Chris Conlon
353f9018f5
Merge pull request #1890 from miyazakh/jamsg
...
Added Japanese message into the examples client and server
2018-10-22 13:44:11 -06:00
Chris Conlon
96abf43238
Merge pull request #1888 from MJSPollard/nidFIX
...
Fixed compilation issues with Asio, Websocket++, and HAProxy
2018-10-22 10:19:05 -06:00
Hideki Miyazaki
6953677a8f
Keep the max line length to 80
2018-10-20 17:15:17 +09:00
Hideki Miyazaki
a27b4c2efb
Added Japanese message into the examples client and server
2018-10-20 13:40:01 +09:00
Carie Pointer
fac6ce794d
Fix HAProxy redefinition warning
2018-10-19 12:14:57 -06:00
MJSPollard
355184bc9b
added fix for failing asio and haproxy tests
2018-10-18 17:32:42 -06:00
David Garske
84fb23cfab
Merge pull request #1880 from kojo1/NID
...
NID definitions are in asn.h
2018-10-18 09:48:20 -07:00
Takashi Kojo
8a872891c5
NID_domainComponent is moved to asn.h
2018-10-18 09:28:15 +09:00
David Garske
095337b1cf
Merge pull request #1878 from kaleb-himes/TEST_COVERAGE_3
...
Test coverage 3
2018-10-17 13:47:10 -07:00
toddouska
dcb105deff
Merge pull request #1876 from dgarske/max_frag_256
...
Added new 256-byte max fragment option `WOLFSSL_MFL_2_8`
2018-10-17 13:21:57 -07:00
kaleb-himes
5ca822b1e9
Peer review changes requested
2018-10-17 10:46:45 -06:00
toddouska
7391f4db90
Merge pull request #1815 from dgarske/atecc508_fixes
...
Fixes for ATECC508A
2018-10-17 08:35:09 -07:00
toddouska
969098518f
Merge pull request #1873 from dgarske/fix_async_multi_rec
...
Fixes and improvements for wolfSSL asynchronous mode
2018-10-17 08:23:27 -07:00
kaleb-himes
2aa6f91144
Reset IV after update via call to encrypt
2018-10-16 18:31:16 -06:00
David Garske
d7d102d90a
Added cipher suite unit tests for max fragment options 1-6 for TLS v1.2 and DTLS v1.2. Fix for client usage comment for max fragment.
2018-10-16 16:47:24 -07:00
David Garske
ab61cefa58
Fix max frag error case tests to use min/max.
2018-10-16 08:58:46 -07:00
David Garske
4adaeb8585
Added new 256-byte max fragment option WOLFSSL_MFL_2_8
.
2018-10-15 17:06:21 -07:00
David Garske
e53694b351
Fix for shared secret callback for client side, where it was not using the provided peer's public key. Fix for ATECC508A to put it into idle mode after operations to prevent watchdog fault mode (can be disabled by defining WOLFSSL_ATECC508A_NOIDLE
). Fixes for callbacks to support using software for non P-256 curves (can be disabled by defining WOLFSSL_ATECC508A_NOSOFTECC
).
2018-10-15 16:01:04 -07:00
David Garske
bd57f5b385
Fix to resolve possible buffer overflow with atmel_get_rev_info
when using byte.
2018-10-15 14:17:43 -07:00
David Garske
177bf49fa6
Updates to the atmel.c code to allow easier customization of the hardware interface.
2018-10-15 14:17:43 -07:00
David Garske
bb737ec99d
Fixes for building against latest CryptoAuthLib. Refactor to eliminate the atcatls function calls, since these have been removed from latest CryptoAuthLib. Cleanup of the slot assignment handling.
2018-10-15 14:17:43 -07:00
David Garske
d67cb9e875
Added new build option for Microchip CryptoAuthLib (--enable-cryptoauthlib). Build fixes with WOLFSSL_ATECC508A enabled.
2018-10-15 14:17:43 -07:00
David Garske
ba9f21bad6
Improvements to the ATECC508A README.md.
2018-10-15 14:17:42 -07:00
David Garske
c51c607e96
Fix to use inLen
for raw public key copy. No need to throw an error for other curve types as this function may be used for software only import/export. In the TLS case with only SECP256R1 there are other places where an error will be thrown.
2018-10-15 14:17:42 -07:00
David Garske
53c2264327
Fix for checking the inLen when setting raw public key len for hardware. Finished the ATECC508A ECC functions to support native TLS with the WOLFSSL_ATECC508A option and SECP256R1. Added slot type for alloc/free. Added helper functions for setting the PK callbacks and custom content. Updated the README.md with build options. Added support for overriding the ATECC_MAX_SLOT. Added overridable define for encryption slot number ATECC_SLOT_I2C_ENC
. Added new build option WOLFSSL_ATECC_PKCB
for using just the reference PK callbacks.
2018-10-15 14:17:42 -07:00
David Garske
7074625048
Added slot callbacks. Improvements for the Atmel time support. Fix to make sure read encryption key is cleared from stack buffer.
2018-10-15 14:17:42 -07:00
David Garske
e78ddfce75
Fix for wc_ecc_import_x963_ex
to handle ATECC508A raw public key. Cleanup of the ATECC508A encryption key support. Added new macro ATCA_TLS_GET_ENC_KEY
to allow setting your own function at build-time for getting the encryption key.
2018-10-15 14:17:42 -07:00
David Garske
be318abbc2
Fixes for building with WOLFSSL_ATECC508A
with latest atca.
2018-10-15 14:17:42 -07:00
David Garske
7c3313481a
Fix for memory cleanup cases in MakeTlsMasterSecret
.
2018-10-15 13:22:55 -07:00
toddouska
f7eb8bf080
Merge pull request #1874 from JacobBarthelmeh/HardwareAcc
...
fix for afalg header install and macro set
2018-10-15 11:51:10 -07:00
Jacob Barthelmeh
23ef832dd3
fix for afalg header install and macro set
2018-10-12 15:45:46 -06:00
David Garske
a0608151cf
Fix for the WOLFSSL_NONBLOCK_OCSP
case to reset the error code as well.
2018-10-12 11:20:13 -07:00
David Garske
5904a97378
Added comments in aes.c for locating software implementation of algorithm using Software AES
.
2018-10-12 10:48:26 -07:00
David Garske
23a0f3cfa1
Added new WOLFSSL_SSLKEYLOGFILE
define to output master secret used by Wireshark logging to file. Defaults to sslkeylog.log
, but can be overridden using WOLFSSL_SSLKEYLOGFILE_OUTPUT
.
2018-10-12 10:47:30 -07:00
David Garske
52210c9d16
Improved error trapping in BuildTlsHandshakeHash
, without altering timing.
2018-10-12 10:45:47 -07:00
David Garske
fc77ed068c
Fix for verify callback to not report override when there is no error. Cleanup of the myVerify
example callback return code handling.
2018-10-12 10:45:20 -07:00
David Garske
6fbeae8f11
Fixes for building with WC_ASYNC_NO_SHA256
. Improvements with WC_ASYNC_NO_HASH
or WC_ASYNC_ENABLE_ECC
to avoid unnecessary memory allocations.
2018-10-12 10:44:26 -07:00
David Garske
fec726f10a
Fix for async issue with receiving multiple TLS records (server_key_exchange
and server_hello_done
) in same packet, which may miss call to DoHandShakeMsgType
-> HashInput
because ssl->error
is still marked pending WC_PENDING_E
.
2018-10-12 10:39:40 -07:00
Chris Conlon
45eb3ae72d
Merge pull request #1871 from miyazakh/work
...
Added Japanese messages that can be enabled by option switch
2018-10-12 10:54:59 -06:00
toddouska
0b78b75530
Merge pull request #1860 from dgarske/tls_either_side
...
Methods cleanup and new DTLS "either" side methods
2018-10-12 07:35:17 -07:00
Hideki Miyazaki
1a34b9da03
Added NO_RSA condition for build failure
2018-10-12 11:02:01 +09:00
David Garske
19905b7798
Merge pull request #1872 from ejohnstown/ext-skip
...
Skip Server Supported Curve Extension
2018-10-11 17:47:08 -07:00
David Garske
1fd791da21
Fix to check response code on InitSSL_Side
calls.
2018-10-11 15:50:22 -07:00
John Safranek
b404d4805f
Skip Server Supported Curve Extension
...
Added a build option, WOLFSSL_ALLOW_SERVER_SC_EXT, that skips the
client's parsing of the supported curve extension if sent by the
server for sessions using < TLSv1.3. The server doesn't need to send it
and the RFCs don't specify what should happen if it does in TLSv1.2, but
it is sent in response from one particular Java based TLS server.
2018-10-11 15:21:32 -07:00
Hideki Miyazaki
63878f32ab
Fixed tests failures on jenkins
2018-10-11 21:43:39 +09:00
Hideki Miyazaki
b736012214
Fixed disable Option Test on jenkins
2018-10-11 19:40:35 +09:00
Hideki Miyazaki
e774bfcf60
Tweaked message in Usage
2018-10-11 18:06:02 +09:00
Hideki Miyazaki
b4b180c1b9
Added Japanese messages that are enabled by option switch
2018-10-11 15:42:50 +09:00
David Garske
9a0ecd4eb6
Merge pull request #1870 from tmael/AddressingCodeCoverage
...
Addressing code coverage
2018-10-10 14:46:32 -07:00
kaleb-himes
f9ff151ee7
wolfSSL_AES_cbc_encrypt unit test refactor, TODO: Decrypt
2018-10-10 16:16:57 -04:00