John Safranek
831c760edc
Merge branch 'ocsp'
...
Fixes some bugs in the ocsp code, and adds a new option to skip nonces.
2012-12-20 16:26:49 -08:00
John Safranek
51787db76b
changed ocsp lookup to use dynamic mem for request rather than stack
2012-12-19 18:09:05 -08:00
John Safranek
4e657debfc
added the ability to disable OCSP nonces
2012-12-19 10:18:11 -08:00
John Safranek
b36bc55197
Merge branch 'ocsp'
2012-12-17 22:23:31 -08:00
John Safranek
359e86adf6
1. When OCSP and CRL enabled, checks CRL if unable to contact OCSP responder
...
and OCSP was enabled.
2. Fixed a couple string typos.
3. Only check OCSP if cert successfully parsed.
2012-12-17 22:19:20 -08:00
toddouska
b25061844c
remove hmac array initializers to 0 when non full because of reported compiler weirdness from user
2012-12-14 16:47:03 -08:00
toddouska
0e67cd17d6
clang opensslExtra fix
2012-12-12 20:04:10 -08:00
toddouska
726d686b07
fix clang scan-build problems
2012-12-12 18:03:32 -08:00
John Safranek
977ff51ad5
Merge branch 'master' of github.com:cyassl/cyassl
2012-12-12 09:42:21 -08:00
John Safranek
ac1890922b
removed unused variable from lookup cert
2012-12-12 08:53:51 -08:00
toddouska
7e8438b7b4
fix pvs studio warnings
2012-12-11 11:33:49 -08:00
John Safranek
e925fbdbd6
check correct pointer before freeing when done looking up cert
2012-12-07 15:49:43 -08:00
toddouska
5ecca5a89d
user no longer has to call CyaSSL_Init
2012-12-06 09:26:59 -08:00
toddouska
067f10ae8e
add enable-valgrind
2012-12-04 21:28:18 -08:00
John Safranek
8c97675979
Lean PSK trimming
...
1. leave out memory and io callback functions, expect user supplied
2. leave out cert and DTLS related functions
3. SHA-1 compile option to use slower, rolled-up transform
2012-11-30 15:45:43 -08:00
toddouska
6e4d33eb00
move ProtocolVersion struct members directly into RecordLayerHeader
2012-11-28 16:34:41 -08:00
toddouska
6280aa9c91
make sure converted errors are handled by string output
2012-11-28 11:54:25 -08:00
John Safranek
77bf77dfd7
Merge branch 'master' of github.com:cyassl/cyassl
2012-11-27 22:19:01 -08:00
John Safranek
66a3ce2ec1
added SHA-256 based RNG when setting NO_RC4 compile flag
2012-11-27 22:17:25 -08:00
toddouska
4af555b502
unused no_session_cache fix
2012-11-27 15:39:40 -08:00
toddouska
faa7283ff3
fix crl resource leaks
2012-11-27 11:36:36 -08:00
John Safranek
f8f7f69f48
compile option to leave out MD5 and SSL code
2012-11-26 18:40:43 -08:00
John Safranek
78c1d592cc
Merge branch 'master' of github.com:cyassl/cyassl
2012-11-20 14:54:59 -08:00
John Safranek
a89398fdbc
added the cipher suites PSK-NULL-SHA256 and PSK-AES128-CBC-SHA256
2012-11-20 14:52:17 -08:00
toddouska
da386691a1
allow no end of line on last line of PEMs
2012-11-20 12:45:24 -08:00
toddouska
d4035e5f62
add freebsd crl-monitor support
2012-11-16 13:25:45 -08:00
toddouska
dd259b12c7
add CyaSSL_peek()
2012-11-16 12:16:00 -08:00
toddouska
5d912d4c2b
shadow crl-monitor linux fix
2012-11-16 10:54:36 -08:00
toddouska
9ac2eaa3d6
fix ipv6 unused warning, add os check for crl monitor
2012-11-16 10:47:13 -08:00
toddouska
5767db4cb5
minor warnings fixes
2012-11-13 18:32:13 -08:00
Chris Conlon
54a7740cfe
substitue posix.h for errno.h in MQX build
2012-11-12 14:25:59 -07:00
toddouska
53c14bdf1f
fix XMALLOC_USER typos
2012-11-07 17:10:34 -08:00
John Safranek
b8c9247769
for lean-psk build: remove big int math, MD4, error strings
2012-11-02 16:49:31 -07:00
John Safranek
5e48dcbeeb
fixed build warning with Fortress build
2012-11-01 15:59:13 -07:00
John Safranek
9aa8b71525
Merge branch 'nocerts'
2012-11-01 15:47:02 -07:00
John Safranek
90e6a4dd8c
linux build warnings fix
2012-11-01 15:27:05 -07:00
John Safranek
134c6b8b1b
cleaning warnings in OCSP build
2012-11-01 15:03:29 -07:00
toddouska
ae905d70c4
crl warning fixes
2012-11-01 14:14:40 -07:00
John Safranek
85e8f1988a
leanpsk build removes cert code, moved ctaocrypt error strings to own file
2012-11-01 12:36:47 -07:00
toddouska
0e2c236e77
fix x64 windows warnings, make sure word is 64bit
2012-11-01 12:21:47 -07:00
Chris Conlon
f6304ae37a
add support for Freescale MQX
2012-11-01 11:23:42 -06:00
toddouska
a4220120ba
remove memset for setcokopt uninit
2012-10-31 15:43:08 -07:00
toddouska
6348f3f2c7
fix valgrind uninit warning on dtls setsockopt
2012-10-31 13:26:03 -07:00
toddouska
01138a5c53
fix stack-check warnings for newer versions but fastmath still has some so take away warning for now
2012-10-30 17:35:12 -07:00
John Safranek
174618ebfb
added build option for leanPSK
2012-10-29 15:39:42 -07:00
toddouska
35b4f08049
add CyaSSL_send()/recv() with flags parameter
2012-10-26 15:09:58 -07:00
toddouska
d4d5243f4d
add user ability to set IO read/write flags
2012-10-25 14:17:11 -07:00
toddouska
01ae0696af
shorten64 fixes for key-gen/cert-gen
2012-10-25 12:31:11 -07:00
toddouska
0bbbea20be
switch sniffer buffers to dynamic, reduce holding memory if large number of sessions cached
2012-10-24 17:37:57 -07:00
toddouska
3e7619c785
make sure sniffer frees handhsake resources early
2012-10-24 14:51:04 -07:00
toddouska
f969bc3645
if sniffer sees ACK for missing packet(s) set to error, can't recover
2012-10-24 13:33:11 -07:00
John Safranek
ba2a7f2627
Merge branch 'master' of github.com:cyassl/cyassl
2012-10-24 11:27:05 -07:00
John Safranek
936d0ff7a9
fixed off-by-one dtls cookie size check. fixed some warnings when disabling features
2012-10-24 11:05:50 -07:00
toddouska
2885d66b17
remove fatal sniffer error sessions right away
2012-10-23 16:32:47 -07:00
toddouska
4d719897a5
Merge branch 'master' of github.com:cyassl/cyassl
2012-10-22 17:29:19 -07:00
toddouska
aef97af361
make rabbit optional with configure option
2012-10-22 17:28:46 -07:00
John Safranek
5a421c04e7
Merge branch 'master' of github.com:cyassl/cyassl
2012-10-22 14:50:02 -07:00
John Safranek
d78770c1e5
change null cipher to allow different buffers
2012-10-22 14:48:27 -07:00
toddouska
cb08eb672e
Merge branch 'master' of https://github.com/BrianAker/cyassl
2012-10-22 10:56:53 -07:00
John Safranek
a92b639155
add optional null cipher support for RSA
2012-10-19 20:52:22 -07:00
Brian Aker
b883cc55a4
Fix rules around pthread usage to fix clang warning.
2012-10-19 20:09:17 -07:00
toddouska
a5d7a3ea8f
fix opensslExtra with psk server example, add psk to commit tests
2012-10-19 12:54:15 -07:00
toddouska
c974d77213
add shorten 64 to 32 warnings back on with fixes
2012-10-19 12:44:23 -07:00
John Safranek
346a52a58c
add optional null cipher support for PSK
2012-10-19 10:37:21 -07:00
John Safranek
e673b1852a
fixed windows build warnings
2012-10-09 16:13:05 -07:00
toddouska
4a739f6bc7
sniffer handshake state fix for sanity checks
2012-10-05 13:39:11 -07:00
toddouska
57e7e28d6d
Merge branch 'master' of github.com:cyassl/cyassl
2012-10-03 17:10:05 -07:00
toddouska
9ca07d1f4d
dtls may have different first handshake message
2012-10-03 17:09:45 -07:00
John Safranek
0d80343073
Merge branch 'master' of github.com:cyassl/cyassl
2012-10-03 16:53:55 -07:00
toddouska
257d10a69f
sanity check for out of order handshake messages
2012-10-03 16:44:08 -07:00
toddouska
66c95b0c15
DoAppData sanity check for handshake complete
2012-10-03 16:36:00 -07:00
John Safranek
397fbb743f
Merge branch 'master' of github.com:cyassl/cyassl
2012-10-03 15:33:23 -07:00
John Safranek
95a30e3f0a
windows bug fix on dtls retry
2012-10-03 15:29:28 -07:00
toddouska
e970cdfbc0
init cipher specs, check client key exchange state b4 process
2012-10-03 11:57:20 -07:00
John Safranek
9bbca6acfb
Merge branch 'master' of github.com:cyassl/cyassl
2012-10-02 14:42:06 -07:00
John Safranek
6d1e485ef4
DTLS to use recvfrom and sendto in embed recv and send callbacks. Added support for storing dtls peer address.
2012-10-02 09:15:50 -07:00
toddouska
36eeab927b
fix sniffer assert comparison on newer gcc
2012-10-01 13:16:37 -07:00
toddouska
e0413df92a
add key setup flag for malicious or misbehaving handshake messages with new memory system
2012-10-01 11:32:05 -07:00
toddouska
e5c04e70a7
make sure existing nonblocking users still work
2012-09-28 15:10:35 -07:00
toddouska
dd421ebb7d
cleaner sniffer mem fix
2012-09-28 11:04:20 -07:00
toddouska
30bec6c193
fix sniffer out of memory potential problem
2012-09-28 10:58:33 -07:00
John Safranek
dfb84dff37
added accessors for CYASSL members for use in send/recv callbacks
2012-09-25 15:51:56 -07:00
John Safranek
cd0226924a
Merge branch 'master' of github.com:cyassl/cyassl
2012-09-21 16:37:34 -07:00
John Safranek
9643e58dad
fixed bug for Windows build
2012-09-21 16:36:48 -07:00
toddouska
4e19c234f4
fix new warnings on linux64
2012-09-21 13:29:04 -07:00
John Safranek
c3aedc940f
improved dtls retry on connect
2012-09-21 09:36:01 -07:00
John Safranek
08a3423f43
changed error return code for dtls functions to NOT_COMPILED_IN
2012-09-19 09:09:27 -07:00
John Safranek
059db7f69c
check the return code of DtlsPoolSave()
2012-09-18 16:00:30 -07:00
John Safranek
d1068d25d1
fixed another compile warning
2012-09-18 12:05:16 -07:00
John Safranek
68cb6044cb
Merge branch 'master' of github.com:cyassl/cyassl
2012-09-18 11:41:25 -07:00
John Safranek
989d7f4aad
fixed windows build warning
2012-09-18 11:11:45 -07:00
toddouska
f6c5bf032d
update sniffer more memory changes
2012-09-18 09:08:40 -07:00
John Safranek
d1baa9f541
Merge branch 'master' of github.com:cyassl/cyassl
2012-09-18 08:46:11 -07:00
toddouska
53ccbddd01
allow meta PEM data at end of file too
2012-09-17 17:25:38 -07:00
John Safranek
88bba146ae
fixed bug with handshake defragmentation and ordering
2012-09-17 11:32:36 -07:00
John Safranek
40eb5b3cc5
DTLS resend allocates only enough buffer when needed
2012-09-17 09:52:20 -07:00
John Safranek
40972868ce
fix merge conflicts
2012-09-14 21:19:06 -07:00
John Safranek
7899252104
dtls handshake improvement
2012-09-14 19:30:50 -07:00
John Safranek
56ee2eaba8
added dtls message retry
2012-09-14 09:35:34 -07:00
John Safranek
97ca8439a4
Merge branch 'master' of github.com:cyassl/cyassl
2012-09-07 08:30:03 -07:00