +08:00 |
|
Zhi Guan
|
6ff18acae3
|
Add GCM cipher suite to TLS 1.2
|
2026-06-11 23:19:48 +08:00 |
|
Zhi Guan
|
40e00284a2
|
Fix tls.c
|
2026-06-11 21:03:14 +08:00 |
|
Zhi Guan
|
c534f58e7e
|
Update TLS 1.2 to support ec_point_formats
|
2026-06-11 20:39:54 +08:00 |
|
Zhi Guan
|
b48f2c3772
|
Update TLS SCT
|
2026-06-10 23:44:31 +08:00 |
|
Zhi Guan
|
dbe0251872
|
Add ALPN extension
|
2026-06-06 15:45:07 +08:00 |
|
Zhi Guan
|
1b8a57c4da
|
Update TLS12
|
2026-05-29 22:17:09 +08:00 |
|
Zhi Guan
|
093faec214
|
Update TLS1.2
|
2026-05-29 11:04:08 +08:00 |
|
Zhi Guan
|
3af0fe9ce5
|
Update TLCP
|
2026-05-28 10:05:09 +08:00 |
|
Zhi Guan
|
dbc529f547
|
Fix KeyUpdate bug
|
2026-05-27 16:26:00 +08:00 |
|
Zhi Guan
|
931c5e39e8
|
Update TLS 1.3
|
2026-05-26 21:50:13 +08:00 |
|
Zhi Guan
|
828a93e907
|
Update TLS 1.3 HelloRetryRequest, add CipherCipherSpec
Use same handshake type of ServerHello, add ChangeCipherSpec, compatible with OpeNSSL
|
2026-05-24 20:17:43 +08:00 |
|
Zhi Guan
|
0960694bab
|
Update TLS 1.3 Key Schedule
|
2026-05-19 12:37:20 +08:00 |
|
Zhi Guan
|
290d699336
|
Update TLS 1.3
KeyUpdate passed.
|
2026-05-17 11:44:43 +08:00 |
|
Zhi Guan
|
bb94f96fcd
|
Update TLS 1.3
CertificateVerify passed
|
2026-05-10 15:56:35 +08:00 |
|
Zhi Guan
|
2c72cf84b3
|
Update TLS 1.3
All tls13_server examples passed.
|
2026-05-09 13:17:36 +08:00 |
|
Zhi Guan
|
c23e117537
|
Update TLS 1.3
Full handshake is ok
|
2026-04-30 11:23:49 +08:00 |
|
Zhi Guan
|
b548e98d34
|
Update TLS 1.3
|
2026-04-28 11:50:15 +08:00 |
|
Zhi Guan
|
34698ddc6f
|
Update TLS 1.3
|
2026-04-21 11:18:25 +08:00 |
|
Zhi Guan
|
0bcffd3734
|
Update TLS 1.3
|
2026-04-13 11:34:16 +08:00 |
|
Zhi Guan
|
2e550edc35
|
Update TLS 1.3
|
2026-04-12 11:48:15 +08:00 |
|
Zhi Guan
|
3d29d5066d
|
Update TLS 1.3 PSK-only mode
|
2026-03-28 11:09:26 +08:00 |
|
Zhi Guan
|
e996e72537
|
Update TLS 1.3 0-RTT
|
2026-03-23 20:50:55 +08:00 |
|
Zhi Guan
|
5efe2005d4
|
Update TLS 1.3 PSK 1-RTT
|
2026-03-23 10:32:16 +08:00 |
|
Zhi Guan
|
0d1acec6df
|
Update TLS 1.3 handshake
Working on HelloRetryRequest, NewSessionTicket
|
2026-03-21 18:41:46 +08:00 |
|
Zhi Guan
|
ead4caecb7
|
Update TLS 1.3 state machine
|
2026-03-17 16:51:12 +08:00 |
|
Zhi Guan
|
3322a5fc7b
|
Update TLS 1.3
|
2026-02-27 11:02:22 +08:00 |
|
Zhi Guan
|
ee2fa409f2
|
Update TLCP to state machine
|
2026-02-27 09:11:49 +08:00 |
|
Zhi Guan
|
9c58806408
|
Rewrite TLS 1.2 as a state machine
|
2026-02-01 20:38:13 +08:00 |
|
Zhi Guan
|
a15e0f34c7
|
Add ECDSA with curve P-256
for TLS testing
|
2026-01-24 12:27:12 +08:00 |
|
Daniel Roethlisberger
|
061045f206
|
Fix SSL 2 version constant to 0x0002
SSL 2 uses a version field of 0x0002, not 0x0200. This is confirmed not
only in the original Netscape spec [1] and RFC draft of the time [2],
but also in major implementations such as OpenSSL [3] and Wireshark [4].
[1] https://www-archive.mozilla.org/projects/security/pki/nss/ssl/draft02.html
[2] https://datatracker.ietf.org/doc/html/draft-hickman-netscape-ssl-00
[3] https://github.com/openssl/openssl/blob/OpenSSL_0_9_6m/ssl/ssl2.h#L66-L71
[4] https://github.com/wireshark/wireshark/blob/release-4.4/epan/dissectors/packet-tls-utils.h#L266-L277
|
2025-01-19 22:31:12 +01:00 |
|
Zhi Guan
|
d892853faa
|
Convert utf-8 files to ascii
|
2024-05-25 21:24:15 +08:00 |
|
Zhi Guan
|
d719ee4862
|
Conv from UTF-8 to ASCII
`file *.c` to see file types (ASCII or UTF-8), convert UTF-8 (with BOM) to ASCII
```sh
sed '1s/^\xEF\xBB\xBF//' sm4.c | iconv -f UTF-8 -t ASCII//TRANSLIT > temp.c
mv temp.c sm4.c
```
|
2024-05-25 18:06:16 +08:00 |
|