Moisés Guimarães
|
593e466a44
|
limiting max_fragment API for client side only.
|
2013-07-01 10:13:43 -03:00 |
|
toddouska
|
98e6ad3ee9
|
add comverge switch for settings
|
2013-06-27 10:28:58 -07:00 |
|
toddouska
|
307c71d9cb
|
add CyaSSL_UnloadCertsKeys to free SSL certs and keys after handshake
|
2013-06-27 10:26:04 -07:00 |
|
toddouska
|
d0c2e9b7a2
|
switch comverge settings to ecc by default
|
2013-06-26 17:05:30 -07:00 |
|
toddouska
|
87eb94b7c4
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2013-06-24 14:02:40 -07:00 |
|
toddouska
|
b51d6f3b8f
|
add NetX default IO context handling
|
2013-06-24 14:00:48 -07:00 |
|
John Safranek
|
e0a84521c5
|
Make alert description and level enumerations public.
|
2013-06-21 14:56:42 -07:00 |
|
Moisés Guimarães
|
4502716fc4
|
Merge branch 'master' of https://github.com/cyassl/cyassl
|
2013-06-19 17:04:43 -03:00 |
|
Moisés Guimarães
|
5f3ee80407
|
added:
- max fragment length extension;
- CyaSSL_SNI_GetRequest() to get client's request at server side;
- Automated tests for SNI;
|
2013-06-19 15:45:06 -03:00 |
|
toddouska
|
85d25798a5
|
update ntru cert expires dates, update crls while at it, don't turn on skid for crls since openssl/firefox don't use by default and cyassl needs crl extension parsing
|
2013-06-17 14:48:51 -07:00 |
|
toddouska
|
a1f25a9299
|
release 2.7.0 init
|
2013-06-17 12:06:37 -07:00 |
|
toddouska
|
8c70b11528
|
add newSession flag to SetServerID to do full handshake w/ new session
|
2013-06-14 15:29:18 -07:00 |
|
toddouska
|
7f7c595d10
|
differentiate between THREADX and RTP_SYS
|
2013-06-14 13:45:25 -07:00 |
|
toddouska
|
33a7d7481d
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2013-06-03 14:57:40 -07:00 |
|
toddouska
|
ae84982777
|
add STACK_TRAP to track stack use on client, will seqfault if exceed limit to see where use is too high, doesn't work with pthread_create()
|
2013-06-03 14:56:37 -07:00 |
|
Moisés Guimarães
|
f1d1898ddf
|
Added new option to SNI: CYASSL_SNI_ANSWER_ON_MISMATCH
Added new function to SNI API: CyaSSL_SNI_Matched()
|
2013-06-03 17:55:06 -03:00 |
|
Moisés Guimarães
|
cb2082edee
|
changed CYASSL_SNI_ABORT_ON_MISMATCH to CYASSL_SNI_CONTINUE_ON_MISMATCH
|
2013-06-03 10:04:49 -03:00 |
|
Moisés Guimarães
|
5c665fe614
|
Added options to SNI (now it is possible to choose whether or not to abort on a SNI Host Name mismatch)
Exposed SNI Type at ssl.h
|
2013-05-30 15:26:41 -03:00 |
|
toddouska
|
8df0e43384
|
fix merge differences from this week
|
2013-05-22 15:50:13 -07:00 |
|
toddouska
|
d2003bb8b7
|
merge in sni
|
2013-05-21 14:37:50 -07:00 |
|
John Safranek
|
b347df8d9a
|
DTLS rx size check, ssn10
Allows for receiving datagrams larger than the MTU that are reassembled
by the IP stack.
|
2013-05-21 13:52:22 -07:00 |
|
toddouska
|
fd5937b599
|
MDK-ARM updates
|
2013-05-20 17:56:27 -07:00 |
|
toddouska
|
7693b4282a
|
turn on large static buffers for callbacks, easier for user
|
2013-05-20 12:46:54 -07:00 |
|
Chris Conlon
|
a4c6ed0dda
|
add support for Microchip TCP/IP 6.0 beta
|
2013-05-17 10:59:18 -06:00 |
|
toddouska
|
dcf88daae7
|
fix KEIL warnings
|
2013-05-17 09:49:46 -07:00 |
|
toddouska
|
cfdfa7b2b3
|
pull in Kojo MDK-ARM projects, changes
|
2013-05-16 09:47:27 -07:00 |
|
Chris Conlon
|
091c7a7ef3
|
separate STM32F2 hardware hash support, disable by default
|
2013-05-15 10:48:35 -06:00 |
|
John Safranek
|
ac716c96d3
|
Output buffer size check when sending transmit pool.
1. Added a call to CheckAvailableSize() when sending the DTLS transmit pool.
2. Rename CheckAvailableSize().
|
2013-05-13 12:32:47 -07:00 |
|
toddouska
|
32705fb380
|
make sure pwdbased w/o fastmath works like fastmath define wise
|
2013-05-10 11:00:37 -07:00 |
|
toddouska
|
8f0b695249
|
fix leanpsk build with keep cert / session cert
|
2013-05-09 15:29:25 -07:00 |
|
toddouska
|
47b468d14f
|
add dtls recv timeout max user setting too
|
2013-05-08 12:49:55 -07:00 |
|
toddouska
|
8cb5f6d5d4
|
add user setting for dtls recv timeout init value
|
2013-05-07 16:14:26 -07:00 |
|
toddouska
|
a7228d0463
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2013-05-02 11:35:56 -07:00 |
|
toddouska
|
a0c630b4ee
|
add cert cache persistence
|
2013-05-02 11:34:26 -07:00 |
|
Chris Conlon
|
864f0468aa
|
Cygwin/Mingw64 fixes
|
2013-05-01 14:17:11 -06:00 |
|
toddouska
|
bc1a6282eb
|
bump dev version
|
2013-04-30 12:56:28 -07:00 |
|
John Safranek
|
d2d25b9b83
|
refine the SKID/AKID support
|
2013-04-29 17:09:15 -07:00 |
|
toddouska
|
5a1886656a
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2013-04-29 14:23:22 -07:00 |
|
toddouska
|
5c4fdb30ad
|
add client session table lookup based on serverID, use CyaSSL_SetServerID to set/store with serverid
|
2013-04-29 14:22:32 -07:00 |
|
John Safranek
|
87048698e5
|
use subject key id and authentication key id to ID CA certs in the signers list instead of subject name hashes.
|
2013-04-29 12:08:16 -07:00 |
|
toddouska
|
791767e026
|
make sure unloadcas works w/o filesystem
|
2013-04-26 10:28:30 -07:00 |
|
toddouska
|
411a096b2b
|
add memory versions of session cache save/restore
|
2013-04-25 17:23:58 -07:00 |
|
toddouska
|
05dd84598b
|
turn CA signer list into CA signer hash table, defaults CA_TABLE_SIZE to 11
|
2013-04-25 15:36:33 -07:00 |
|
toddouska
|
9dbf6a5e10
|
fix Signer hash size w/o SHA, fix GetCA caList b4 lock
|
2013-04-25 14:47:09 -07:00 |
|
toddouska
|
942480e6ba
|
fix save cache file problem, version id, and match cache separarte error
|
2013-04-24 14:17:50 -07:00 |
|
toddouska
|
f12ba533e2
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2013-04-24 11:16:35 -07:00 |
|
toddouska
|
956ac08cab
|
add persistent session cache, ssn9
|
2013-04-24 11:10:23 -07:00 |
|
John Safranek
|
8e5532eb42
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2013-04-24 10:37:55 -07:00 |
|
John Safranek
|
c27ebe546d
|
find the subject id and authority subject id extentions when decoding a certificate
|
2013-04-24 10:37:11 -07:00 |
|
toddouska
|
bad1c32df2
|
add session cert conversion to x509, and free x509 for dynamic variety
|
2013-04-23 11:50:06 -07:00 |
|
toddouska
|
4491de3b77
|
add UnloadCAs ability for CTX or CertManager
|
2013-04-22 13:18:08 -07:00 |
|
toddouska
|
8c0ee8a6f7
|
make sure all external APIs at SSL level return SSL_SUCCESS instead of sometimes 0 from old CyaSSL API
|
2013-04-22 12:43:57 -07:00 |
|
toddouska
|
11d81b86de
|
change windows low res timer return
|
2013-04-22 10:52:38 -07:00 |
|
toddouska
|
d665e16bd8
|
add user ctx to verify callback with CyaSSL_SetCertCbCtx
|
2013-04-18 10:37:10 -07:00 |
|
toddouska
|
729fc1e603
|
add discardSessionCerts flag for verify callback
|
2013-04-18 09:11:35 -07:00 |
|
toddouska
|
71a1abebf5
|
break up sig confirm errors into no sig, crl, and ocsp specific
|
2013-04-18 08:38:28 -07:00 |
|
toddouska
|
f8ba117cef
|
cleanup 64/128bit type decls for big int libs
|
2013-04-17 17:26:33 -07:00 |
|
toddouska
|
38dec0b932
|
bump dev version
|
2013-04-17 09:41:43 -07:00 |
|
Chris Conlon
|
62a071262c
|
move CYASSL_USER_IO back to MICROCHIP_PIC32
|
2013-04-17 10:19:18 -06:00 |
|
John Safranek
|
fe13b4b6c6
|
moved and renamed the CBIO error codes so they are publically available
|
2013-04-16 12:32:55 -07:00 |
|
toddouska
|
8eee0b1d4c
|
add blake2 headers to dist
|
2013-04-15 13:22:11 -07:00 |
|
toddouska
|
f29da112c6
|
version.h update for non autoconf
|
2013-04-15 11:23:14 -07:00 |
|
toddouska
|
fe0cd26b1e
|
make clear where options.h came from
|
2013-04-12 16:50:16 -07:00 |
|
toddouska
|
0b7e18040c
|
generate cyassl/options.h based on ./configure flags/settings for user app use
|
2013-04-12 11:21:38 -07:00 |
|
toddouska
|
8a6bd081c4
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2013-04-11 15:00:42 -07:00 |
|
toddouska
|
997d6dccf3
|
fix windows ipv6 test w/ getaddrinfo
|
2013-04-11 14:52:04 -07:00 |
|
John Safranek
|
6d49631170
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2013-04-11 14:10:32 -07:00 |
|
John Safranek
|
a74ac2b22c
|
added case to DerToPem() to add EC header and footer to the PEM output
|
2013-04-11 14:03:18 -07:00 |
|
toddouska
|
12f00a7acc
|
change ipv6 tests to use getaddrinfo for better scope id % handling, inet_pton doesn't always work depending on system
|
2013-04-11 12:30:09 -07:00 |
|
toddouska
|
b5c43d8ad4
|
don't default to loopback only for ipv6 tests, if inet_pton available allow lookups
|
2013-04-11 10:12:15 -07:00 |
|
toddouska
|
576cb10732
|
fix port 0 hack for unit tests with ipv6
|
2013-04-10 17:09:53 -07:00 |
|
toddouska
|
a2bd6e786d
|
fix leanpsk NO_SHA build
|
2013-04-10 12:42:51 -07:00 |
|
Chris Conlon
|
27d6c727e0
|
add MICROCHIP_TCPIP
|
2013-04-10 09:16:11 -06:00 |
|
John Safranek
|
9b0ffa0249
|
brought CYASSL_CALLBACK code up to current standard
|
2013-04-08 15:34:54 -07:00 |
|
John Safranek
|
2dd22938d6
|
rearranged the HMAC header to tolerate having missing hash types
|
2013-04-03 17:33:50 -07:00 |
|
John Safranek
|
bf69de7054
|
if using SHA-512 but not SHA-384, fix so that HMAC still works
|
2013-04-03 16:41:44 -07:00 |
|
Chris Conlon
|
f73585eec8
|
HP/UX fixes, strsep impl
|
2013-04-02 16:27:53 -06:00 |
|
John Safranek
|
e9bc868dbb
|
AES-GCM does not require SHA-384, but will use it if enabled in build; reorder some of the requirement checks to regroup some NO_RSA suite checks
|
2013-04-01 14:25:20 -07:00 |
|
toddouska
|
332fd68347
|
add lowmem to stacksize build
|
2013-03-28 11:38:27 -07:00 |
|
toddouska
|
ee0595f543
|
add --enable-stacksize to print out stack use info with pthreads for example client/server
|
2013-03-28 11:28:38 -07:00 |
|
toddouska
|
f396de1191
|
add DTLS support for alignment
|
2013-03-27 16:58:27 -07:00 |
|
toddouska
|
8a2936ebd4
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2013-03-27 15:12:44 -07:00 |
|
toddouska
|
82e3c00075
|
add CYASSL_GENERAL_ALIGNMENT detection and setting for TLS alignment attempt
|
2013-03-27 15:11:49 -07:00 |
|
John Safranek
|
2f6636559d
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2013-03-27 10:22:56 -07:00 |
|
John Safranek
|
7d287a6ba9
|
modified test port number to allow concurrent testing
|
2013-03-26 22:00:39 -07:00 |
|
toddouska
|
14b4bb3b0f
|
change rabbit and hc128 to return values for key and process, will add error rets for alignment issues
|
2013-03-26 14:42:09 -07:00 |
|
toddouska
|
f601b7bfda
|
move aesni cbc encrypt align check down to crypto layer
|
2013-03-26 14:13:01 -07:00 |
|
toddouska
|
6bc7ba1592
|
change AesCBC end/dec to return status, will add failure cases with align checks
|
2013-03-26 12:36:39 -07:00 |
|
toddouska
|
72926b1eed
|
make sure blake2 calls denote it's the 'b' version, blake2b
|
2013-03-25 11:35:33 -07:00 |
|
John Safranek
|
436a51a0d7
|
Merge branch 'ccm'
|
2013-03-22 17:29:30 -07:00 |
|
toddouska
|
d7c01be8bb
|
blake2 ctc api, test vecs
|
2013-03-22 13:30:44 -07:00 |
|
toddouska
|
d8b85da693
|
remove c++ comments, switch to c
|
2013-03-22 12:10:53 -07:00 |
|
John Safranek
|
f65f86bb88
|
improvements to CCM, ssn6
|
2013-03-22 11:30:12 -07:00 |
|
toddouska
|
d6deb690e6
|
Merge branch 'master' into blake2
|
2013-03-22 10:20:01 -07:00 |
|
toddouska
|
ace69d1c77
|
bump dev branch
|
2013-03-21 19:27:29 -07:00 |
|
toddouska
|
ea9784b32b
|
cast size_t for printf mem output, c99 may not be available
|
2013-03-21 07:58:53 -07:00 |
|
toddouska
|
ae9265fa44
|
add macpi huffman
|
2013-03-20 14:37:05 -07:00 |
|
toddouska
|
7d7a72f2a6
|
add hmac sha512
|
2013-03-20 12:26:55 -07:00 |
|
toddouska
|
e19c65da8b
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2013-03-20 10:21:05 -07:00 |
|
toddouska
|
8564014983
|
add mcapi hash with tests
|
2013-03-20 10:14:06 -07:00 |
|