Commit Graph

238 Commits

Author SHA1 Message Date
John Safranek
e8e575fd58 public OCSP functions are available, just return errors when OCSP not compiled in 2012-05-24 14:12:28 -07:00
toddouska
baddc07300 check next crl date status 2012-05-24 14:07:59 -07:00
toddouska
73ddd32539 add crl checkall processing 2012-05-24 12:45:10 -07:00
toddouska
db7773aa54 linux crl dir monitoring fixes 2012-05-23 16:55:26 -07:00
toddouska
2b48f248c4 crl dir monitoring for linux and mac 2012-05-22 17:25:15 -07:00
John Safranek
97042d8661 OCSP use URL from cert as appropriate 2012-05-22 15:54:27 -07:00
John Safranek
708f38ac8d added OCSP error codes 2012-05-22 15:52:08 -07:00
John Safranek
09e24d5469 OCSP set option bug fix 2012-05-22 15:38:12 -07:00
John Safranek
2ed143bee0 Merge branch 'master' of github.com:cyassl/cyassl 2012-05-20 14:53:07 -07:00
toddouska
ba6d956d02 fix sniffer resumption for new sessionId flag in 2.2.0 2012-05-19 14:37:26 -07:00
John Safranek
387d9400b9 Merge branch 'master' of github.com:cyassl/cyassl 2012-05-18 17:06:09 -07:00
toddouska
ddb5c3a2aa crl potential memory leak fix 2012-05-18 16:01:21 -07:00
John Safranek
8bf2d13f89 Merge branch 'master' of github.com:cyassl/cyassl 2012-05-18 15:33:54 -07:00
toddouska
88b46d58d7 small warning fix 2012-05-18 12:10:04 -07:00
toddouska
7e322558ef windows build fixes 2012-05-18 11:48:38 -07:00
toddouska
fd70122378 add external der CRL checker 2012-05-18 11:03:44 -07:00
toddouska
26153ffad6 add crl monitor flag, handle no revoked case 2012-05-18 10:52:32 -07:00
John Safranek
a3e94f335b fixed merge conflict 2012-05-18 10:25:16 -07:00
John Safranek
a697a60bfd fixed a bounds check error 2012-05-18 10:06:06 -07:00
toddouska
5bc728b882 fix lots o warnings 2012-05-17 17:44:54 -07:00
toddouska
4b8ab62bd1 don't retrieve or cache null sessions 2012-05-17 10:55:42 -07:00
toddouska
146e7ff1f4 c++ build fixes 2012-05-17 10:05:24 -07:00
Chris Conlon
b9773673f7 minor typo fix in PSK build 2012-05-17 10:20:51 -06:00
toddouska
ac92d30955 fix else braces 2012-05-17 07:55:25 -07:00
toddouska
08d9e57bf6 add crl missing url callback 2012-05-16 17:35:51 -07:00
toddouska
3ec2b9dbbc crl stage 2 2012-05-16 17:04:56 -07:00
toddouska
32095795f2 Merge branch 'master' of github.com:cyassl/cyassl 2012-05-11 12:22:23 -07:00
toddouska
6210ff78aa init crl 2012-05-11 12:22:16 -07:00
toddouska
7b2d62f4f7 don't compare session id if server rejects 2012-05-11 12:21:17 -07:00
John Safranek
59e0181c8d checked the bytes written to the OCSP socket 2012-05-08 19:12:35 -07:00
John Safranek
ea2585963f flattens the serial number 2012-05-08 19:02:25 -07:00
John Safranek
4feeeeda55 OCSP request creation almost complete, added ocsp revoke error code 2012-05-08 18:32:57 -07:00
John Safranek
833552ebac OCSP tweak to clean warnings from build 2012-05-08 14:05:26 -07:00
John Safranek
344b60eb92 Merge branch 'master' of github.com:cyassl/cyassl 2012-05-07 20:16:21 -07:00
toddouska
a97dbb8a14 global rng added to RAND_bytes 2012-05-07 19:36:19 -07:00
toddouska
968dfc4cf7 fortress ssh build fixes 2012-05-07 18:19:48 -07:00
John Safranek
d7d898697a updated OCSP, processes response 2012-05-07 17:19:52 -07:00
John Safranek
5aad32eb28 Merge branch 'master' of github.com:cyassl/cyassl 2012-05-07 17:02:47 -07:00
toddouska
2a817adfcc ssh non ecc 2012-05-07 16:35:23 -07:00
John Safranek
7d1d277535 OCSP: opening socket, starting to build request 2012-05-05 23:38:28 -07:00
John Safranek
f9985f5399 merge fix 2012-05-05 14:49:17 -07:00
toddouska
4278a4ac99 Merge branch 'master' of github.com:cyassl/cyassl 2012-05-03 18:07:46 -07:00
toddouska
4fe81df45c basic extneral cert manager added 2012-05-03 18:07:31 -07:00
Chris Conlon
37e994f4a2 exclude CyaSSL_connect_cert when using NO_CYASSL_CLIENT 2012-05-03 14:48:45 -06:00
toddouska
686a7395b1 fix potential ecc memory leak in ServerKeyExchange 2012-05-03 10:04:18 -07:00
toddouska
97e6a637e6 rest of ECDH suites 2012-05-03 09:57:17 -07:00
toddouska
a54f51d886 first static ECDH suite 2012-05-03 08:18:59 -07:00
John Safranek
7ee09ea23c Merge branch 'master' of github.com:cyassl/cyassl 2012-05-02 21:59:54 -07:00
toddouska
2a5db9371c BN help 2012-05-02 15:11:20 -07:00
John Safranek
669fbf2a14 Merge branch 'master' of github.com:cyassl/cyassl 2012-05-02 14:45:37 -07:00
John Safranek
9c5bcca1ab updates to OCSP 2012-05-02 14:45:30 -07:00
toddouska
1c2b84d3dd ecc client certs 2012-05-02 10:30:15 -07:00
toddouska
f49b106aef ssh2 2012-05-01 16:12:12 -07:00
toddouska
dd431dbeff merge conflict 2012-04-26 15:01:00 -07:00
toddouska
0f5b0ff8c3 sha384 plus merge changes 2012-04-26 14:58:29 -07:00
John Safranek
c0783e4ec4 added configure option and a stub source file for OCSP 2012-04-13 09:39:19 -07:00
toddouska
607fcb2f3d allow peer cert get even on fatal verify 2012-04-09 11:56:28 -07:00
toddouska
b9e6d44bf7 don't reinit mutexes 2012-04-04 16:19:42 -07:00
John Safranek
d3efce71c9 allows one to set the cyassl ex_data to null 2012-03-23 14:39:37 -07:00
toddouska
36529ad873 DevStudio 10 patches 2012-03-23 10:42:07 -07:00
toddouska
41361df2dc update chi square values for new session cache sizes 2012-03-22 12:38:25 -07:00
John Safranek
fc2f329acb added: ex data for CYASSL object, cert cmp function, verify callback call in success case 2012-03-16 10:50:04 -07:00
John Safranek
d7ef83d1b3 Added new session cache size. Added options for Fortress build. 2012-03-12 10:31:45 -07:00
toddouska
815f3b8f75 terminate user psk hint at ssl even if validated at ctx 2012-02-29 10:06:27 -08:00
toddouska
f92df4b4ce fix long user provided path with strncpy 2012-02-29 09:57:03 -08:00
toddouska
6b77c8967a don't allow user override on peer cert ASN_PARSE_E 2012-02-20 12:07:40 -08:00
toddouska
ec85d47a73 allow changing session timeout for ctx and ssl 2012-02-14 17:46:04 -08:00
toddouska
f8e610493c add ability to set Temp EC-DHE key size in octets for ctx or ssl, 20 - 66 allowed for 160bit - 521bit 2012-02-14 12:46:32 -08:00
toddouska
84614da13e increase copyright date 2012 2012-02-13 11:54:10 -08:00
toddouska
20c8fab779 fix ecc cleanup bug with opensslExtra no fastmath 2012-02-13 11:36:07 -08:00
toddouska
03cf62fd07 allow dir path to be defined out NO_CYASSL_DIR, allow file or path on load_verify 2012-02-09 13:21:41 -08:00
toddouska
bce2508878 add path handling (basic) for load_verify_locations() 2012-02-08 18:07:20 -08:00
toddouska
9b5ab7c914 respond to negotiation attempt with alert warning no_renegotiation to try graceful continue if possible 2012-02-01 17:18:40 -08:00
toddouska
ee46bcce4a allow ca cache addition callback 2012-01-26 12:43:48 -08:00
toddouska
bb53240fdf add CyaSSL_X509_get_der(cert) with EXTRA 2012-01-25 14:13:05 -08:00
toddouska
b32bc2ce9f add ability to group handshake messages on send with xxx_set_group_messages() 2012-01-24 13:19:03 -08:00
toddouska
3b7fcc6ca1 add ssmtp build support 2012-01-16 15:11:37 -08:00
toddouska
d9e0c8e526 addca lock mutex failure bug on free 2011-12-19 12:57:44 -08:00
toddouska
7cc11ac8d5 fix BIO free error on not full init w/ opensslExtra server 2011-12-15 18:49:03 -08:00
toddouska
2bc14ce69d add CTX reference count, can free by CTX or SSL 2011-12-07 16:32:18 -08:00
toddouska
247d5b5609 some root CAs loaded by user won't have basic constraint, allow 2011-12-06 15:17:10 -08:00
toddouska
e82516ad2a fix ecc pkcs8 import 2011-12-01 13:10:01 -08:00
toddouska
185e23fc58 microchip pic32 port 2011-11-09 17:32:24 -08:00
toddouska
11d15f32b9 check basic contsraint CA flag before adding as signer even if explicit add 2011-11-02 14:57:14 -07:00
toddouska
8ddd2185c2 warning fixes, 2.0.1 pre 2011-11-01 16:17:45 -07:00
toddouska
ef72bae2ff const correct new API 2011-11-01 14:55:28 -07:00
toddouska
948a901cfc add DH param setting by file and buffer, by ctx too 2011-11-01 14:05:14 -07:00
toddouska
f97759c9e1 hostapd adds 2011-10-31 17:33:40 -07:00
toddouska
cb90900920 wpa adds 2011-10-28 18:43:07 -07:00
toddouska
494d048980 warning fixes 2011-10-11 12:06:04 -07:00
toddouska
290f94c8ad add get_subjectCN 2011-10-04 09:29:10 -07:00
toddouska
27d35d50cc lots o warning fixes for rc3 2011-09-28 13:19:05 -07:00
toddouska
f33839ac5e fixes for ecc w/ new release 2011-09-27 19:52:57 -07:00
Todd A Ouska
c6dd6f589e always trust user override cipher suites 2011-09-25 15:54:53 -07:00
Todd A Ouska
44632b94c2 add der_load_verify_locations 2011-09-23 11:20:13 -07:00
Todd A Ouska
762d6a3e00 fix up for pending release 2011-09-23 10:37:26 -07:00
Todd A Ouska
343ec22c16 check for NULL user pointers on basic inits 2011-09-08 17:04:49 -07:00
Todd A Ouska
526fe9b6d6 have connect_cert verify 2011-09-07 18:06:21 -07:00
Todd A Ouska
8c55e4883e add SMALL_SESSION_CACHE define and configure option 2011-09-06 16:23:25 -07:00
Todd A Ouska
c52d2481b1 rename cyassl-memory.c 2011-08-29 10:42:18 -07:00