toddouska
|
3ec2b9dbbc
|
crl stage 2
|
2012-05-16 17:04:56 -07:00 |
|
toddouska
|
32095795f2
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2012-05-11 12:22:23 -07:00 |
|
toddouska
|
6210ff78aa
|
init crl
|
2012-05-11 12:22:16 -07:00 |
|
toddouska
|
7b2d62f4f7
|
don't compare session id if server rejects
|
2012-05-11 12:21:17 -07:00 |
|
John Safranek
|
59e0181c8d
|
checked the bytes written to the OCSP socket
|
2012-05-08 19:12:35 -07:00 |
|
John Safranek
|
ea2585963f
|
flattens the serial number
|
2012-05-08 19:02:25 -07:00 |
|
John Safranek
|
4feeeeda55
|
OCSP request creation almost complete, added ocsp revoke error code
|
2012-05-08 18:32:57 -07:00 |
|
John Safranek
|
833552ebac
|
OCSP tweak to clean warnings from build
|
2012-05-08 14:05:26 -07:00 |
|
John Safranek
|
344b60eb92
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2012-05-07 20:16:21 -07:00 |
|
toddouska
|
a97dbb8a14
|
global rng added to RAND_bytes
|
2012-05-07 19:36:19 -07:00 |
|
toddouska
|
968dfc4cf7
|
fortress ssh build fixes
|
2012-05-07 18:19:48 -07:00 |
|
John Safranek
|
d7d898697a
|
updated OCSP, processes response
|
2012-05-07 17:19:52 -07:00 |
|
John Safranek
|
5aad32eb28
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2012-05-07 17:02:47 -07:00 |
|
toddouska
|
2a817adfcc
|
ssh non ecc
|
2012-05-07 16:35:23 -07:00 |
|
John Safranek
|
7d1d277535
|
OCSP: opening socket, starting to build request
|
2012-05-05 23:38:28 -07:00 |
|
John Safranek
|
f9985f5399
|
merge fix
|
2012-05-05 14:49:17 -07:00 |
|
toddouska
|
4278a4ac99
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2012-05-03 18:07:46 -07:00 |
|
toddouska
|
4fe81df45c
|
basic extneral cert manager added
|
2012-05-03 18:07:31 -07:00 |
|
Chris Conlon
|
37e994f4a2
|
exclude CyaSSL_connect_cert when using NO_CYASSL_CLIENT
|
2012-05-03 14:48:45 -06:00 |
|
toddouska
|
686a7395b1
|
fix potential ecc memory leak in ServerKeyExchange
|
2012-05-03 10:04:18 -07:00 |
|
toddouska
|
97e6a637e6
|
rest of ECDH suites
|
2012-05-03 09:57:17 -07:00 |
|
toddouska
|
a54f51d886
|
first static ECDH suite
|
2012-05-03 08:18:59 -07:00 |
|
John Safranek
|
7ee09ea23c
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2012-05-02 21:59:54 -07:00 |
|
toddouska
|
2a5db9371c
|
BN help
|
2012-05-02 15:11:20 -07:00 |
|
John Safranek
|
669fbf2a14
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2012-05-02 14:45:37 -07:00 |
|
John Safranek
|
9c5bcca1ab
|
updates to OCSP
|
2012-05-02 14:45:30 -07:00 |
|
toddouska
|
1c2b84d3dd
|
ecc client certs
|
2012-05-02 10:30:15 -07:00 |
|
toddouska
|
f49b106aef
|
ssh2
|
2012-05-01 16:12:12 -07:00 |
|
toddouska
|
dd431dbeff
|
merge conflict
|
2012-04-26 15:01:00 -07:00 |
|
toddouska
|
0f5b0ff8c3
|
sha384 plus merge changes
|
2012-04-26 14:58:29 -07:00 |
|
John Safranek
|
c0783e4ec4
|
added configure option and a stub source file for OCSP
|
2012-04-13 09:39:19 -07:00 |
|
toddouska
|
607fcb2f3d
|
allow peer cert get even on fatal verify
|
2012-04-09 11:56:28 -07:00 |
|
toddouska
|
b9e6d44bf7
|
don't reinit mutexes
|
2012-04-04 16:19:42 -07:00 |
|
John Safranek
|
d3efce71c9
|
allows one to set the cyassl ex_data to null
|
2012-03-23 14:39:37 -07:00 |
|
toddouska
|
36529ad873
|
DevStudio 10 patches
|
2012-03-23 10:42:07 -07:00 |
|
toddouska
|
41361df2dc
|
update chi square values for new session cache sizes
|
2012-03-22 12:38:25 -07:00 |
|
John Safranek
|
fc2f329acb
|
added: ex data for CYASSL object, cert cmp function, verify callback call in success case
|
2012-03-16 10:50:04 -07:00 |
|
John Safranek
|
d7ef83d1b3
|
Added new session cache size. Added options for Fortress build.
|
2012-03-12 10:31:45 -07:00 |
|
toddouska
|
815f3b8f75
|
terminate user psk hint at ssl even if validated at ctx
|
2012-02-29 10:06:27 -08:00 |
|
toddouska
|
f92df4b4ce
|
fix long user provided path with strncpy
|
2012-02-29 09:57:03 -08:00 |
|
toddouska
|
6b77c8967a
|
don't allow user override on peer cert ASN_PARSE_E
|
2012-02-20 12:07:40 -08:00 |
|
toddouska
|
ec85d47a73
|
allow changing session timeout for ctx and ssl
|
2012-02-14 17:46:04 -08:00 |
|
toddouska
|
f8e610493c
|
add ability to set Temp EC-DHE key size in octets for ctx or ssl, 20 - 66 allowed for 160bit - 521bit
|
2012-02-14 12:46:32 -08:00 |
|
toddouska
|
84614da13e
|
increase copyright date 2012
|
2012-02-13 11:54:10 -08:00 |
|
toddouska
|
20c8fab779
|
fix ecc cleanup bug with opensslExtra no fastmath
|
2012-02-13 11:36:07 -08:00 |
|
toddouska
|
03cf62fd07
|
allow dir path to be defined out NO_CYASSL_DIR, allow file or path on load_verify
|
2012-02-09 13:21:41 -08:00 |
|
toddouska
|
bce2508878
|
add path handling (basic) for load_verify_locations()
|
2012-02-08 18:07:20 -08:00 |
|
toddouska
|
9b5ab7c914
|
respond to negotiation attempt with alert warning no_renegotiation to try graceful continue if possible
|
2012-02-01 17:18:40 -08:00 |
|
toddouska
|
ee46bcce4a
|
allow ca cache addition callback
|
2012-01-26 12:43:48 -08:00 |
|
toddouska
|
bb53240fdf
|
add CyaSSL_X509_get_der(cert) with EXTRA
|
2012-01-25 14:13:05 -08:00 |
|
toddouska
|
b32bc2ce9f
|
add ability to group handshake messages on send with xxx_set_group_messages()
|
2012-01-24 13:19:03 -08:00 |
|
toddouska
|
3b7fcc6ca1
|
add ssmtp build support
|
2012-01-16 15:11:37 -08:00 |
|
toddouska
|
d9e0c8e526
|
addca lock mutex failure bug on free
|
2011-12-19 12:57:44 -08:00 |
|
toddouska
|
7cc11ac8d5
|
fix BIO free error on not full init w/ opensslExtra server
|
2011-12-15 18:49:03 -08:00 |
|
toddouska
|
2bc14ce69d
|
add CTX reference count, can free by CTX or SSL
|
2011-12-07 16:32:18 -08:00 |
|
toddouska
|
247d5b5609
|
some root CAs loaded by user won't have basic constraint, allow
|
2011-12-06 15:17:10 -08:00 |
|
toddouska
|
e82516ad2a
|
fix ecc pkcs8 import
|
2011-12-01 13:10:01 -08:00 |
|
toddouska
|
185e23fc58
|
microchip pic32 port
|
2011-11-09 17:32:24 -08:00 |
|
toddouska
|
11d15f32b9
|
check basic contsraint CA flag before adding as signer even if explicit add
|
2011-11-02 14:57:14 -07:00 |
|
toddouska
|
8ddd2185c2
|
warning fixes, 2.0.1 pre
|
2011-11-01 16:17:45 -07:00 |
|
toddouska
|
ef72bae2ff
|
const correct new API
|
2011-11-01 14:55:28 -07:00 |
|
toddouska
|
948a901cfc
|
add DH param setting by file and buffer, by ctx too
|
2011-11-01 14:05:14 -07:00 |
|
toddouska
|
f97759c9e1
|
hostapd adds
|
2011-10-31 17:33:40 -07:00 |
|
toddouska
|
cb90900920
|
wpa adds
|
2011-10-28 18:43:07 -07:00 |
|
toddouska
|
494d048980
|
warning fixes
|
2011-10-11 12:06:04 -07:00 |
|
toddouska
|
290f94c8ad
|
add get_subjectCN
|
2011-10-04 09:29:10 -07:00 |
|
toddouska
|
27d35d50cc
|
lots o warning fixes for rc3
|
2011-09-28 13:19:05 -07:00 |
|
toddouska
|
f33839ac5e
|
fixes for ecc w/ new release
|
2011-09-27 19:52:57 -07:00 |
|
Todd A Ouska
|
c6dd6f589e
|
always trust user override cipher suites
|
2011-09-25 15:54:53 -07:00 |
|
Todd A Ouska
|
44632b94c2
|
add der_load_verify_locations
|
2011-09-23 11:20:13 -07:00 |
|
Todd A Ouska
|
762d6a3e00
|
fix up for pending release
|
2011-09-23 10:37:26 -07:00 |
|
Todd A Ouska
|
343ec22c16
|
check for NULL user pointers on basic inits
|
2011-09-08 17:04:49 -07:00 |
|
Todd A Ouska
|
526fe9b6d6
|
have connect_cert verify
|
2011-09-07 18:06:21 -07:00 |
|
Todd A Ouska
|
8c55e4883e
|
add SMALL_SESSION_CACHE define and configure option
|
2011-09-06 16:23:25 -07:00 |
|
Todd A Ouska
|
c52d2481b1
|
rename cyassl-memory.c
|
2011-08-29 10:42:18 -07:00 |
|
Todd A Ouska
|
efe6f80e77
|
allow an app to link with cyassl and openssl, whew
|
2011-08-26 14:40:51 -07:00 |
|
Todd A Ouska
|
5619fa81fa
|
remove ctc_ prefix and cyassl_ prefix since all includes now specify dir
|
2011-08-25 12:41:19 -07:00 |
|
Todd A Ouska
|
5876f4acf2
|
fix sniffer and hc128 builds
|
2011-08-24 17:39:23 -07:00 |
|
Todd A Ouska
|
000ffa54a4
|
add check around config.h for non autoconf systems
|
2011-08-24 16:37:16 -07:00 |
|
Todd A Ouska
|
5d49bf7cb0
|
Brian Aker commits plus some minor changes like AM_CFLAGS getting AC_SUBST and --enable-xxx #ifdef to new header layout
|
2011-08-24 15:54:58 -07:00 |
|
Todd A Ouska
|
99539f9f2f
|
addca debug msg
|
2011-08-22 12:47:35 -07:00 |
|
Todd A Ouska
|
501bddae75
|
add connect to get peer cert only
|
2011-08-17 12:33:36 -07:00 |
|
Todd A Ouska
|
626b1a019b
|
NO_SESSION_CAHCE fixes
|
2011-08-11 13:23:49 -07:00 |
|
Todd A Ouska
|
5f59e469d2
|
fix NO_SHA256 build problem, and NO_SHA256 trying to use TLS 1.2 bug
|
2011-08-05 13:09:54 -07:00 |
|
Chris Conlon
|
8af1cf4673
|
Fixed --enable-dtls build
|
2011-08-04 17:16:51 -06:00 |
|
Chris Conlon
|
ebc52e6941
|
Corrected spelling mistakes, formatting
|
2011-08-04 16:42:55 -06:00 |
|
Todd A Ouska
|
3ea834ee2d
|
add --enable-noInline option for easier testing of it
|
2011-08-03 10:59:08 -07:00 |
|
Todd A Ouska
|
17763ee674
|
DoServerKeyExchange var cleanup
|
2011-07-13 13:37:23 -07:00 |
|
Todd A Ouska
|
7ecb76d455
|
warnings
|
2011-07-13 12:51:04 -07:00 |
|
Todd A Ouska
|
9cd322ba91
|
remove logging statics if not in debug mode, minor warning fixes
|
2011-07-13 12:25:08 -07:00 |
|
Todd A Ouska
|
0867da038f
|
Warning Level 4 MSVC fixes except while (1) which causes bugs sometimes if for(;;) is used instead
|
2011-07-12 16:43:40 -07:00 |
|
Todd A Ouska
|
109ddacefb
|
fix ecc switch in ecc mode
|
2011-07-12 14:20:51 -07:00 |
|
Todd A Ouska
|
fb94d8b0b2
|
ssl warning changes, submitted by Kevin Baca
|
2011-07-12 14:01:31 -07:00 |
|
Todd A Ouska
|
0c65a6b5cf
|
tls warning changes, submitted by Kevin Baca
|
2011-07-12 13:55:20 -07:00 |
|
Todd A Ouska
|
4efb856de2
|
keys warning changes, submitted by Kevin Baca
|
2011-07-12 13:50:26 -07:00 |
|
Todd A Ouska
|
73fa2104e5
|
cyassl_io warning changes, submitted by Kevin Baca
|
2011-07-12 13:28:48 -07:00 |
|
Todd A Ouska
|
0a03838470
|
cyassl_int warning changes, submitted by Kevin Baca
|
2011-07-12 13:23:32 -07:00 |
|
Todd A Ouska
|
665d403c74
|
make sure IO callbacks have right visibility
|
2011-07-06 12:25:26 -07:00 |
|
Todd A Ouska
|
9f0ceea6c7
|
renames for init free functions
|
2011-07-05 13:52:35 -07:00 |
|
Todd A Ouska
|
de1be18a7e
|
move ProcessChainBufer out of filesystem only, add configure option for noFilesystem
|
2011-06-30 10:07:49 -07:00 |
|
Todd A Ouska
|
75b20de756
|
check GetLength idx on input, processing, and output compared to max idx
|
2011-06-16 11:46:45 -07:00 |
|
Todd A Ouska
|
3013a84bd1
|
fix default case warnings, add to warning list
|
2011-06-09 17:11:20 -07:00 |
|
Todd A Ouska
|
5e1c1b8b99
|
libz warning fixes
|
2011-06-09 16:43:03 -07:00 |
|
Todd A Ouska
|
0ef4919b43
|
change Init Free CyaSSL to CyaSSL_, more consistent
|
2011-06-08 13:19:39 -07:00 |
|
Todd A Ouska
|
3d5270236b
|
pre rc2 a
|
2011-06-02 15:55:35 -07:00 |
|
Todd A Ouska
|
aca3487e19
|
create asn public header for external use
|
2011-06-02 15:43:27 -07:00 |
|
Todd A Ouska
|
de3f77164f
|
rename misc.c ctc_misc.c
|
2011-06-02 14:47:47 -07:00 |
|
Todd A Ouska
|
c178c79a15
|
rename asm.c ctc_asm.c
|
2011-06-02 14:39:51 -07:00 |
|
Todd A Ouska
|
b40c5e9ebb
|
rename des3.h ctc_des3.h
|
2011-06-02 11:20:47 -07:00 |
|
Todd A Ouska
|
5fc7dcadc0
|
rename coding.h ctc_coding.h
|
2011-06-02 11:17:27 -07:00 |
|
Todd A Ouska
|
c87e05fc87
|
rename asn.h ctc_asn.h
|
2011-06-02 11:13:58 -07:00 |
|
Todd A Ouska
|
6adc479c3d
|
rename random.h ctc_random.h
|
2011-06-02 10:52:28 -07:00 |
|
toddouska
|
32b96c0350
|
Merge pull request #7 from j3g/master
hey todd I made a simple change.
|
2011-06-01 08:34:34 -07:00 |
|
Todd A Ouska
|
400e222def
|
don't redefine LWIP_SOCKET, make user repsonsible for turning it on in lwIP
|
2011-05-26 09:55:59 -07:00 |
|
Todd A Ouska
|
60cc65280b
|
fix -Wshadow warnings
|
2011-05-25 10:25:05 -07:00 |
|
JohnE
|
d06d3c9925
|
simple change added to follow your pattern of excluding DTLS source to keep the source smaller. -JohnE G.
|
2011-05-19 19:02:44 -07:00 |
|
Todd A Ouska
|
50c3ff2e3d
|
remove socket as var name
|
2011-05-19 16:36:34 -07:00 |
|
Todd A Ouska
|
15519867b7
|
check file parameter on load_veirfy extension
|
2011-05-19 15:50:20 -07:00 |
|
Todd A Ouska
|
ae4f69f236
|
check file parameter on load_veirfy
|
2011-05-19 15:49:03 -07:00 |
|
Todd A Ouska
|
e01822f8bb
|
lwip berkely sockets port
|
2011-05-16 16:20:32 -07:00 |
|
Todd A Ouska
|
a2f734c3b8
|
fix DTLS server key w/ DHE
|
2011-05-16 14:12:23 -07:00 |
|
Todd A Ouska
|
cfd1946bbf
|
only process chain on cert_chain calls
|
2011-05-09 13:42:48 -07:00 |
|
Todd A Ouska
|
c0d15f1245
|
fix alert size on send
|
2011-05-08 11:35:24 -07:00 |
|
Todd A Ouska
|
fbca29db81
|
fix fastmath dist pkg
|
2011-05-02 08:56:37 -07:00 |
|
Todd A Ouska
|
ffe184054f
|
2.0.0 rc1 versioning
|
2011-04-29 13:08:05 -07:00 |
|
Todd A Ouska
|
906e5c19ad
|
windows build fixes for new stuff
|
2011-04-28 16:34:42 -07:00 |
|
Todd A Ouska
|
1ce566971c
|
fix gcc lots o warnings for optional library build features
|
2011-04-28 12:04:38 -07:00 |
|
Todd A Ouska
|
50b2e1d2d4
|
fix gcc lots of warnings for build
|
2011-04-27 17:31:08 -07:00 |
|
Todd A Ouska
|
de18c6b6ec
|
fix aux dir and make dist
|
2011-04-27 16:00:22 -07:00 |
|
Todd A Ouska
|
b2e0428b71
|
fix debug messages b4 declarations
|
2011-04-27 13:23:06 -07:00 |
|
Todd A Ouska
|
ab1935ed8d
|
don't use AUX config, if version mismatch problems
|
2011-04-27 13:11:19 -07:00 |
|
Todd A Ouska
|
8846b8cad5
|
use a single Makefile, no recursion
|
2011-04-26 17:45:41 -07:00 |
|
Todd A Ouska
|
491f0e440b
|
add compiler visibility detection, default hide, add external API linkage and internal LOCAL linkage
|
2011-04-26 15:41:16 -07:00 |
|
Todd A Ouska
|
b83862d01d
|
add more SHA-256 cipher suites, DHE
|
2011-04-26 09:32:18 -07:00 |
|
Todd A Ouska
|
adaffeca6c
|
fix initsuites with PSK on downgrade, example server with PSK
|
2011-04-25 16:11:23 -07:00 |
|
Todd A Ouska
|
1ad10ffdc8
|
allow client to downgrade version with v23, make server downgrade more robust
|
2011-04-25 15:49:30 -07:00 |
|
Todd A Ouska
|
6c96166c48
|
more logging messages
|
2011-04-25 09:24:21 -07:00 |
|
Todd A Ouska
|
5a78a8999a
|
add better codes/messages for CyaSSL generic errors
|
2011-04-20 16:58:51 -07:00 |
|
Todd A Ouska
|
adaef70aec
|
remove large static buffer for cert chain processing
|
2011-04-20 15:54:34 -07:00 |
|
Todd A Ouska
|
1326c79bb6
|
add server EDH
|
2011-04-20 14:40:07 -07:00 |
|
Todd A Ouska
|
651b793791
|
add cyassl runtime alloc routines override, move to ctaocrypt so both can use, submitted by eof
|
2011-04-15 16:43:00 -07:00 |
|
Todd A Ouska
|
7014d6bbc1
|
allow runtime setting of logging function, move to ctaocrypt for use by both, submitted by eof
|
2011-04-15 14:55:07 -07:00 |
|
Todd A Ouska
|
1084ad3026
|
when processing multiple cert files don't error out if some junk at eof
|
2011-04-14 10:49:38 -07:00 |
|
Todd A Ouska
|
d788030343
|
pkcs#5 v.20 and pkcs#12 private encryption for pkcs#8 keys
|
2011-04-14 10:04:24 -07:00 |
|
Todd A Ouska
|
2da2e15484
|
remove SSL caList pointer, only use SSL_CTX one as current
|
2011-04-13 12:28:01 -07:00 |
|
Todd A Ouska
|
58589b4f9b
|
add verify from root, top->down, serial number extension for size
|
2011-04-11 12:55:17 -07:00 |
|
Todd A Ouska
|
45c32b858d
|
allow multi/chain PEM CA files or buffers
|
2011-04-09 13:48:12 -07:00 |
|
Todd A Ouska
|
831f4b6be9
|
add use cert chain handling
|
2011-04-09 13:08:56 -07:00 |
|
Todd A Ouska
|
cf978c8189
|
more porting changes
|
2011-04-04 17:42:50 -07:00 |
|
Todd A Ouska
|
8d38f93d8a
|
make building into resip easier
|
2011-03-31 16:45:05 -07:00 |
|
Todd A Ouska
|
0604c96e0f
|
Add SHA1 OpenSSL
|
2011-03-30 12:36:23 -07:00 |
|
Todd A Ouska
|
9ad5726d2b
|
add library version for libtool
|
2011-03-28 14:28:09 -07:00 |
|
Todd A Ouska
|
c068592799
|
use first 64 bits of SERIAL number
|
2011-03-22 08:15:03 -07:00 |
|
Todd A Ouska
|
680358abe1
|
PKCS #5 v1.5 encrypted key adds, small build fixes
|
2011-03-22 07:35:18 -07:00 |
|
Todd A Ouska
|
b9ff110b2e
|
add CyaSSL_X509_get_serial_number()
|
2011-03-11 15:22:16 -08:00 |
|
Todd A Ouska
|
f874bf9b76
|
mix MTU defines and DTLS version info
|
2011-03-11 14:10:32 -08:00 |
|
Todd A Ouska
|
1313ca7872
|
SHA256 cipher suites for TLSv1.2
|
2011-03-04 11:13:28 -08:00 |
|
Todd A Ouska
|
f25ad654f0
|
ECC TLSv1.2 hash/algo fix
|
2011-03-01 15:03:47 -08:00 |
|
Todd A Ouska
|
be03706dce
|
sniffer swappable buffer fix
|
2011-03-01 13:16:31 -08:00 |
|
Todd A Ouska
|
e20a85dc2f
|
add --enable-webServer for web server build w/o opensslExtra
|
2011-02-28 16:41:07 -08:00 |
|
Todd A Ouska
|
27d54b1096
|
parse all certs when user callback accepts some
|
2011-02-28 13:40:56 -08:00 |
|
Todd A Ouska
|
4dd9f290e5
|
TLS 1.2 updates for hash/sig id
|
2011-02-28 12:21:06 -08:00 |
|
Todd A Ouska
|
6b88eb05b1
|
1.8.8 init
|
2011-02-05 11:14:47 -08:00 |
|