lukechilds/node - node - Gitea: Git with a cup of tea

Commit Graph

Author	SHA1	Message	Date
Theo Schlossnagle	2a88dd3bc1	TLS: Add secureOptions flag Also, secureOptions flag was added (and passed through) and allows the context to have all supported SSL_OP_* set via createCredentials. All SSL_OP_ flags (outside of ALL) have been added to constants.	14 years ago
Ryan Dahl	a7254f3df9	Revert "Disable compression with OpenSSL." This reverts commit `362785f704`.	14 years ago
Ryan Dahl	362785f704	Disable compression with OpenSSL. This improves memory and speed. Users may apply compression in "userland" above the CryptoStream layer if they desire.	14 years ago
Ryan Dahl	5c35dff419	Don't load root certs for each SSL context	14 years ago
Ryan Dahl	55048cdf79	Update copyright headers	14 years ago
Felix Geisendörfer	9d4c5a12f4	Crypto update should only accept strings / buffers I have seen a lot of people trying to pass objects to crypto's update functions, assuming that it would somehow serialize the object before hashing. In reality, the object was converted to '[object Object]' which was then hashed, without any error message showing. This patch modifies the DecodeBytes function (used exclusively by crypto at this point) to complain when receiving anything but a string or buffer. Overall this should be a less-suprising, more robust behavior.	14 years ago
Theo Schlossnagle	2a61e1cd49	without this the server will not advertise support for client certs Closes GH-774.	14 years ago
Theo Schlossnagle	01a864a29d	TLS: CRL support Needs more tests.	14 years ago
Ryan Dahl	8cd07bb273	TLS: handle cert chains	14 years ago
Ryan Dahl	56ab929c55	Remove unused parameter from crypto::Handle*Error	14 years ago
Ryan Dahl	519dc2c114	tls: split bio errors from ssl errors	14 years ago
Ryan Dahl	448e0f4394	tls fixes	14 years ago
Ryan Dahl	807fca6803	TLS: Set ssl.receivedShutdown after each read Closes GH-613.	14 years ago
Ryan Dahl	2ff593ad23	TLS: better error reporting at binding layer Closes GH-612.	14 years ago
Greg Hughes	1a5e513084	Fix style issues with ext_key_usage patch Closes GH-586.	14 years ago
Greg Hughes	6c32e155d3	Add ext_key_usage to getPeerCertificate	14 years ago
Tom Hughes	54b1f8028a	Free (ref-counted) private key.	14 years ago
Tom Hughes	b38f4712c4	Fix memory leak in node_crypto.cc. Both HexDecode and unbase64 allocate buffers, which weren't being freed.	14 years ago
Ryan Dahl	e3d1808ef0	Rename node::SecureStream to node::crypto::Connection node::SecureStream is definitely not a "stream" in the Node sense. Renaming it to avoid ambiguity. (Adding namespace to not confuse with some other Connection object.)	14 years ago
Ryan Dahl	70baeba8a9	Add receivedShutdown() binding	14 years ago
Ryan Dahl	dac4d486ec	Accept Buffers as well as strings for addCert, addKey	14 years ago
Ryan Dahl	6bc9b2ef92	clients without certs are unauthed.	14 years ago
Ryan Dahl	5bca100afe	Server must not request cert.	14 years ago
Ryan Dahl	127f17a0ea	Remove should_verify from C++ - to handle in JS land	14 years ago
Ryan Dahl	28a86c3e56	Remove unnecessary call to X509_STORE_free	14 years ago
Ryan Dahl	504a80dc6d	Rename VerifyPeerError to VerifyError	14 years ago
Ryan Dahl	355936dcde	Implement SecureContext destructor	14 years ago
Ryan Dahl	ea540c94f8	Better verify info	14 years ago
Ryan Dahl	4b947310b2	Move root certs out of JavaScript	14 years ago
Ryan Dahl	486c74e72b	Revert "Default to TLSv1" This reverts commit `97970b05fe`.	14 years ago
Ryan Dahl	db98d6e4e0	Remove assert in verify_peer; add comments	14 years ago
Ryan Dahl	97970b05fe	Default to TLSv1	14 years ago
Ryan Dahl	bf89872306	style	14 years ago
Ryan Dahl	be2457aaca	Use SSL_MODE_RELEASE_BUFFERS by default.	14 years ago
Ryan Dahl	7515360951	fix style for SecureStream::IsInitFinished	14 years ago
Ryan Dahl	de6e88c428	Fix segfault on test-crypto Plus random cleanups. This code needs help.	14 years ago
Tim-Smart	79ecc8e9b7	Style changes.	14 years ago
Paul Querna	6ea61acf29	remove old todo.	14 years ago
Paul Querna	1ce4684a27	Centralize error handling in SecureStream and add a start method, to kick off SSL handshaking, without writing a zero byte buffer	14 years ago
Ryan Dahl	fe74283e1d	Fix a few compiler warnings...	14 years ago
Ryan Dahl	a6017660d8	More clang fixes	14 years ago
Ryan Dahl	9911629de0	Fix style in node_crypto.cc	14 years ago
Ryan Dahl	163485c8aa	Rename some SecureStream methods	14 years ago
Paul Querna	9a701b0a70	Expose fingerproint from getPeerCertificate Expose the SHA1 digest of the certificate as the fingerprint attribute in the object returned by getPeerCertificate()	15 years ago
Ryan Dahl	5da4faf8c7	fast buffers for crypto	15 years ago
Andrew Naylor	e0d6f14b22	Buffer for Cipher, Decipher, Hmac, Sign and Verify	15 years ago
Ryan Dahl	9a26946aaa	Fix for issue #214	15 years ago
Paul Querna	30dadfc033	Register builtin extensions via a macro, rather than a manual strcmp Set the stage for making the builtin modules more dynamic. Note: this only converts crypto and net, I will add more extensions in a later commit. * node.h: Add utility macro for converting macro values to strings. * node.h: Include the actual module name inside the module structure, not just the file it was built from. * node.h: New Macro, NODE_MODULE_DECL, for declaring an external reference to a module structure. * node_extensions.cc: New File, implements get_builtin_module, which iterates over the module structures that are compiled into node. * node.cc(node::Binding): Use the new module lookup function to find modules. * node_{net,crypto}.c: Add NODE_MODULEs to generate the module structure.	15 years ago
Peter Griess	99a5d1e293	Free kbuf[] in Verify::VerifyFinal().	15 years ago
Peter Griess	792c7caf40	Coverity fixes: src/node_crypto	15 years ago

1 2

70 Commits (9e6498d5fad1687c5a9bd9321188f3626a9f007a)