toddouska
|
a2bd6e786d
|
fix leanpsk NO_SHA build
|
2013-04-10 12:42:51 -07:00 |
|
John Safranek
|
9b0ffa0249
|
brought CYASSL_CALLBACK code up to current standard
|
2013-04-08 15:34:54 -07:00 |
|
John Safranek
|
e9bc868dbb
|
AES-GCM does not require SHA-384, but will use it if enabled in build; reorder some of the requirement checks to regroup some NO_RSA suite checks
|
2013-04-01 14:25:20 -07:00 |
|
toddouska
|
82e3c00075
|
add CYASSL_GENERAL_ALIGNMENT detection and setting for TLS alignment attempt
|
2013-03-27 15:11:49 -07:00 |
|
John Safranek
|
f65f86bb88
|
improvements to CCM, ssn6
|
2013-03-22 11:30:12 -07:00 |
|
toddouska
|
4f9e915bc1
|
add KEEP_PEER_CERT flag for non opensslextra peer cert storage, ssn3
|
2013-03-19 12:18:52 -07:00 |
|
toddouska
|
31b03c8a2d
|
dtls defaults to no static buffers now, fix valgrind errors with dtls
|
2013-03-15 14:21:36 -07:00 |
|
toddouska
|
e515638503
|
make EmbedGenerateCookie a callback, USER_IO can install their own or default to ours
|
2013-03-13 16:41:50 -07:00 |
|
toddouska
|
7914938e60
|
--enable-md5 and build, needs NO_OLD_TLS, suite test version check
|
2013-03-11 17:37:08 -07:00 |
|
toddouska
|
49e62f0858
|
fix general NO_SHA NO_ASN NO_CERTS NO_SESSION_CACHE builds/examples
|
2013-03-11 16:07:46 -07:00 |
|
toddouska
|
7ce9315173
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2013-03-11 11:00:47 -07:00 |
|
toddouska
|
47e7e27bb2
|
add cipher suite check to suite tests to make adding test cases easier
|
2013-03-11 10:59:08 -07:00 |
|
John Safranek
|
20e4889092
|
Merge branch 'dtls'
Conflicts:
src/ssl.c
|
2013-03-08 17:45:35 -08:00 |
|
toddouska
|
6b3a80366f
|
NO_RSA with ecc build fixes
|
2013-03-07 18:10:18 -08:00 |
|
toddouska
|
85b3346bbf
|
NO_RSA build, cipher suite tests need work for this build optoin, ssn2
|
2013-03-07 17:44:40 -08:00 |
|
John Safranek
|
591e1fc772
|
DTLSv1.2, fixed DTLS socket timeout
|
2013-03-06 23:02:33 -08:00 |
|
John Safranek
|
d52fe96063
|
added AES-CBC-SHA256 and SHA384 cipher suites.
|
2013-03-04 13:25:46 -08:00 |
|
toddouska
|
cc9ac1846d
|
fix ecc w/ no rsa send cert verify and server flag for missing cert verify
|
2013-02-26 22:24:34 -08:00 |
|
John Safranek
|
6ff39cffe4
|
Merge branch 'dtls'
Conflicts:
cyassl/ctaocrypt/types.h
|
2013-02-20 17:08:22 -08:00 |
|
John Safranek
|
2c1ed7c11c
|
removed old defragmentation code. fixed new defragment code.
|
2013-02-20 08:35:33 -08:00 |
|
John Safranek
|
bdadeab342
|
added storing of out-of-order and fragmented message, missing processing of the stored list
|
2013-02-19 16:06:02 -08:00 |
|
John Safranek
|
116f2403d0
|
updated the list for storing out of order messages
|
2013-02-19 12:51:02 -08:00 |
|
John Safranek
|
87cad7a966
|
merge branch tls12 into master
|
2013-02-18 14:36:50 -08:00 |
|
toddouska
|
9ea3371079
|
2nd round scan build
|
2013-02-14 16:00:45 -08:00 |
|
John Safranek
|
982b72796e
|
added list for DTLS handshake datagram reordering
|
2013-02-07 11:26:02 -08:00 |
|
toddouska
|
44e0d7543c
|
change copyright name with name change
|
2013-02-05 12:44:17 -08:00 |
|
toddouska
|
f4f13371f9
|
update copyright date
|
2013-02-04 14:51:41 -08:00 |
|
Todd Ouska
|
44b6593fe5
|
add cavium ciphers to SSL, and example client
|
2013-02-01 12:21:38 -08:00 |
|
John Safranek
|
6616975f81
|
added AES-CCM-8 ECC cipher suites, and more test cases
|
2013-01-21 15:19:45 -08:00 |
|
John Safranek
|
a453ccba57
|
Added TLS support for Camellia
|
2013-01-21 10:53:42 -08:00 |
|
John Safranek
|
ccff37f4b1
|
added TLS support for AES-CCM-8
|
2013-01-15 15:20:30 -08:00 |
|
John Safranek
|
eb221238c2
|
separated TLS-AEAD and AES-GCM so TLS-AEAD can also use AES-CCM
|
2013-01-14 15:59:53 -08:00 |
|
John Safranek
|
f756573401
|
Merge branch 'ocsp-test'
|
2013-01-04 14:11:47 -08:00 |
|
John Safranek
|
ac227910f1
|
modify OCSP to use a replacable callback to perform the OCSP transaction
|
2013-01-03 17:19:56 -08:00 |
|
toddouska
|
53e4c2ed72
|
fix pvs studio warnings
|
2013-01-02 11:39:12 -08:00 |
|
toddouska
|
6d3728fe61
|
fix ripemd compression round
|
2012-12-28 14:19:28 -08:00 |
|
toddouska
|
561906cffd
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2012-12-27 16:36:48 -08:00 |
|
toddouska
|
f0bc61a5d3
|
add more robust pad/verify checks
|
2012-12-27 16:35:43 -08:00 |
|
John Safranek
|
cf114b92df
|
made the ecc keys in the CYASSL struct dynamic
|
2012-12-26 16:39:19 -08:00 |
|
John Safranek
|
831c760edc
|
Merge branch 'ocsp'
Fixes some bugs in the ocsp code, and adds a new option to skip nonces.
|
2012-12-20 16:26:49 -08:00 |
|
John Safranek
|
4e657debfc
|
added the ability to disable OCSP nonces
|
2012-12-19 10:18:11 -08:00 |
|
toddouska
|
96cc05b7b1
|
fix shadow warning
|
2012-12-18 11:40:45 -08:00 |
|
toddouska
|
6e4d33eb00
|
move ProtocolVersion struct members directly into RecordLayerHeader
|
2012-11-28 16:34:41 -08:00 |
|
John Safranek
|
66a3ce2ec1
|
added SHA-256 based RNG when setting NO_RC4 compile flag
|
2012-11-27 22:17:25 -08:00 |
|
John Safranek
|
f8f7f69f48
|
compile option to leave out MD5 and SSL code
|
2012-11-26 18:40:43 -08:00 |
|
John Safranek
|
a89398fdbc
|
added the cipher suites PSK-NULL-SHA256 and PSK-AES128-CBC-SHA256
|
2012-11-20 14:52:17 -08:00 |
|
toddouska
|
dd259b12c7
|
add CyaSSL_peek()
|
2012-11-16 12:16:00 -08:00 |
|
toddouska
|
4a007a2fa0
|
make MAX_CHAIN_DEPTH a build time define and default to 9
|
2012-11-05 10:40:06 -08:00 |
|
John Safranek
|
9aa8b71525
|
Merge branch 'nocerts'
|
2012-11-01 15:47:02 -07:00 |
|
John Safranek
|
134c6b8b1b
|
cleaning warnings in OCSP build
|
2012-11-01 15:03:29 -07:00 |
|
John Safranek
|
85e8f1988a
|
leanpsk build removes cert code, moved ctaocrypt error strings to own file
|
2012-11-01 12:36:47 -07:00 |
|
Chris Conlon
|
f6304ae37a
|
add support for Freescale MQX
|
2012-11-01 11:23:42 -06:00 |
|
John Safranek
|
174618ebfb
|
added build option for leanPSK
|
2012-10-29 15:39:42 -07:00 |
|
toddouska
|
d4d5243f4d
|
add user ability to set IO read/write flags
|
2012-10-25 14:17:11 -07:00 |
|
toddouska
|
0bbbea20be
|
switch sniffer buffers to dynamic, reduce holding memory if large number of sessions cached
|
2012-10-24 17:37:57 -07:00 |
|
John Safranek
|
a92b639155
|
add optional null cipher support for RSA
|
2012-10-19 20:52:22 -07:00 |
|
John Safranek
|
346a52a58c
|
add optional null cipher support for PSK
|
2012-10-19 10:37:21 -07:00 |
|
John Safranek
|
e673b1852a
|
fixed windows build warnings
|
2012-10-09 16:13:05 -07:00 |
|
John Safranek
|
397fbb743f
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2012-10-03 15:33:23 -07:00 |
|
toddouska
|
e970cdfbc0
|
init cipher specs, check client key exchange state b4 process
|
2012-10-03 11:57:20 -07:00 |
|
John Safranek
|
9bbca6acfb
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2012-10-02 14:42:06 -07:00 |
|
John Safranek
|
6d1e485ef4
|
DTLS to use recvfrom and sendto in embed recv and send callbacks. Added support for storing dtls peer address.
|
2012-10-02 09:15:50 -07:00 |
|
toddouska
|
e0413df92a
|
add key setup flag for malicious or misbehaving handshake messages with new memory system
|
2012-10-01 11:32:05 -07:00 |
|
John Safranek
|
40eb5b3cc5
|
DTLS resend allocates only enough buffer when needed
|
2012-09-17 09:52:20 -07:00 |
|
John Safranek
|
40972868ce
|
fix merge conflicts
|
2012-09-14 21:19:06 -07:00 |
|
John Safranek
|
7899252104
|
dtls handshake improvement
|
2012-09-14 19:30:50 -07:00 |
|
John Safranek
|
56ee2eaba8
|
added dtls message retry
|
2012-09-14 09:35:34 -07:00 |
|
John Safranek
|
97ca8439a4
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2012-09-07 08:30:03 -07:00 |
|
John Safranek
|
407397e8be
|
adding DTLS retry timeout, added CYASSL pointer to recv/send callbacks
|
2012-09-06 22:41:55 -07:00 |
|
toddouska
|
8c32a5a2ed
|
make RNG in ssl dynamic, release after hs if stream or < tls1.1
|
2012-09-05 16:18:29 -07:00 |
|
toddouska
|
9ddf43268d
|
use dynamic memory for ssl ciphers, only use what needed
|
2012-09-05 12:30:51 -07:00 |
|
toddouska
|
c47afaf84f
|
make suites object dynamic, only use during handshake
|
2012-09-05 10:17:48 -07:00 |
|
toddouska
|
6943229f87
|
reduce client key exchange stack use in non NTRU mode
|
2012-09-04 15:56:52 -07:00 |
|
toddouska
|
1ba8aff525
|
don't allow corrupted change cipher (fix by antoxa), don't allow multiple decryptions of corrupted messages
|
2012-09-04 11:37:47 -07:00 |
|
John Safranek
|
561a7fc35d
|
drop out of order dtls packets
|
2012-08-23 15:50:56 -07:00 |
|
John Safranek
|
c20eb88d3d
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2012-08-17 14:21:17 -07:00 |
|
toddouska
|
925ddb6626
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2012-08-15 17:00:34 -07:00 |
|
toddouska
|
05692e1d6a
|
IAR fixes, SafeRTOS port, better LWIP support
|
2012-08-15 17:00:11 -07:00 |
|
John Safranek
|
c42792e0f1
|
fix compiler warnings
|
2012-08-14 13:51:56 -07:00 |
|
John Safranek
|
9d912970c8
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2012-08-13 17:33:20 -07:00 |
|
Chris Conlon
|
7ec04c16b6
|
EBSnet RTIP support
|
2012-08-13 17:10:05 -06:00 |
|
John Safranek
|
70552ef8e1
|
added DTLS handshake message defragmentation
|
2012-08-10 10:24:31 -07:00 |
|
John Safranek
|
11df1d25d4
|
fixed the dtls handshake header handling
|
2012-08-09 13:27:30 -07:00 |
|
toddouska
|
08ff33894f
|
add ECDH static cipher suite tests including RSA signed ECDH, clean up code with haveECDSA -> haveECDSAsig
|
2012-08-08 15:09:26 -07:00 |
|
John Safranek
|
3747246133
|
added the generation, verification, and client usage of DTLS handshake cookies
|
2012-08-08 10:38:12 -07:00 |
|
Chris Conlon
|
afa27f0021
|
FreeRTOS threads support, windows simulator support
|
2012-08-02 09:54:41 -06:00 |
|
John Safranek
|
b8b5e7b873
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2012-07-31 18:42:44 -07:00 |
|
toddouska
|
a5af2e3d51
|
add altname retrieval from peer cert
|
2012-07-31 17:45:48 -07:00 |
|
John Safranek
|
368afbb815
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2012-07-31 10:11:21 -07:00 |
|
John Safranek
|
e716380bad
|
fixed a bug where aes-gcm required opensslExtra at build configure
|
2012-07-31 10:07:33 -07:00 |
|
toddouska
|
e2eb1b78cc
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2012-07-27 12:32:42 -07:00 |
|
toddouska
|
6e84ab1271
|
add max chain depth unique error, increase depth to 6
|
2012-07-27 12:32:22 -07:00 |
|
John Safranek
|
3cd231bdfc
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2012-07-24 15:04:16 -07:00 |
|
toddouska
|
6d3c7d8c59
|
allow bigger MTU record for sniffer
|
2012-07-20 13:04:03 -07:00 |
|
John Safranek
|
489fbf17fe
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2012-07-19 17:22:16 -07:00 |
|
toddouska
|
d607ffaf02
|
fix MAX_MSG_EXTRA for SHA-256 digest with IV with dynamic buffers
|
2012-07-17 11:52:13 -07:00 |
|
John Safranek
|
ac79d3b145
|
replaced magic numbers with named constants, renamed some constants
|
2012-07-17 10:00:45 -07:00 |
|
John Safranek
|
aaad893804
|
fixed merge conflict
|
2012-07-12 08:39:57 -07:00 |
|
toddouska
|
1f0a32a7e3
|
use internal enum for cipher requires, move external enums back to starting at zero
|
2012-07-11 17:00:16 -07:00 |
|
John Safranek
|
1ac6db9d1d
|
added basic hello extension support for TLSv1.2, renumbered the algorithm enumerations to match RFC
|
2012-07-09 10:02:34 -07:00 |
|