Rezzect/syncplay
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 2 Wiki Activity
2,040 Commits 2 Branches 2 Tags
Commit Graph

2040 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Alberto Sottile
9e19fcccfa Add missing space in TLS cipher messages 2019-02-17 12:45:20 +01:00
Alberto Sottile
b655085f59 Update third-party-notices 2019-02-16 12:24:15 +01:00
Alberto Sottile
e16775c33b Explicitely set TLS options to None when server config is not valid 2019-02-16 11:55:03 +01:00
Alberto Sottile
0f10161d86 Remove unneeded wrapClientTLS import 2019-02-16 00:27:01 +01:00
Alberto Sottile
9132a9ae56 startTLS: find certifi.where() if embedded in a zip file 2019-02-16 00:08:19 +01:00
Alberto Sottile
2ac6417c50 buildpy2app: include lua subfolder in the app bundle 2019-02-16 00:08:11 +01:00
Alberto Sottile
8d2472bc68 buildpy2app: include cffi in the app bundle 2019-02-16 00:08:03 +01:00
Alberto Sottile
6fa2eb01c1 Travis: add twisted[tls] and certifi modules 2019-02-16 00:07:55 +01:00
Alberto Sottile
303032b913 Amend green lock icon filenames 2019-02-16 00:07:47 +01:00
Alberto Sottile
8882c9bade startTLS: amend messages 2019-02-16 00:07:39 +01:00
Alberto Sottile
0add282db6 startTLS: set font size in dialog only on macOS 2019-02-16 00:07:11 +01:00
Alberto Sottile
b5f191bb68 startTLS: multilanguage strings in certificate dialog 2019-02-16 00:07:05 +01:00
Alberto Sottile
b35a4fec9d startTLS: add custom certificate info dialog 2019-02-16 00:06:57 +01:00
Alberto Sottile
3695c31ec7 startTLS: set lock button appearance on macOS 2019-02-16 00:06:50 +01:00
Etoh
466e8533d6 Add secure connection icon to press for cert details 2019-02-16 00:06:43 +01:00
Alberto Sottile
8d52acbd88 Get exact error value from Twisted if IPv6 listener is dual stack 2019-02-16 00:05:58 +01:00
Alberto Sottile
285428fb03 Check if the server is listening on either IPv4 or IPv6, avoid errors happening in dual stack configurations 2019-02-16 00:05:46 +01:00
Alberto Sottile
cb66180328 startTLS: import and cosmetic fixes 2019-02-16 00:05:25 +01:00
Alberto Sottile
23f4d686f2 startTLS: client-side verification of the certifi bundle 2019-02-16 00:05:15 +01:00
Alberto Sottile
24cb681acd startTLS: add link to 'startTLS-server-certificate-invalid' error message 2019-02-16 00:05:04 +01:00
Alberto Sottile
6dcaf21891 startTLS: drop connection if server certificate is not valid 2019-02-16 00:04:52 +01:00
Alberto Sottile
dbb2b1c9ff startTLS: add accepted ciphers list and remove DH params 2019-02-16 00:04:28 +01:00
Alberto Sottile
9721cf32e4 startTLS: change DH key parameter filename 2019-02-16 00:04:15 +01:00
Alberto Sottile
9b4338146e startTLS: enable Diffie-Hellman based key exchange on server 
Following the guidelines reported in the Twisted documentation
here https://twistedmatrix.com/documents/current/core/howto/ssl.html
this commit enables Diffie-Hellman based key exchange on the server.

Before launching the server, a parameters .pem file must be generated
as detailed in https://twistedmatrix.com/documents/18.9.0/api/twisted.internet.ssl.DiffieHellmanParameters.html
by running `openssl dhparam -out dh_param_1024.pem -2 1024`
on the server machine. This parameters file must be placed in the same
path that contains the server certificates.
 2019-02-16 00:04:05 +01:00
Alberto Sottile
b19f2eaaac startTLS: set minimum protocol version to TLS 1.2 2019-02-16 00:03:55 +01:00
Alberto Sottile
abaf178fa6 startTLS: get encrypted connection information after handshake 2019-02-16 00:03:44 +01:00
Alberto Sottile
9e59a8500b startTLS: get server certificate only after handshake 2019-02-16 00:03:33 +01:00
Alberto Sottile
e6912dc659 startTLS: separate not-supported messages for client and server 2019-02-16 00:03:23 +01:00
Alberto Sottile
ff3e49b87d startTLS: show negotiated TLS version 2019-02-16 00:02:18 +01:00
Alberto Sottile
3fc9dcf0af startTLS: handle ui messages 2019-02-16 00:02:06 +01:00
Alberto Sottile
0c46f54510 startTLS: making TLS support (and dependencies) optional 2019-02-16 00:01:55 +01:00
Alberto Sottile
2219bcf4dc startTLS: fix server cert loading function 2019-02-16 00:01:32 +01:00
Alberto Sottile
07fd1434ba startTLS: correct certificate loading and validation 2019-02-16 00:01:02 +01:00
Alberto Sottile
dc5c63a57c startTLS: fall back to TCP if server certificate is not validated 2019-02-16 00:00:23 +01:00
Alberto Sottile
f16ceed539 startTLS: support Let's Encrypt certificates 2019-02-16 00:00:14 +01:00
Alberto Sottile
81e0a20047 startTLS: avoid retrying TLS connection if hostname is an IP address 2019-02-16 00:00:04 +01:00
Alberto Sottile
7910ddec15 startTLS: added --tls [file] argument in server 2019-02-15 23:59:41 +01:00
Alberto Sottile
3eeaeed6dd startTLS: enabled on server and client, TCP stays as default 2019-02-15 23:59:24 +01:00
Alberto Sottile
d7e577ef04 TLS: server listens on both IPv4 and IPv6 2019-02-15 23:58:35 +01:00
Alberto Sottile
8bff90d809 TLS: client-server implementation with self-issued certs on IPv4 2019-02-15 23:58:20 +01:00
Alberto Sottile
7f9e694b04 TLS: server listens on TLS via IPv4 2019-02-15 23:57:54 +01:00
Alberto Sottile
00799faf1c Restore TCP4 and TCP6 server endpoints 2019-02-15 23:57:33 +01:00
Alberto Sottile
8e1f40341c startTLS: change DH key parameter filename 2019-02-15 23:54:37 +01:00
Alberto Sottile
70feed3305 startTLS: enable Diffie-Hellman based key exchange on server 
Following the guidelines reported in the Twisted documentation
here https://twistedmatrix.com/documents/current/core/howto/ssl.html
this commit enables Diffie-Hellman based key exchange on the server.

Before launching the server, a parameters .pem file must be generated
as detailed in https://twistedmatrix.com/documents/18.9.0/api/twisted.internet.ssl.DiffieHellmanParameters.html
by running `openssl dhparam -out dh_param_1024.pem -2 1024`
on the server machine. This parameters file must be placed in the same
path that contains the server certificates.
 2019-02-15 23:54:30 +01:00
Alberto Sottile
810a791332 startTLS: set minimum protocol version to TLS 1.2 2019-02-15 23:53:31 +01:00
Alberto Sottile
51902c8f8c startTLS: get encrypted connection information after handshake 2019-02-15 23:53:23 +01:00
Alberto Sottile
cecb8c9b7b startTLS: get server certificate only after handshake 2019-02-15 23:53:13 +01:00
Alberto Sottile
93052b4b95 startTLS: separate not-supported messages for client and server 2019-02-15 23:53:05 +01:00
Alberto Sottile
6d5a618767 startTLS: show negotiated TLS version 2019-02-15 23:52:57 +01:00
Alberto Sottile
014483b546 startTLS: handle ui messages 2019-02-15 23:52:47 +01:00