Günter Obiltschnig
|
13d3a03529
|
remove curves unsupported by some OpenSSL builds
|
2020-02-04 15:31:48 +01:00 |
|
Günter Obiltschnig
|
fc8a95c44e
|
make Context compile with OpenSSL >= 1.1
|
2020-02-04 13:41:23 +01:00 |
|
Günter Obiltschnig
|
81624a269f
|
#2898: poco 1.10/ NetSSL / openssl < 1.1 : default server usage changed (compare to 1.9.4)
|
2020-02-04 10:23:55 +01:00 |
|
Günter Obiltschnig
|
d33a39a987
|
#2816: Modernise TLS configuration
|
2020-02-04 09:33:31 +01:00 |
|
Günter Obiltschnig
|
839009d9b5
|
fix header comments
|
2020-01-23 18:57:05 +01:00 |
|
Günter Obiltschnig
|
d65bf03a83
|
fixes and improvements to FTP(S)ClientSession
|
2020-01-23 17:55:30 +01:00 |
|
Günter Obiltschnig
|
878b8bbeca
|
fixes for FTPSClientSession
|
2020-01-23 13:29:54 +01:00 |
|
Günter Obiltschnig
|
5d481ff493
|
merge FTPSClientSession from develop-experimental
|
2020-01-23 11:57:28 +01:00 |
|
Günter Obiltschnig
|
18adb1e43b
|
code cleanup; fix move ctors and assignment
|
2020-01-21 17:52:43 +01:00 |
|
Günter Obiltschnig
|
e1f09a602b
|
cleanup and modernization
|
2020-01-10 12:20:30 +01:00 |
|
Günter Obiltschnig
|
a2f8f8fbe1
|
NetSSL_OpenSSL: better way to specify TLS version for Context
|
2020-01-09 21:25:30 +01:00 |
|
Günter Obiltschnig
|
27335031e1
|
fixed GH #2380: Calling Poco::Net::X509Certificate::addChainCertificate() leads to double free.
|
2019-06-22 18:11:05 +02:00 |
|
Günter Obiltschnig
|
ec8ea48062
|
SecureSMTPClientSession now uses _host from SMTPClientSession
|
2019-05-16 14:35:19 +02:00 |
|
Günter Obiltschnig
|
6000982c8b
|
added preliminary TLSv1.3 support with OpenSSL version 1.1.1
|
2018-08-24 10:47:05 +02:00 |
|
proller
|
bada9ed2b9
|
Backport #2257 to Poco 1.9.1
|
2018-08-18 11:09:43 +02:00 |
|
Joerg-Christian Boehme
|
5fb10f6746
|
Set EVP private key on SSL context (#2259)
|
2018-06-03 11:27:32 -05:00 |
|
Günter Obiltschnig
|
8dc4223acb
|
X509Certificate::verify(): use OpenSSL X509_check_host() and X509_check_ip_asc() if available
|
2018-03-05 22:17:31 +01:00 |
|
Günter Obiltschnig
|
451f05121e
|
#2197: fix style
|
2018-03-05 22:15:39 +01:00 |
|
Günter Obiltschnig
|
38c9328db6
|
fix style
|
2018-03-05 19:54:01 +01:00 |
|
Joerg-Christian Boehme
|
4c05d4baf7
|
Improve ssl context, include a function to add CA certificates.
|
2018-03-05 13:37:45 +01:00 |
|
Günter Obiltschnig
|
320fa9c445
|
don't set _peerHostName from peerAddress
|
2017-12-21 14:32:08 +01:00 |
|
Günter Obiltschnig
|
04e7e04d4d
|
Remove \$Id`$ headers
|
2017-09-09 11:14:06 +02:00 |
|
Günter Obiltschnig
|
75a7ee4b0f
|
Crypto and NetSSL fixes for OpenSSL 1.1
|
2016-11-27 23:58:39 +01:00 |
|
Guenter Obiltschnig
|
3bd6689751
|
fixed GH #1472: HTTP(S)StreamFactory should send a User-Agent header
|
2016-10-26 12:58:52 +02:00 |
|
Guenter Obiltschnig
|
9bc12df4a2
|
style fix
|
2016-09-26 17:00:42 +02:00 |
|
Guenter Obiltschnig
|
7c37f18f84
|
fixed some warnings and minor issues detected by clang-analyzer
|
2016-09-13 11:37:12 +02:00 |
|
Guenter Obiltschnig
|
0b30bacb41
|
fixed GH #1303: HTTPSClientSession::sendRequest() fails if server has wildcard cert
|
2016-07-03 12:48:15 +02:00 |
|
Guenter Obiltschnig
|
d0e268fcbb
|
use TLS_*_method() instead of deprecated SSLv23_*_method() if OpenSSL version is >= 1.1; initialize default/fallback client context to support all TLS protocols, not just TLSv1
|
2016-03-12 12:18:18 +01:00 |
|
Guenter Obiltschnig
|
ee9477afd3
|
fixed GH# 1184: Attempting to connect via a proxy throws a DNS error "Host not found"
|
2016-03-10 09:54:08 +01:00 |
|
Guenter Obiltschnig
|
f7ba58c80f
|
fix for GH #1160: Poco::Net::NetException "SSL Exception: error:1409F07F:SSL routines:ssl3_write_pending:bad write retry
|
2016-02-26 20:15:58 +01:00 |
|
Guenter Obiltschnig
|
dee1efd56a
|
added Context::preferServerCiphers()
|
2016-01-19 16:01:17 +01:00 |
|
Guenter Obiltschnig
|
82c6c5f149
|
added support for ECDH, new Context ctor
|
2016-01-19 15:19:14 +01:00 |
|
Guenter Obiltschnig
|
e9b2b3bcdd
|
NetSSL: add support for disabling certain protocols
|
2016-01-19 11:36:02 +01:00 |
|
Guenter Obiltschnig
|
b124d5b392
|
merged doc fixes from develop branch
|
2015-10-10 17:32:31 +02:00 |
|
Guenter Obiltschnig
|
ef3946786a
|
improved SSLManager to automatically set-up a reasonable client Context if none is configured
|
2015-10-06 09:41:31 +02:00 |
|
Guenter Obiltschnig
|
89816c0ea2
|
HTTPSessionInstantiator: respect global proxy config
|
2015-09-17 11:56:28 +02:00 |
|
Guenter Obiltschnig
|
3b31772717
|
fixed comments
|
2014-11-21 09:05:25 +01:00 |
|
Guenter Obiltschnig
|
781acfa0bd
|
added nonProxyHosts to ProxyConfig to allow bypassing proxy for certain hosts
|
2014-11-11 22:54:44 +01:00 |
|
Guenter Obiltschnig
|
420c3b55a7
|
added support for global HTTP proxy configuration
|
2014-11-09 17:22:10 +01:00 |
|
Guenter Obiltschnig
|
558091d53f
|
fixed a memory leak if the CA file was not found while creating the Context (the OpenSSL context would leak)
|
2014-10-18 17:22:07 +02:00 |
|
Guenter Obiltschnig
|
84adc737d4
|
- don't throw if SSL client unexpectedly closes connection as this seems to be the normal behavior of web browsers (seen with Chrome and IE)
|
2014-10-02 14:58:45 +02:00 |
|
Günter Obiltschnig
|
a2617235fe
|
#538 more dtor fixes and some style fixes along the way
|
2014-09-29 12:09:01 +02:00 |
|
Guenter Obiltschnig
|
544229302e
|
#538 prevent destructors from throwing exceptions
|
2014-09-19 09:46:49 +02:00 |
|
Guenter Obiltschnig
|
a56c21a250
|
style cleanup
|
2014-09-17 11:46:31 +02:00 |
|
Rangell Reale
|
21f2e115eb
|
* Allows SecureStreamSocket::attach to be used in server connections
* Move order of condition for isLocalHost in peer certificate verification, to skip DNS lookup if not needed
|
2014-09-12 16:43:52 -03:00 |
|
Günter Obiltschnig
|
a4488f2f76
|
fixed server context initialization
|
2014-09-03 11:26:09 +02:00 |
|
Guenter Obiltschnig
|
1a81dbef15
|
enabled TLSv1.1 and 1.2 support in configuration
|
2014-09-02 18:54:12 +02:00 |
|
Guenter Obiltschnig
|
3f1e2c002a
|
added support for TLSv1.1 and TLSv1.2 to Context
|
2014-09-02 17:30:02 +02:00 |
|
Guenter Obiltschnig
|
16ef87e6c8
|
added support for TLSv1.1 and TLSv1.2 to Context
|
2014-09-02 17:23:47 +02:00 |
|
Oldřich Jedlička
|
f4465ea1e3
|
Catch also NoAddressFoundException from DNS.
The certificate validation might fail on NoAddressFoundException - if the
hostname from certificate could not be translated to IP address.
|
2014-06-09 10:11:53 +02:00 |
|