Code

Enable server to server TLS#211

Code

Open

eaescob wants to merge 65 commits intomasterDALnet/bahamut:masterfrom s-to-s-tlsDALnet/bahamut:s-to-s-tlsCopy head branch name to clipboard

+256-12

Commits

Commits on Jul 24, 2022

• Allow server to server communication to be over TLS by not sending DKEY if the connection is already encrypted

  eaescob

  committed
  c85960f

  Copy full SHA for c85960f

• allow port flag for SSL and establish SSL context

  eaescob

  committed
  cee1aa4

  Copy full SHA for cee1aa4

• fix fd reference

  eaescob

  committed
  6829106

  Copy full SHA for 6829106

• use SSL_connect when connecting to SSL aconn

  eaescob

  committed
  7abd154

  Copy full SHA for 7abd154

• fix 509 references

  eaescob

  committed
  0f55c03

  Copy full SHA for 0f55c03

• return -1 when SSL fails

  eaescob

  committed
  8906f32

  Copy full SHA for 8906f32

• set non blocking after SSL_connect

  eaescob

  committed
  48714a7

  Copy full SHA for 48714a7

• use safe ssl connect to allow want read and write to happen

  eaescob

  committed
  d29f293

  Copy full SHA for d29f293

• fix reference to ssl ctx

  eaescob

  committed
  34fb5c0

  Copy full SHA for 34fb5c0

• declare safe_ssl_connect and fix call to it

  eaescob

  committed
  eb5b375

  Copy full SHA for eb5b375

• add SSL connect function

  eaescob

  committed
  4775f1a

  Copy full SHA for 4775f1a

Commits on Jul 25, 2022

• generate a new SSL client ctx and use it when connecting to servers

  eaescob

  committed
  5d6963d

  Copy full SHA for 5d6963d

• fix reference to tmp_serverssl_ctx

  eaescob

  committed
  407fe3b

  Copy full SHA for 407fe3b

• add more debugging and do not send DKEY capab if SSL

  eaescob

  committed
  498e966

  Copy full SHA for 498e966

• really do not send DKEY and establish connection if SSL

  eaescob

  committed
  b9f66cb

  Copy full SHA for b9f66cb

• fix syntax error

  eaescob

  committed
  409f373

  Copy full SHA for 409f373

• remove error pasting

  eaescob

  committed
  9fb8010

  Copy full SHA for 9fb8010

• check for IsSSL

  eaescob

  committed
  a976409

  Copy full SHA for a976409

• increase the value of CONN_SSL to avoid any conflicts

  eaescob

  committed
  3ea16ea

  Copy full SHA for 3ea16ea

• adding debug

  eaescob

  committed
  9d97fd1

  Copy full SHA for 9d97fd1

• set socket to non-blocking regardless of SSL

  eaescob

  committed
  6713893

  Copy full SHA for 6713893

• remove debug line and display TLS during connecting message if CONN_SSL

  eaescob

  committed
  0624157

  Copy full SHA for 0624157

• debug to check if CONN_DKEY hits no matter what, will remove

  eaescob

  committed
  3e30de8

  Copy full SHA for 3e30de8

• remove debug for Parsing

  eaescob

  committed
  65f300d

  Copy full SHA for 65f300d

• show TLS encrypted in stats ?

  eaescob

  committed
  b893070

  Copy full SHA for b893070

• simplify checks to determine which CAPAB to send

  eaescob

  committed
  13aa436

  Copy full SHA for 13aa436

• fix syntax for stats

  eaescob

  committed
  5c833ff

  Copy full SHA for 5c833ff

• adjust formatting and fix syntax error

  eaescob

  committed
  a787642

  Copy full SHA for a787642

Commits on Jul 26, 2022

• Do not retrieve certificate right after connecting, added TLS validation logic

  eaescob

  committed
  1ab1c16

  Copy full SHA for 1ab1c16

• Revert "Do not retrieve certificate right after connecting, added TLS validation logic"

  Show description for 82cfd75
  eaescob

  committed
  82cfd75

  Copy full SHA for 82cfd75

• configure SSL context to do peer verfication and check status during completed_connection

  eaescob

  committed
  6dd1a6c

  Copy full SHA for 6dd1a6c

• test with verify none for now

  eaescob

  committed
  ae5918a

  Copy full SHA for ae5918a

• show verify result

  eaescob

  committed
  0f1b293

  Copy full SHA for 0f1b293

• ignore self-signed cert error for now

  eaescob

  committed
  67555b6

  Copy full SHA for 67555b6

• Call connect if IsConnecting and accept if IsClient

  eaescob

  committed
  44c54bf

  Copy full SHA for 44c54bf

• Revert "Call connect if IsConnecting and accept if IsClient"

  Show description for fb84872
  eaescob

  committed
  fb84872

  Copy full SHA for fb84872

• check for connecting status first and call safe connect

  eaescob

  committed
  04f4d13

  Copy full SHA for 04f4d13

• Revert "check for connecting status first and call safe connect"

  Show description for be75c3a
  eaescob

  committed
  be75c3a

  Copy full SHA for be75c3a

• do not ignore syscall errors

  eaescob

  committed
  2a4e8d4

  Copy full SHA for 2a4e8d4

• try ssl_verify_none for now

  eaescob

  committed
  3bf3465

  Copy full SHA for 3bf3465

Commits on Aug 6, 2022

• Add custom TLS verification to compare aconn->name with subject name provided by certificate

  eaescob

  committed
  61385c1

  Copy full SHA for 61385c1

• include struct.h for aConn reference

  eaescob

  committed
  9ea1f0c

  Copy full SHA for 9ea1f0c

• fix mistaken use of aConn and removed static definition

  eaescob

  committed
  a58470d

  Copy full SHA for a58470d

• make sure we get the cert before we try to get the subjectName

  eaescob

  committed
  70e3798

  Copy full SHA for 70e3798

• fix reference to DEBUG_LEV

  eaescob

  committed
  5c4cc45

  Copy full SHA for 5c4cc45

• allow self signed cert in chain for now

  eaescob

  committed
  52b4dcc

  Copy full SHA for 52b4dcc

• self signed cert in chain error is stored in err not preverify_ok

  eaescob

  committed
  38ef65d

  Copy full SHA for 38ef65d

• callback needs to return 1 on success

  eaescob

  committed
  7704b7e

  Copy full SHA for 7704b7e

• added debug to get CN part of subject name

  eaescob

  committed
  4a48308

  Copy full SHA for 4a48308

• fix reference to buf

  eaescob

  committed
  dcdbaeb

  Copy full SHA for dcdbaeb

• Getting subject name as an object for debugging

  eaescob

  committed
  ed6587c

  Copy full SHA for ed6587c

• only verify cert once, track depth for aConnect matching

  eaescob

  committed
  5b88348

  Copy full SHA for 5b88348

• only validate common name when depth is 0, needs to be tested against self signed certs

  eaescob

  committed
  a0066b0

  Copy full SHA for a0066b0

• return preverification for chain certs

  eaescob

  committed
  daebc77

  Copy full SHA for daebc77

• return true for chain certs

  eaescob

  committed
  5f52adc

  Copy full SHA for 5f52adc

• verify peer at all times and print cn during mismatch

  eaescob

  committed
  17124b5

  Copy full SHA for 17124b5

• mycmp returns 1 if match

  eaescob

  committed
  1b19af1

  Copy full SHA for 1b19af1

• debug verify result

  eaescob

  committed
  024722d

  Copy full SHA for 024722d

• announce TLS connection error if SSL verification fails

  eaescob

  committed
  37aa0fa

  Copy full SHA for 37aa0fa

• fix formatting for verify_result

  eaescob

  committed
  730a4ca

  Copy full SHA for 730a4ca

Commits on Aug 15, 2022

• Fix debug formatting for verify_result

  eaescob

  committed
  25b6794

  Copy full SHA for 25b6794

Commits on Aug 16, 2022

• Merge branch 'master' into s-to-s-tls

  eaescob

  committed
  74ea5da

  Copy full SHA for 74ea5da

Commits on Jul 9, 2023

• Merge branch 'master' into s-to-s-tls

  eaescob

  authored
  18b0eb7

  Copy full SHA for 18b0eb7

Commits on Dec 2, 2023

• Merge branch 'master' into s-to-s-tls

  eaescob

  authored
  3ba54e0

  Copy full SHA for 3ba54e0

Commits on Dec 3, 2023

• Fixing typos and more error checks

  eaescob

  committed
  d637ef2

  Copy full SHA for d637ef2