Sean Parkinson
|
d543e305f1
|
Fix optimized AES-CCM - counter
AES-NI optimized 4 block at a time was not incrementing counter
poprerly.
|
2020-06-08 10:48:19 +10:00 |
|
David Garske
|
3af4316cfd
|
Fix for session test with TLS v1.3 and session tickets not enabled. Cleanups in AddSession.
|
2020-06-05 13:33:03 -07:00 |
|
David Garske
|
fb5c9e5268
|
Adjust static memory case with TLS v1.3 enabled.
|
2020-06-05 11:11:23 -07:00 |
|
David Garske
|
3b8455fcd0
|
Fix for building without ECC and DH (TLS v1.3 cannot be enabled).
|
2020-06-05 10:26:32 -07:00 |
|
Juliusz Sosinowicz
|
a75f83c9f2
|
Implement CRYPTO_memcmp
|
2020-06-05 16:44:12 +02:00 |
|
Daniele Lacamera
|
254dd9f823
|
Added new files to include.am
|
2020-06-05 15:28:49 +02:00 |
|
Daniele Lacamera
|
76ab8bfb6b
|
Added psoc6 ECDSA verification support
|
2020-06-05 11:30:29 +02:00 |
|
Daniele Lacamera
|
b1947478bb
|
Added support for SHA512 via psoc6 crypto
|
2020-06-05 11:30:29 +02:00 |
|
Daniele Lacamera
|
82520572b0
|
Initial support for psoc6_crypto (sha256 only)
|
2020-06-05 11:30:29 +02:00 |
|
David Garske
|
dffc677561
|
Fix for TLS v1.3 with --enable-sniffer.
|
2020-06-04 16:42:40 -07:00 |
|
David Garske
|
7879e83ae0
|
Fixes for building with ./configure --enable-tls13 --disable-rsa --disable-ecc --enable-psk. Fix to properly detect if missing a asymmetric key algorithm (required by TLS v1.3).
|
2020-06-04 16:31:19 -07:00 |
|
David Garske
|
1d01b87741
|
Fix to detect if NO_CERTS / --disable-asn is used in scripts/tls13.test.
|
2020-06-04 16:08:08 -07:00 |
|
David Garske
|
66fdc2c536
|
Disable TLS v1.3 if none of these are available "ECC, CURVE25519, CURVE448 or DH".
|
2020-06-04 15:31:19 -07:00 |
|
David Garske
|
93be04f380
|
Can't send empty list for the client when sniffer is enabled or it will use AES128-SHA.
|
2020-06-04 15:31:18 -07:00 |
|
David Garske
|
ad93813d75
|
Fix for expected failure case on client write. Resolves test-fails.con server TLSv1.3 fail on no client certificate test.
|
2020-06-04 15:31:18 -07:00 |
|
David Garske
|
d4fdd1e590
|
Fix for TLS v1.3 test PSK callback to support cipher list. Add support for GetCipherSuiteFromName to accept a name ending with colon.
|
2020-06-04 15:31:18 -07:00 |
|
David Garske
|
3b63e55a68
|
Fix for TLS v1.3 PSK tests work with additional cipher suites (not just TLS13-AES128-GCM-SHA256) and the echo server/client.
|
2020-06-04 15:31:18 -07:00 |
|
David Garske
|
8823a581d0
|
Add PSK user context support (Fixes #2952.).
|
2020-06-04 15:31:18 -07:00 |
|
David Garske
|
0228d1eeea
|
Cleanups for the TLS v1.3 build requirements. Add check for TLS v1.3 call to EncodeSigAlg.
|
2020-06-04 15:31:18 -07:00 |
|
David Garske
|
ab2afbd37b
|
Allow the TLS 13 draft 18 build option and just use the final version. This allows the automated test scripts to pass.
|
2020-06-04 15:31:18 -07:00 |
|
David Garske
|
4d8cf5b571
|
Fixes for building TLSv1.3 with FIPS v1 (no RSA PSS or HKDF).
|
2020-06-04 15:31:18 -07:00 |
|
David Garske
|
8300754ecd
|
Fix for "testsuite" with TLSv1.3 and --enable-sniffer.
|
2020-06-04 15:31:18 -07:00 |
|
David Garske
|
ba8227bcf7
|
Fix for building TLS v1.3 with NO_WOLFSSL_CLIENT.
|
2020-06-04 15:31:18 -07:00 |
|
David Garske
|
b417a76613
|
Fixes for build TLS v1.3 with NO_CERTS.
|
2020-06-04 15:31:18 -07:00 |
|
David Garske
|
093d9981fb
|
Disable fast-rsa if RSA PSS is enabled (not supported).
|
2020-06-04 15:31:18 -07:00 |
|
David Garske
|
cd1c2d5fae
|
Enable TLS v1.3 by default. Remove old TLS v1.3 draft build support.
|
2020-06-04 15:31:18 -07:00 |
|
David Garske
|
ca9dc7d509
|
Fix for wc_ecc_import_unsigned failing if first private key byte is zero (Fixes #2950). Fix wc_ecc_is_point to return better code IS_POINT_E on failure (was returning -1). Improved ECC import API unit tests. Added WOLFSSL_VALIDATE_ECC_IMPORT and WOLFSSL_VALIDATE_ECC_KEYGEN to --enable-all.
|
2020-06-04 15:25:56 -07:00 |
|
toddouska
|
3529d9a40d
|
Merge pull request #3016 from kaleb-himes/FIPSv2-MAINTENANCE
New OpenSSL features relying on changes in module files must account for locked FIPS versions of those files
|
2020-06-04 15:08:17 -07:00 |
|
JacobBarthelmeh
|
976db2545d
|
Merge pull request #3007 from embhorn/zd10318
Fix OOB access in ParseCRL
|
2020-06-04 13:11:59 -06:00 |
|
toddouska
|
23d1550439
|
Merge pull request #2989 from julek-wolfssl/openvpn
Additional OpenSSL compat layer stuff
|
2020-06-04 11:57:55 -07:00 |
|
toddouska
|
b48699c1f0
|
Merge pull request #3022 from cconlon/jnisni
enable SNI by default for JNI/JSSE build
|
2020-06-04 11:07:56 -07:00 |
|
toddouska
|
79465d70f7
|
Merge pull request #3020 from SparkiDev/tls13_psk_cr
TLS 1.3: Never send CertiifcateRequest when PSK
|
2020-06-04 11:07:22 -07:00 |
|
Jacob Barthelmeh
|
c8b87eab5f
|
fix macro to match *_FLAGS_*
|
2020-06-04 11:53:46 -06:00 |
|
kaleb-himes
|
5a4d84ecad
|
Consolidate to one-line where possible
|
2020-06-03 16:19:34 -06:00 |
|
toddouska
|
c3407e2052
|
Merge pull request #3004 from SparkiDev/asn1_int_lead_0_any
Define to allow badly formed ASN integers
|
2020-06-03 14:55:04 -07:00 |
|
toddouska
|
4ddbe546a3
|
Merge pull request #2993 from dgarske/math_fixes
Improvements around the ECC max bits calculation
|
2020-06-03 14:53:51 -07:00 |
|
Eric Blankenhorn
|
4b10f6aa03
|
Update from review
|
2020-06-03 15:56:46 -05:00 |
|
Chris Conlon
|
0b9d06e529
|
return value from FailTestCallBack to prevent NetBSD noreturn warning
|
2020-06-03 14:45:31 -06:00 |
|
Tesfa Mael
|
d000ceb495
|
Resolve Warnings
|
2020-06-03 13:42:37 -07:00 |
|
Chris Conlon
|
cafcaa4181
|
enable SNI by default for JNI/JSSE build
|
2020-06-03 14:24:10 -06:00 |
|
Chris Conlon
|
504b887851
|
fix NetBSD warnings in ASN1_INTEGER_set() tests around int max/min
|
2020-06-03 14:14:43 -06:00 |
|
Chris Conlon
|
1c1a01fffe
|
rename dup to resolve NetBSD global shadow warnings
|
2020-06-03 14:11:12 -06:00 |
|
Chris Conlon
|
d220168384
|
Merge pull request #3017 from kojo1/supplicant-error
alertWhy: unknown_ca for ASN_NO_SIGNER_E
|
2020-06-03 10:44:31 -05:00 |
|
Tesfa Mael
|
6176f8537f
|
Typecast to fix conversion loses
|
2020-06-02 22:06:14 -07:00 |
|
Sean Parkinson
|
0d1ed9efc7
|
TLS 1.3: Never send CertiifcateRequest when PSK
Server must not send a CertificateRequest when authenticating with a
PSK.
Increase the max size of the signature algorithms as ED448 has been
added.
|
2020-06-03 12:48:31 +10:00 |
|
Tesfa Mael
|
d5241bbcc6
|
Coverity fix
|
2020-06-02 15:35:27 -07:00 |
|
kaleb-himes
|
8cd92f68f2
|
init components as best practice
|
2020-06-02 14:28:50 -06:00 |
|
toddouska
|
dc1472692a
|
Merge pull request #3011 from dgarske/nomalloc
Fixes for using static memory with no malloc
|
2020-06-02 11:46:29 -07:00 |
|
toddouska
|
c7331fa699
|
Merge pull request #3008 from embhorn/zd10320
Fix possible NULL dereference error in TLSX_SecureRenegotiation_Parse
|
2020-06-02 11:13:17 -07:00 |
|
kaleb-himes
|
6ab5f2d9d7
|
remove unused variables
|
2020-06-01 17:56:03 -06:00 |
|