Branch: refs/heads/master Home: https://github.com/kronosnet/kronosnet Commit: bf787c5aa10992c42cecb191074d285c1828042b https://github.com/kronosnet/kronosnet/commit/bf787c5aa10992c42cecb191074d28... Author: Fabio M. Di Nitto fdinitto@redhat.com Date: 2019-05-27 (Mon, 27 May 2019)
Changed paths: M libknet/crypto.c M libknet/crypto_nss.c M libknet/crypto_openssl.c
Log Message: ----------- [crypto] make sure to clear all security info on crypto_fini
Signed-off-by: Fabio M. Di Nitto fdinitto@redhat.com
Commit: b0e8a6abbbf40864a1f2ec3b8c394caed029c649 https://github.com/kronosnet/kronosnet/commit/b0e8a6abbbf40864a1f2ec3b8c394c... Author: Fabio M. Di Nitto fdinitto@redhat.com Date: 2019-05-27 (Mon, 27 May 2019)
Changed paths: M libknet/threads_common.c M libknet/threads_common.h M libknet/transport_udp.c
Log Message: ----------- [PMTUd] create common/shared code to trigger PMTUd rerun
Signed-off-by: Fabio M. Di Nitto fdinitto@redhat.com
Commit: ff7accf85bde59f2ed00dbd4569f85e53dd8396a https://github.com/kronosnet/kronosnet/commit/ff7accf85bde59f2ed00dbd4569f85... Author: Fabio M. Di Nitto fdinitto@redhat.com Date: 2019-05-27 (Mon, 27 May 2019)
Changed paths: M libknet/handle.c
Log Message: ----------- [crypto] make sure to trigger a PMTUd rerun on each good crypto config change
Signed-off-by: Fabio M. Di Nitto fdinitto@redhat.com
Commit: e717b4a05df6481b472e5cf5b9121363253c8fd7 https://github.com/kronosnet/kronosnet/commit/e717b4a05df6481b472e5cf5b91213... Author: Fabio M. Di Nitto fdinitto@redhat.com Date: 2019-05-28 (Tue, 28 May 2019)
Changed paths: M libknet/crypto.c M libknet/crypto_model.h M libknet/crypto_nss.c M libknet/crypto_openssl.c M libknet/handle.c M libknet/libknet.h M libknet/tests/api_knet_handle_crypto.c
Log Message: ----------- [crypto] rework knet_handle_crypto external API to be more solid
the API was rather weak and could potentially leave traffic uncrypted in case of certain, corner case, failures.
this patch is a subset of a bigger rework of the crypto layer that will in future allow runtime reconfiguration without traffic disruption of the crypto config.
Signed-off-by: Fabio M. Di Nitto fdinitto@redhat.com
Commit: 0b6ecaa538f5786053f88c2ef504a4ba6f8ef774 https://github.com/kronosnet/kronosnet/commit/0b6ecaa538f5786053f88c2ef504a4... Author: Fabio M. Di Nitto fdinitto@redhat.com Date: 2019-05-28 (Tue, 28 May 2019)
Changed paths: M libknet/handle.c M libknet/threads_common.c M libknet/threads_common.h M libknet/transport_udp.c
Log Message: ----------- [PMTUd] extend internal rerun API to allow full PMTUd reset
Signed-off-by: Fabio M. Di Nitto fdinitto@redhat.com
Commit: 8df89af54bfb99b068907572e3e9be198961676f https://github.com/kronosnet/kronosnet/commit/8df89af54bfb99b068907572e3e9be... Author: Fabio M. Di Nitto fdinitto@redhat.com Date: 2019-05-28 (Tue, 28 May 2019)
Changed paths: M libknet/crypto_openssl.c
Log Message: ----------- [crypto] fix openssl1.0 initialization code
Signed-off-by: Fabio M. Di Nitto fdinitto@redhat.com
Commit: a1c6badb9d6ea9d9a61e91d0ca9d1f090e6582ec https://github.com/kronosnet/kronosnet/commit/a1c6badb9d6ea9d9a61e91d0ca9d1f... Author: Fabio M. Di Nitto fdinitto@redhat.com Date: 2019-06-03 (Mon, 03 Jun 2019)
Changed paths: M libknet/crypto.c M libknet/crypto_model.h M libknet/crypto_nss.c M libknet/crypto_openssl.c M libknet/handle.c M libknet/libknet.h M libknet/tests/api_knet_handle_crypto.c M libknet/threads_common.c M libknet/threads_common.h M libknet/transport_udp.c
Log Message: ----------- Merge pull request #225 from kronosnet/ssl-reconf
Ssl reconf
Compare: https://github.com/kronosnet/kronosnet/compare/29365dc0f038...a1c6badb9d6e
-
Fabio M. Di Nitto