Travis Cross 19fc943f59 Mitigate the CRIME TLS flaw ...

If an attacker can cause a device to make an authenticated request to
a service via TLS while including a payload of the attacker's choice
in that request, and if TLS compression is enabled, the attacker can
uncover the plaintext authentication information by making a series of
guesses and observing changes in the length of the ciphertext.

This is CVE-2012-4929.

FS-6360 --resolve

Thanks-to: Brian West <brian@freeswitch.org>

2014-03-16 16:24:58 +00:00

..

sofia-sip

Rework handling of Linux TCP keepalives in Sofia

2014-02-11 06:27:20 +00:00

agent.pem

…

cafile.pem

…

certificates-update

…

certificates.html

…

ChangeLog

…

Doxyfile.in

…

make_node_cert.pl

…

make_root_cert.pl

…

make_test_certs.sh

…

Makefile.am

clean up some bootstrap warnings

2014-03-07 18:36:26 -05:00

test_tport.c

…

tls_test_client.c

…

tls_test_server.c

…

tport_internal.h

Rework handling of Linux TCP keepalives in Sofia

2014-02-11 06:27:20 +00:00

tport_logging.c

FS-5814 --resolve

2014-03-06 00:02:40 +05:00

tport_rand.c

…

tport_sigcomp.c

add capture hooks to libsofia

2011-07-31 18:36:05 -05:00

tport_stub_sigcomp.c

…

tport_stub_stun.c

…

tport_tag.c

Rework handling of Linux TCP keepalives in Sofia

2014-02-11 06:27:20 +00:00

tport_threadpool.c

…

tport_tls_test.sh

…

tport_tls.c

Mitigate the CRIME TLS flaw

2014-03-16 16:24:58 +00:00

tport_tls.h

Drop null-auth suites from our default TLS cipher list

2014-03-05 21:37:30 +00:00

tport_type_connect.c

modify sofia debug code to print file, line numbers and function name

2012-10-26 14:15:14 -05:00

tport_type_sctp.c

add capture hooks to libsofia

2011-07-31 18:36:05 -05:00

tport_type_stun.c

…

tport_type_tcp.c

Rework handling of Linux TCP keepalives in Sofia

2014-02-11 06:27:20 +00:00

tport_type_tls.c

Allow setting TLS cipher suites through Sofia-SIP API

2014-02-06 06:04:02 +00:00

tport_type_udp.c

add capture hooks to libsofia

2011-07-31 18:36:05 -05:00

tport_type_ws.c

Reword the websocket TLS cipher list

2014-03-05 21:37:30 +00:00

tport_ws.h

tweak sip ws code to avoid double free

2013-06-26 12:43:54 -04:00

tport.c

Rework handling of Linux TCP keepalives in Sofia

2014-02-11 06:27:20 +00:00

tport.docs

…

ws.c

FS-5642 --resolve add back the ETIMEDOUT check, needed on Mac

2013-12-13 11:46:14 +08:00

ws.h

windows fix compiler errors

2013-10-22 23:23:48 -05:00