summaryrefslogtreecommitdiff
path: root/main/tcptls.c
AgeCommit message (Expand)Author
2017-12-08utils: Add convenience function for setting fd flagsSean Bright
2017-11-06tcptls: Print notice when TLS is enabled but not configured.Alexander Traud
2017-10-16Merge "declare optional openssl dependencies in moduleinfo"Jenkins2
2017-10-13tcptls: NULL-check the parameter of ast_ssl_teardown before accessing it.Alexander Traud
2017-10-10declare optional openssl dependencies in moduleinfoTzafrir Cohen
2017-10-08tcptls: Do not re-bind to wildcard on client creation.Alexander Traud
2017-09-14tcptls: Change error message to debug.Joshua Colp
2017-06-19Core: Add support for systemd socket activation.Corey Farrell
2017-04-11tcptls.c: Cleanup TCP/TLS listener thread on abnormal exit.Richard Mudgett
2017-02-17tcptls.c: Add some missing allocation failure checks.Richard Mudgett
2017-02-03tcptls: use TLS_client_method with OpenSSL 1.1Tzafrir Cohen
2016-12-02Merge "tcptls: Use new certificate upon sip reload"Joshua Colp
2016-12-01OpenSSL 1.1.0 supportTzafrir Cohen
2016-11-22tcptls: Use new certificate upon sip reloadMichael Kuron
2016-11-15Implement internal abstraction for iostreamsTimo Teräs
2016-10-27Remove ASTERISK_REGISTER_FILE.Corey Farrell
2016-06-08Fixes to include signal.hTimo Teräs
2016-02-04Check for OpenSSL defines before trying to use them.Mark Michelson
2016-02-03AST-2016-001 http: Provide greater control of TLS and set modern defaults.Joshua Colp
2015-06-02tcptls.c: Don't use OpenSSL functions when no SSL support is present.Joerg Sonnenberger
2015-05-15Merge "Add X.509 subject alternative name support to TLS certificate verifica...Joshua Colp
2015-05-15tcptls: Enable multiple TLS certificate chains (RSA+ECC+DSA) for server socket.Alexander Traud
2015-05-15Add X.509 subject alternative name support to TLS certificateMaciej Szmigiero
2015-05-05tcptls: Avoiding ERR_remove_state in OpenSSL.Alexander Traud
2015-04-13git migration: Refactor the ASTERISK_FILE_VERSION macroMatt Jordan
2015-04-08Security/tcptls: MitM Attack potential from certificate with NULL byte in CN.Jonathan Rose
2015-02-19tcptls: Handle new OpenSSL compile time option to disable SSLv3Matthew Jordan
2015-01-27tcptls: Bad file descriptor error when reloading chan_sipKevin Harwell
2014-10-20AST-2014-011: Fix POODLE security issuesMatthew Jordan
2014-08-11tcptls: Avoid compiler warning on non-dev-mode.Walter Doekes
2014-07-03HTTP: Add persistent connection support.Richard Mudgett
2014-07-03main/tcptls: Add checks for OpenSSL Elliptic Curve supportMatthew Jordan
2014-07-03main/tcptls: Add support for Perfect Forward SecrecyMatthew Jordan
2014-06-13AST-2014-007: Fix of fix to allow AMI and SIP TCP to send messages.Richard Mudgett
2014-06-12AST-2014-007: Fix DOS by consuming the number of allowed HTTP connections.Richard Mudgett
2014-04-27tcptls.c : Log errors as ERROR, not warning or something else.Olle Johansson
2014-03-28http: response body often missing after specific requestScott Griepentrog
2014-02-04tcptls.c: Made TLS handle a certificate chain file.Richard Mudgett
2014-01-26tcptls.c: Add missing cleanup on off nominal path.Richard Mudgett
2013-12-16security: Inhibit execution of privilege escalating functionsDavid M. Lee
2013-03-15tcptls: Prevent unsupported options from being setKinsey Moore
2012-10-17Ensure Asterisk fails TCP/TLS SIP calls when certificate checking failsKinsey Moore
2012-10-12Do not use a FILE handle when doing SIP TCP reads.Mark Michelson
2012-09-14Resolve memory leaks in TLS initialization and TLS client connectionsMatthew Jordan
2012-07-31Clean up and ensure proper usage of alloca()Kinsey Moore
2012-07-06Remove a superfluous and dangerous freeing of an SSL_CTX.Mark Michelson
2012-06-15Multiple revisions 369001-369002Kevin P. Fleming
2012-05-31Coverity Report: Fix issues for error type REVERSE_INULL (core modules)Richard Mudgett
2012-05-23Only call SSL_CTX_free if DO_SSL is defined.Mark Michelson
2012-05-18Fix memory leak of SSL_CTX structures in TLS core.Mark Michelson