diff options
| author | cinap_lenrek <cinap_lenrek@felloff.net> | 2016-04-18 19:24:57 +0200 |
|---|---|---|
| committer | cinap_lenrek <cinap_lenrek@felloff.net> | 2016-04-18 19:24:57 +0200 |
| commit | ff47cbd46489ed73eeb06861e6df7ac6f5bb1a44 (patch) | |
| tree | 06a547a46b09344760d69991d6340569a4d48239 /rc/bin/service/tcp17019 | |
| parent | 9ba04fd030876aa2e385d3248ba19f5a80d3c799 (diff) | |
libsec: implement server side ECDHE key exchange with secp256r1, move DH state in TlsSec structure, simplify
implement ECDHE key exchange with secp256r1 on the server side, providing
perfect forward secrecy (tho slowly).
it is easier to just keep the ECDH/DH state in the TlsSec structure,
which fits better with the grouping of the functions. we do the cleanup
in tlsConnectionFree() now, so a lot of error handling logic could go
away.
reinvestigated some error paths and removed the ones that cannot error.
move functions to fit the logical grouping.
combine the code for signing handshake hashes (for client certs) and
DH parameters. provide digestDHparams() function to be shared between
server and client code.
Diffstat (limited to 'rc/bin/service/tcp17019')
0 files changed, 0 insertions, 0 deletions