luo980/curl
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
7eb8c04847
curl/lib/vtls
History
Daniel McCarney 8972845123
vtls/rustls: support strong CSRNG data 
Now that the curl rustls vtls backend is using rustls 0.14 we can
address the weak random situation by using
`rustls_default_crypto_provider_random()` to provide a `Curl_ssl`
`random` callback that fills the provided buffer with cryptographically
secure random data.

The mentions in `docs/` about weak RNG when using rustls are removed as
they are no longer applicable.

Closes #14889
2024-09-13 14:11:56 +02:00
..
.checksrc lib: enable strerror and strncpy checksrc warnings in subdirs 2024-09-09 16:51:21 +02:00
bearssl.c bearssl: fix setting tls version 2024-08-19 10:46:58 +02:00
bearssl.h copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
cipher_suite.c rustls: add support for setting TLS version and ciphers 2024-08-16 09:55:02 +02:00
cipher_suite.h rustls: add support for setting TLS version and ciphers 2024-08-16 09:55:02 +02:00
gtls.c gnutls: send all data 2024-08-29 16:46:56 +02:00
gtls.h connection: shutdown TLS (for FTP) better 2024-06-10 13:08:12 +02:00
hostcheck.c code: language cleanup in comments 2024-07-01 22:58:55 +02:00
hostcheck.h code: language cleanup in comments 2024-07-01 22:58:55 +02:00
keylog.c tls: use shared init code for TCP+QUIC 2024-04-09 09:08:05 +02:00
keylog.h copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
mbedtls_threadlock.c mbedtls: properly cleanup the thread-shared entropy 2024-03-12 03:09:37 -04:00
mbedtls_threadlock.h tidy-up: one comment and EOF newlines 2024-03-12 15:38:44 +00:00
mbedtls.c mbedtls: fix incorrect macro condition mbed_dump_cert_info 2024-08-21 07:50:31 +02:00
mbedtls.h copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
openssl.c openssl: certinfo errors now fail correctly 2024-09-04 23:41:44 +02:00
openssl.h openssl: certinfo errors now fail correctly 2024-09-04 23:41:44 +02:00
rustls.c vtls/rustls: support strong CSRNG data 2024-09-13 14:11:56 +02:00
rustls.h copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
schannel_int.h schannel: avoid malloc for CAinfo_blob_digest 2024-09-05 09:23:48 +02:00
schannel_verify.c lib: make SSPI global symbols use Curl_ prefix 2024-09-04 14:55:10 +02:00
schannel.c schannel: avoid malloc for CAinfo_blob_digest 2024-09-05 09:23:48 +02:00
schannel.h build: do not publish HAVE_BORINGSSL, HAVE_AWSLC macros 2023-10-08 22:29:45 +00:00
sectransp.c cpool: rename "connection cache/conncache" to "Connection Pools/cpool" 2024-08-28 13:52:49 +02:00
sectransp.h copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
vtls_int.h rand: only provide weak random when needed 2024-09-02 18:42:32 +02:00
vtls.c openssl: certinfo errors now fail correctly 2024-09-04 23:41:44 +02:00
vtls.h vtls: fix Curl_ssl_conn_config_match doc param 2024-09-12 19:06:34 +02:00
wolfssl.c lib: remove the final strncpy() calls 2024-09-09 13:47:38 +02:00
wolfssl.h wolfssl: improve shutdown handling 2024-08-05 08:49:20 +02:00
x509asn1.c x509asn1: raise size limit for x509 certification information 2024-08-02 23:20:57 +02:00
x509asn1.h x509asn1: unittests and fixes for gtime2str 2024-07-30 23:08:59 +02:00