34 Commits

Author SHA1 Message Date
matt335672 7f6899567b Allow TLS pre-master secrets to be recorded
This allows for RDP sessions to be easily decrypted within Wireshark
2025-09-12 11:55:19 +01:00
matt335672 41d4eb5558 Check for xrdp being terminated during SSL_accept BIO loop 2025-05-22 18:03:00 +01:00
firewave fb9c175b11 enabled and fixed -Wmissing-prototypes compiler warnings
Co-authored-by: matt335672 <30179339+matt335672@users.noreply.github.com>
2024-04-23 18:38:20 +02:00
matt335672 8b8cfbe119 Improve wrapping of openssl module 2022-01-28 12:23:40 +00:00
matt335672 d853228c19 const fixes for SSL calls 2022-01-19 11:11:37 +00:00
matt335672 2ee5e76ed7 Improve quality of SSL logging 2021-06-21 17:44:47 +01:00
matt335672 ea582429e1 Load any private key type, not just RSA (#1776)
Fix missing SSL logging and reformat with astyle
2021-01-07 10:34:39 +00:00
Koichiro IWAO b2b42d28f3 xrdp: add OpenSSL version to --version
While here, cleanup --help,  --version, and when unknown option.
2018-04-10 23:58:31 +09:00
Koichiro IWAO 04187945a8 move base64 functions to base64.c 2017-08-01 08:40:30 +09:00
Koichiro IWAO d57e02626d add base64_decode function 2017-08-01 08:40:30 +09:00
Jay Sorg 8d63c32899 move openssl calls to common/libssl.c, check for defines 2017-06-22 11:47:48 +09:00
Pavel Roskin 6ed4c969f4 Eliminate APP_CC and DEFAULT_CC 2017-03-14 00:21:48 -07:00
Koichiro IWAO e94ab10e14 TLS: new method to specify SSL/TLS version
SSL/TLS protocols only listed in ssl_protocols should be used.
The name "ssl_protocols" comes from nginx.

Resolves #428.
2017-02-27 14:17:25 +09:00
Pavel Roskin dc1e341f5a Constify input arguments of ssl_mod_exp() and ssl_gen_key_xrdp1() 2017-02-02 21:39:10 -08:00
Koichiro IWAO 40e8194122 TLS: log TLS version and cipher 2016-11-22 10:50:30 +09:00
Alex Illsley 47124df4ed new options for xrdp.ini disableSSlv3=yes and tls_ciphers=HIGH and code to implement 2016-08-25 11:20:47 -07:00
Pavel Roskin 28a1a090b3 Use correct types for ssl and ctx fields in struct ssl_tls 2016-07-08 04:29:53 +00:00
Pavel Roskin aeeb3d2c2e Fix warnings detected by -Wwrite-strings 2016-07-08 04:29:42 +00:00
Jay Sorg cc0406dddf common: move tls calls to ssl_calls 2014-11-25 18:55:37 -08:00
Jay Sorg 25ad4d8a36 common: add more fips ssl calls 2014-02-23 20:40:13 -08:00
Jay Sorg 926cd095fc common: added des3 calls for fips 2014-02-20 23:15:24 -08:00
Jay Sorg c6fa03102f copyright year update 2013-06-08 10:51:53 -07:00
Laxmikant Rashinkar 1123323fda o moved from GNU General Public License to Apache License, Version 2.0
o applied new coding standards to all .c files
o moved some files around
2012-09-19 20:51:34 -07:00
Jay Sorg 0da32da2d8 add ssl init to common 2011-05-28 23:56:10 -07:00
Jay Sorg bb7898419f update copyright year 2010-10-19 20:00:38 -07:00
jsorg71 6c5f82fd04 update copyright year 2009-02-02 08:01:44 +00:00
jsorg71 38b789e81f update copyright year 2008-01-30 07:30:10 +00:00
jsorg71 6ecbf36e7e added keygen function 2007-06-16 04:51:19 +00:00
jsorg71 02cd95ebef copyright year update 2007-01-12 05:01:58 +00:00
jsorg71 00d8b7106f commit patch 1589325, slightly modified - code cleanup 2006-11-04 22:05:06 +00:00
jsorg71 b65409683b copyright year updates 2006-03-21 02:05:38 +00:00
jsorg71 baf7f173ae added some APP_CC and changed ssl prefix 2005-11-26 00:57:12 +00:00
jsorg71 9ad83a3c23 moving reverse to ssl_calls 2005-09-25 20:21:53 +00:00
jsorg71 41df89c7f2 moved some files around 2005-06-28 03:04:36 +00:00