Moisés Guimarães
c20fdb037e
io: refactoring EmbedOcspLookup:
...
--- single return point
--- changed stack reduction MEMORY_E to -1 to match XMALLOC fail at httpBuf
--- variable written removed
--- variable ocspRespSz renamed to ret (initialized with -1 and set only once with process_http_response result)
2014-07-23 13:20:23 -03:00
Moisés Guimarães
7dfb9e2d5f
io: refactoring EmbedGenerateCookie to reduce stack usage:
...
--- use ShaHash instead of InitSha, ShaUpdate and ShaFinal (sizeof(Sha) saved)
io: refactoring EmbedOcspLookup to reduce stack usage:
--- variable domainName moved to the heap (80 bytes saved)
--- variable path moved to the heap (80 bytes saved)
2014-07-23 12:28:54 -03:00
Moisés Guimarães
2245204685
crl: refactoring LoadCRL to reduce stack usage:
...
--- variable name moved to the heap (256 bytes saved)
2014-07-21 22:52:06 -03:00
Moisés Guimarães
3ae9105b05
crl: refactoring DoMonitor to reduce stack usage:
...
--- variable buff moved to the heap (8192 bytes saved)
2014-07-21 22:52:05 -03:00
Moisés Guimarães
108b21e36f
crl: refactoring SwapLists to reduce stack usage:
...
--- variable tmp moved to the heap (sizeof(CYASS_CRL) saved)
2014-07-21 22:52:05 -03:00
Moisés Guimarães
6e0c6551ff
crl: refactoring BufferLoadCRL to reduce stack usage:
...
--- variable dcrl moved to the heap (sizeof(DecodedCRL) saved)
2014-07-21 22:52:05 -03:00
Moisés Guimarães
fb3e706d69
ocsp: refactoring CheckCertOCSP to reduce stack usage:
...
--- variable newStatus moved to the heap (sizeof(CertStatus) saved)
--- variable ocspRequest moved to the heap (sizeof(OcspRequest) saved)
--- variable ocspResponse moved to the heap (sizeof(OcspResponse) saved)
2014-07-21 22:52:05 -03:00
toddouska
3bfd0bbf3b
fixup some chacah-poly suite things including a valgrind error
2014-07-21 16:20:17 -07:00
JacobBarthelmeh
ff58f65418
merge
2014-07-21 15:12:12 -06:00
JacobBarthelmeh
3c27deb9d0
merge
2014-07-21 13:50:22 -06:00
JacobBarthelmeh
726cc3e3a4
sanity check and recent cyassl release
2014-07-18 14:42:45 -06:00
JacobBarthelmeh
7cb65d8b3d
asthetics
2014-07-17 15:33:48 -06:00
JacobBarthelmeh
b77a1fdbbb
refactoring
2014-07-17 15:00:40 -06:00
John Safranek
307e5f3bff
fix build warnings with lean-psk mode
2014-07-16 14:40:41 -07:00
JacobBarthelmeh
7eb8f571ed
reverse compatibility
2014-07-16 14:55:38 -06:00
JacobBarthelmeh
5b08cb35d7
updated sequence number in AD and unit tests
2014-07-14 16:13:24 -06:00
JacobBarthelmeh
4250955003
arg error checking and CHACHA_AEAD_TEST update
2014-07-11 16:06:29 -06:00
JacobBarthelmeh
e62fbdd49f
added ECDSA and DHE_RSA support for chacha-poly
2014-07-10 16:35:56 -06:00
JacobBarthelmeh
c322cb05ad
uses most recent version of cyassl
2014-07-10 11:18:49 -06:00
JacobBarthelmeh
da0876c474
Merge branch 'cipher-suite' of https://github.com/JacobBarthelmeh/cyassl into cipher-suite
2014-07-09 15:49:29 -06:00
JacobBarthelmeh
fb25db9c28
progress on suite
2014-07-09 15:48:40 -06:00
toddouska
8a3b3b03d2
fix crl problem error out if verify peer disabled
2014-07-03 12:13:41 -07:00
toddouska
2d63c559cc
dh now disabled by default but can be enabled w/o opensslextra
2014-07-03 11:32:24 -07:00
JacobBarthelmeh
18119610fb
Update tls.c
2014-07-02 16:06:41 -06:00
toddouska
0272d51ce4
remove C++ comments from cyassl proper
2014-07-02 12:11:01 -07:00
JacobBarthelmeh
a1e8eb0802
progress on suite
2014-07-02 12:49:14 -06:00
toddouska
4aac37bff9
move CipherRequires() to both client and server, VerifyClientSuite() to client only
2014-07-02 10:48:04 -07:00
JacobBarthelmeh
53c63dd257
progress on suite
2014-07-01 16:08:52 -06:00
JacobBarthelmeh
6c366a1863
progress on suite
2014-07-01 15:19:55 -06:00
JacobBarthelmeh
5bf411f345
progress on suite
2014-07-01 14:16:44 -06:00
Moisés Guimarães
9339d7d5b1
add support to TLS extensions in DTLS
2014-06-25 13:26:42 -03:00
toddouska
e6d9151f47
add user cert chain functionality at SSL level instead of just CTX
2014-06-20 10:49:21 -07:00
toddouska
6371b3c262
send ecdsa_sign for client cert request type is sig algo ecdsa
2014-06-20 09:22:40 -07:00
toddouska
9642902c07
fix disable rsa w/ opensslextra
2014-06-19 15:59:24 -07:00
toddouska
8350d91780
fix PemToDer encrypted key search start position for bundled files
2014-06-16 12:30:04 -07:00
John Safranek
acb3b1afb2
fix bug with DTLS and IO Pools
2014-06-15 17:26:18 -07:00
toddouska
0223708ac4
make crl monitor watch init -1
2014-06-12 16:01:34 -07:00
toddouska
ceafd298f3
fix linux crl monitor newer gcc warning
2014-06-12 15:56:44 -07:00
Moisés Guimarães
9c905b6519
fix on TLSX_SNI_GetFromBuffer - > should be >= so extensions of length 0 get inside the while.
...
added test to cover case.
2014-06-10 16:56:45 -03:00
Moisés Guimarães
ba36c24fc1
fix on TLSX_SNI_GetFromBuffer - undo last fix and return 0 when there is no SNI extension. Now the return is the same when there is no extensions at all.
2014-06-10 15:28:29 -03:00
Moisés Guimarães
064483035c
fix on TLSX_SNI_GetFromBuffer - set inOutSz value to zero when there is no SNI extension in the client hello buffer.
2014-06-09 17:31:32 -03:00
toddouska
e0c5c89bf6
add sanity check on send callback sent value
2014-06-09 12:55:17 -07:00
Chris Conlon
7e5287e578
update NTRU support, with help from thesourcerer8
2014-06-05 14:42:15 -06:00
toddouska
2494217a87
add sanity check on output buffer size for BuildMessage()
2014-06-04 09:58:15 -07:00
John Safranek
d301ab001c
fix Windows compile warnings
2014-06-03 23:11:18 -07:00
toddouska
24b556689f
fix psk define w/ opensslextra
2014-06-02 11:22:47 -07:00
John Safranek
b60a61fa94
DHE-PSK cipher suites
...
1. fixed the AES-CCM-16 suites
2. added DHE-PSK as a key-exchange algorithm type
3. Added infrastructure for new suites:
* TLS_DHE_PSK_WITH_AES_128_GCM_SHA256
* TLS_DHE_PSK_WITH_AES_256_GCM_SHA384
* TLS_DHE_PSK_WITH_AES_128_CBC_SHA256
* TLS_DHE_PSK_WITH_AES_256_CBC_SHA384
* TLS_DHE_PSK_WITH_NULL_SHA256
* TLS_DHE_PSK_WITH_NULL_SHA384
* TLS_DHE_PSK_WITH_AES_128_CCM
* TLS_DHE_PSK_WITH_AES_256_CCM
4. added test cases for new suites
5. set DHE parameters on test server when using PSK and a custom cipher
suite list
6. updated half premaster key size
2014-05-30 11:26:48 -07:00
toddouska
e11dd9803a
fix icc v14 warnings
2014-05-28 17:36:21 -07:00
Chris Conlon
7e13e414cb
rename port.c/.h to wc_port.c/.h to prevent FreeRTOS conflicts
2014-05-28 10:28:01 -06:00
John Safranek
12841e6093
fix integration bugs with new suites
2014-05-20 14:07:08 -07:00