Commit Graph

1113 Commits

Author SHA1 Message Date
toddouska
3ec2b9dbbc crl stage 2 2012-05-16 17:04:56 -07:00
toddouska
32095795f2 Merge branch 'master' of github.com:cyassl/cyassl 2012-05-11 12:22:23 -07:00
toddouska
6210ff78aa init crl 2012-05-11 12:22:16 -07:00
toddouska
7b2d62f4f7 don't compare session id if server rejects 2012-05-11 12:21:17 -07:00
John Safranek
59e0181c8d checked the bytes written to the OCSP socket 2012-05-08 19:12:35 -07:00
John Safranek
ea2585963f flattens the serial number 2012-05-08 19:02:25 -07:00
John Safranek
4feeeeda55 OCSP request creation almost complete, added ocsp revoke error code 2012-05-08 18:32:57 -07:00
John Safranek
833552ebac OCSP tweak to clean warnings from build 2012-05-08 14:05:26 -07:00
John Safranek
344b60eb92 Merge branch 'master' of github.com:cyassl/cyassl 2012-05-07 20:16:21 -07:00
toddouska
a97dbb8a14 global rng added to RAND_bytes 2012-05-07 19:36:19 -07:00
toddouska
968dfc4cf7 fortress ssh build fixes 2012-05-07 18:19:48 -07:00
John Safranek
d7d898697a updated OCSP, processes response 2012-05-07 17:19:52 -07:00
John Safranek
5aad32eb28 Merge branch 'master' of github.com:cyassl/cyassl 2012-05-07 17:02:47 -07:00
toddouska
2a817adfcc ssh non ecc 2012-05-07 16:35:23 -07:00
John Safranek
7d1d277535 OCSP: opening socket, starting to build request 2012-05-05 23:38:28 -07:00
John Safranek
f9985f5399 merge fix 2012-05-05 14:49:17 -07:00
toddouska
4278a4ac99 Merge branch 'master' of github.com:cyassl/cyassl 2012-05-03 18:07:46 -07:00
toddouska
4fe81df45c basic extneral cert manager added 2012-05-03 18:07:31 -07:00
Chris Conlon
37e994f4a2 exclude CyaSSL_connect_cert when using NO_CYASSL_CLIENT 2012-05-03 14:48:45 -06:00
toddouska
686a7395b1 fix potential ecc memory leak in ServerKeyExchange 2012-05-03 10:04:18 -07:00
toddouska
97e6a637e6 rest of ECDH suites 2012-05-03 09:57:17 -07:00
toddouska
a54f51d886 first static ECDH suite 2012-05-03 08:18:59 -07:00
John Safranek
7ee09ea23c Merge branch 'master' of github.com:cyassl/cyassl 2012-05-02 21:59:54 -07:00
toddouska
2a5db9371c BN help 2012-05-02 15:11:20 -07:00
John Safranek
669fbf2a14 Merge branch 'master' of github.com:cyassl/cyassl 2012-05-02 14:45:37 -07:00
John Safranek
9c5bcca1ab updates to OCSP 2012-05-02 14:45:30 -07:00
toddouska
1c2b84d3dd ecc client certs 2012-05-02 10:30:15 -07:00
toddouska
f49b106aef ssh2 2012-05-01 16:12:12 -07:00
toddouska
dd431dbeff merge conflict 2012-04-26 15:01:00 -07:00
toddouska
0f5b0ff8c3 sha384 plus merge changes 2012-04-26 14:58:29 -07:00
John Safranek
c0783e4ec4 added configure option and a stub source file for OCSP 2012-04-13 09:39:19 -07:00
toddouska
607fcb2f3d allow peer cert get even on fatal verify 2012-04-09 11:56:28 -07:00
toddouska
b9e6d44bf7 don't reinit mutexes 2012-04-04 16:19:42 -07:00
John Safranek
d3efce71c9 allows one to set the cyassl ex_data to null 2012-03-23 14:39:37 -07:00
toddouska
36529ad873 DevStudio 10 patches 2012-03-23 10:42:07 -07:00
toddouska
41361df2dc update chi square values for new session cache sizes 2012-03-22 12:38:25 -07:00
John Safranek
fc2f329acb added: ex data for CYASSL object, cert cmp function, verify callback call in success case 2012-03-16 10:50:04 -07:00
John Safranek
d7ef83d1b3 Added new session cache size. Added options for Fortress build. 2012-03-12 10:31:45 -07:00
toddouska
815f3b8f75 terminate user psk hint at ssl even if validated at ctx 2012-02-29 10:06:27 -08:00
toddouska
f92df4b4ce fix long user provided path with strncpy 2012-02-29 09:57:03 -08:00
toddouska
6b77c8967a don't allow user override on peer cert ASN_PARSE_E 2012-02-20 12:07:40 -08:00
toddouska
ec85d47a73 allow changing session timeout for ctx and ssl 2012-02-14 17:46:04 -08:00
toddouska
f8e610493c add ability to set Temp EC-DHE key size in octets for ctx or ssl, 20 - 66 allowed for 160bit - 521bit 2012-02-14 12:46:32 -08:00
toddouska
84614da13e increase copyright date 2012 2012-02-13 11:54:10 -08:00
toddouska
20c8fab779 fix ecc cleanup bug with opensslExtra no fastmath 2012-02-13 11:36:07 -08:00
toddouska
03cf62fd07 allow dir path to be defined out NO_CYASSL_DIR, allow file or path on load_verify 2012-02-09 13:21:41 -08:00
toddouska
bce2508878 add path handling (basic) for load_verify_locations() 2012-02-08 18:07:20 -08:00
toddouska
9b5ab7c914 respond to negotiation attempt with alert warning no_renegotiation to try graceful continue if possible 2012-02-01 17:18:40 -08:00
toddouska
ee46bcce4a allow ca cache addition callback 2012-01-26 12:43:48 -08:00
toddouska
bb53240fdf add CyaSSL_X509_get_der(cert) with EXTRA 2012-01-25 14:13:05 -08:00
toddouska
b32bc2ce9f add ability to group handshake messages on send with xxx_set_group_messages() 2012-01-24 13:19:03 -08:00
toddouska
3b7fcc6ca1 add ssmtp build support 2012-01-16 15:11:37 -08:00
toddouska
d9e0c8e526 addca lock mutex failure bug on free 2011-12-19 12:57:44 -08:00
toddouska
7cc11ac8d5 fix BIO free error on not full init w/ opensslExtra server 2011-12-15 18:49:03 -08:00
toddouska
2bc14ce69d add CTX reference count, can free by CTX or SSL 2011-12-07 16:32:18 -08:00
toddouska
247d5b5609 some root CAs loaded by user won't have basic constraint, allow 2011-12-06 15:17:10 -08:00
toddouska
e82516ad2a fix ecc pkcs8 import 2011-12-01 13:10:01 -08:00
toddouska
185e23fc58 microchip pic32 port 2011-11-09 17:32:24 -08:00
toddouska
11d15f32b9 check basic contsraint CA flag before adding as signer even if explicit add 2011-11-02 14:57:14 -07:00
toddouska
8ddd2185c2 warning fixes, 2.0.1 pre 2011-11-01 16:17:45 -07:00
toddouska
ef72bae2ff const correct new API 2011-11-01 14:55:28 -07:00
toddouska
948a901cfc add DH param setting by file and buffer, by ctx too 2011-11-01 14:05:14 -07:00
toddouska
f97759c9e1 hostapd adds 2011-10-31 17:33:40 -07:00
toddouska
cb90900920 wpa adds 2011-10-28 18:43:07 -07:00
toddouska
494d048980 warning fixes 2011-10-11 12:06:04 -07:00
toddouska
290f94c8ad add get_subjectCN 2011-10-04 09:29:10 -07:00
toddouska
27d35d50cc lots o warning fixes for rc3 2011-09-28 13:19:05 -07:00
toddouska
f33839ac5e fixes for ecc w/ new release 2011-09-27 19:52:57 -07:00
Todd A Ouska
c6dd6f589e always trust user override cipher suites 2011-09-25 15:54:53 -07:00
Todd A Ouska
44632b94c2 add der_load_verify_locations 2011-09-23 11:20:13 -07:00
Todd A Ouska
762d6a3e00 fix up for pending release 2011-09-23 10:37:26 -07:00
Todd A Ouska
343ec22c16 check for NULL user pointers on basic inits 2011-09-08 17:04:49 -07:00
Todd A Ouska
526fe9b6d6 have connect_cert verify 2011-09-07 18:06:21 -07:00
Todd A Ouska
8c55e4883e add SMALL_SESSION_CACHE define and configure option 2011-09-06 16:23:25 -07:00
Todd A Ouska
c52d2481b1 rename cyassl-memory.c 2011-08-29 10:42:18 -07:00
Todd A Ouska
efe6f80e77 allow an app to link with cyassl and openssl, whew 2011-08-26 14:40:51 -07:00
Todd A Ouska
5619fa81fa remove ctc_ prefix and cyassl_ prefix since all includes now specify dir 2011-08-25 12:41:19 -07:00
Todd A Ouska
5876f4acf2 fix sniffer and hc128 builds 2011-08-24 17:39:23 -07:00
Todd A Ouska
000ffa54a4 add check around config.h for non autoconf systems 2011-08-24 16:37:16 -07:00
Todd A Ouska
5d49bf7cb0 Brian Aker commits plus some minor changes like AM_CFLAGS getting AC_SUBST and --enable-xxx #ifdef to new header layout 2011-08-24 15:54:58 -07:00
Todd A Ouska
99539f9f2f addca debug msg 2011-08-22 12:47:35 -07:00
Todd A Ouska
501bddae75 add connect to get peer cert only 2011-08-17 12:33:36 -07:00
Todd A Ouska
626b1a019b NO_SESSION_CAHCE fixes 2011-08-11 13:23:49 -07:00
Todd A Ouska
5f59e469d2 fix NO_SHA256 build problem, and NO_SHA256 trying to use TLS 1.2 bug 2011-08-05 13:09:54 -07:00
Chris Conlon
8af1cf4673 Fixed --enable-dtls build 2011-08-04 17:16:51 -06:00
Chris Conlon
ebc52e6941 Corrected spelling mistakes, formatting 2011-08-04 16:42:55 -06:00
Todd A Ouska
3ea834ee2d add --enable-noInline option for easier testing of it 2011-08-03 10:59:08 -07:00
Todd A Ouska
17763ee674 DoServerKeyExchange var cleanup 2011-07-13 13:37:23 -07:00
Todd A Ouska
7ecb76d455 warnings 2011-07-13 12:51:04 -07:00
Todd A Ouska
9cd322ba91 remove logging statics if not in debug mode, minor warning fixes 2011-07-13 12:25:08 -07:00
Todd A Ouska
0867da038f Warning Level 4 MSVC fixes except while (1) which causes bugs sometimes if for(;;) is used instead 2011-07-12 16:43:40 -07:00
Todd A Ouska
109ddacefb fix ecc switch in ecc mode 2011-07-12 14:20:51 -07:00
Todd A Ouska
fb94d8b0b2 ssl warning changes, submitted by Kevin Baca 2011-07-12 14:01:31 -07:00
Todd A Ouska
0c65a6b5cf tls warning changes, submitted by Kevin Baca 2011-07-12 13:55:20 -07:00
Todd A Ouska
4efb856de2 keys warning changes, submitted by Kevin Baca 2011-07-12 13:50:26 -07:00
Todd A Ouska
73fa2104e5 cyassl_io warning changes, submitted by Kevin Baca 2011-07-12 13:28:48 -07:00
Todd A Ouska
0a03838470 cyassl_int warning changes, submitted by Kevin Baca 2011-07-12 13:23:32 -07:00
Todd A Ouska
665d403c74 make sure IO callbacks have right visibility 2011-07-06 12:25:26 -07:00
Todd A Ouska
9f0ceea6c7 renames for init free functions 2011-07-05 13:52:35 -07:00
Todd A Ouska
de1be18a7e move ProcessChainBufer out of filesystem only, add configure option for noFilesystem 2011-06-30 10:07:49 -07:00
Todd A Ouska
75b20de756 check GetLength idx on input, processing, and output compared to max idx 2011-06-16 11:46:45 -07:00
Todd A Ouska
3013a84bd1 fix default case warnings, add to warning list 2011-06-09 17:11:20 -07:00
Todd A Ouska
5e1c1b8b99 libz warning fixes 2011-06-09 16:43:03 -07:00
Todd A Ouska
0ef4919b43 change Init Free CyaSSL to CyaSSL_, more consistent 2011-06-08 13:19:39 -07:00
Todd A Ouska
3d5270236b pre rc2 a 2011-06-02 15:55:35 -07:00
Todd A Ouska
aca3487e19 create asn public header for external use 2011-06-02 15:43:27 -07:00
Todd A Ouska
de3f77164f rename misc.c ctc_misc.c 2011-06-02 14:47:47 -07:00
Todd A Ouska
c178c79a15 rename asm.c ctc_asm.c 2011-06-02 14:39:51 -07:00
Todd A Ouska
b40c5e9ebb rename des3.h ctc_des3.h 2011-06-02 11:20:47 -07:00
Todd A Ouska
5fc7dcadc0 rename coding.h ctc_coding.h 2011-06-02 11:17:27 -07:00
Todd A Ouska
c87e05fc87 rename asn.h ctc_asn.h 2011-06-02 11:13:58 -07:00
Todd A Ouska
6adc479c3d rename random.h ctc_random.h 2011-06-02 10:52:28 -07:00
toddouska
32b96c0350 Merge pull request #7 from j3g/master
hey todd I made a simple change.
2011-06-01 08:34:34 -07:00
Todd A Ouska
400e222def don't redefine LWIP_SOCKET, make user repsonsible for turning it on in lwIP 2011-05-26 09:55:59 -07:00
Todd A Ouska
60cc65280b fix -Wshadow warnings 2011-05-25 10:25:05 -07:00
JohnE
d06d3c9925 simple change added to follow your pattern of excluding DTLS source to keep the source smaller. -JohnE G. 2011-05-19 19:02:44 -07:00
Todd A Ouska
50c3ff2e3d remove socket as var name 2011-05-19 16:36:34 -07:00
Todd A Ouska
15519867b7 check file parameter on load_veirfy extension 2011-05-19 15:50:20 -07:00
Todd A Ouska
ae4f69f236 check file parameter on load_veirfy 2011-05-19 15:49:03 -07:00
Todd A Ouska
e01822f8bb lwip berkely sockets port 2011-05-16 16:20:32 -07:00
Todd A Ouska
a2f734c3b8 fix DTLS server key w/ DHE 2011-05-16 14:12:23 -07:00
Todd A Ouska
cfd1946bbf only process chain on cert_chain calls 2011-05-09 13:42:48 -07:00
Todd A Ouska
c0d15f1245 fix alert size on send 2011-05-08 11:35:24 -07:00
Todd A Ouska
fbca29db81 fix fastmath dist pkg 2011-05-02 08:56:37 -07:00
Todd A Ouska
ffe184054f 2.0.0 rc1 versioning 2011-04-29 13:08:05 -07:00
Todd A Ouska
906e5c19ad windows build fixes for new stuff 2011-04-28 16:34:42 -07:00
Todd A Ouska
1ce566971c fix gcc lots o warnings for optional library build features 2011-04-28 12:04:38 -07:00
Todd A Ouska
50b2e1d2d4 fix gcc lots of warnings for build 2011-04-27 17:31:08 -07:00
Todd A Ouska
de18c6b6ec fix aux dir and make dist 2011-04-27 16:00:22 -07:00
Todd A Ouska
b2e0428b71 fix debug messages b4 declarations 2011-04-27 13:23:06 -07:00
Todd A Ouska
ab1935ed8d don't use AUX config, if version mismatch problems 2011-04-27 13:11:19 -07:00
Todd A Ouska
8846b8cad5 use a single Makefile, no recursion 2011-04-26 17:45:41 -07:00
Todd A Ouska
491f0e440b add compiler visibility detection, default hide, add external API linkage and internal LOCAL linkage 2011-04-26 15:41:16 -07:00
Todd A Ouska
b83862d01d add more SHA-256 cipher suites, DHE 2011-04-26 09:32:18 -07:00
Todd A Ouska
adaffeca6c fix initsuites with PSK on downgrade, example server with PSK 2011-04-25 16:11:23 -07:00
Todd A Ouska
1ad10ffdc8 allow client to downgrade version with v23, make server downgrade more robust 2011-04-25 15:49:30 -07:00
Todd A Ouska
6c96166c48 more logging messages 2011-04-25 09:24:21 -07:00
Todd A Ouska
5a78a8999a add better codes/messages for CyaSSL generic errors 2011-04-20 16:58:51 -07:00
Todd A Ouska
adaef70aec remove large static buffer for cert chain processing 2011-04-20 15:54:34 -07:00
Todd A Ouska
1326c79bb6 add server EDH 2011-04-20 14:40:07 -07:00
Todd A Ouska
651b793791 add cyassl runtime alloc routines override, move to ctaocrypt so both can use, submitted by eof 2011-04-15 16:43:00 -07:00
Todd A Ouska
7014d6bbc1 allow runtime setting of logging function, move to ctaocrypt for use by both, submitted by eof 2011-04-15 14:55:07 -07:00
Todd A Ouska
1084ad3026 when processing multiple cert files don't error out if some junk at eof 2011-04-14 10:49:38 -07:00
Todd A Ouska
d788030343 pkcs#5 v.20 and pkcs#12 private encryption for pkcs#8 keys 2011-04-14 10:04:24 -07:00
Todd A Ouska
2da2e15484 remove SSL caList pointer, only use SSL_CTX one as current 2011-04-13 12:28:01 -07:00
Todd A Ouska
58589b4f9b add verify from root, top->down, serial number extension for size 2011-04-11 12:55:17 -07:00
Todd A Ouska
45c32b858d allow multi/chain PEM CA files or buffers 2011-04-09 13:48:12 -07:00
Todd A Ouska
831f4b6be9 add use cert chain handling 2011-04-09 13:08:56 -07:00
Todd A Ouska
cf978c8189 more porting changes 2011-04-04 17:42:50 -07:00
Todd A Ouska
8d38f93d8a make building into resip easier 2011-03-31 16:45:05 -07:00
Todd A Ouska
0604c96e0f Add SHA1 OpenSSL 2011-03-30 12:36:23 -07:00
Todd A Ouska
9ad5726d2b add library version for libtool 2011-03-28 14:28:09 -07:00
Todd A Ouska
c068592799 use first 64 bits of SERIAL number 2011-03-22 08:15:03 -07:00
Todd A Ouska
680358abe1 PKCS #5 v1.5 encrypted key adds, small build fixes 2011-03-22 07:35:18 -07:00
Todd A Ouska
b9ff110b2e add CyaSSL_X509_get_serial_number() 2011-03-11 15:22:16 -08:00
Todd A Ouska
f874bf9b76 mix MTU defines and DTLS version info 2011-03-11 14:10:32 -08:00
Todd A Ouska
1313ca7872 SHA256 cipher suites for TLSv1.2 2011-03-04 11:13:28 -08:00
Todd A Ouska
f25ad654f0 ECC TLSv1.2 hash/algo fix 2011-03-01 15:03:47 -08:00
Todd A Ouska
be03706dce sniffer swappable buffer fix 2011-03-01 13:16:31 -08:00
Todd A Ouska
e20a85dc2f add --enable-webServer for web server build w/o opensslExtra 2011-02-28 16:41:07 -08:00
Todd A Ouska
27d54b1096 parse all certs when user callback accepts some 2011-02-28 13:40:56 -08:00
Todd A Ouska
4dd9f290e5 TLS 1.2 updates for hash/sig id 2011-02-28 12:21:06 -08:00
Todd A Ouska
6b88eb05b1 1.8.8 init 2011-02-05 11:14:47 -08:00