John Safranek
ac227910f1
modify OCSP to use a replacable callback to perform the OCSP transaction
2013-01-03 17:19:56 -08:00
toddouska
0c363a17f1
init blake2
2012-12-31 13:10:47 -08:00
John Safranek
e70838e984
Merge branch 'ecc'
2012-12-27 11:41:20 -08:00
John Safranek
581f91b984
Merge branch 'master' of github.com:cyassl/cyassl
2012-12-27 11:40:17 -08:00
Chris Conlon
254d53bb18
add CYASSL_STM32F2 define, LwIP errno.h
2012-12-27 10:06:29 -07:00
John Safranek
d993ee1969
Merge branch 'master' of github.com:cyassl/cyassl
2012-12-26 21:53:20 -08:00
John Safranek
cf114b92df
made the ecc keys in the CYASSL struct dynamic
2012-12-26 16:39:19 -08:00
Chris Conlon
ea3dc3d834
add STM32F2 AES, DES, 3DES support
2012-12-26 15:18:57 -07:00
Chris Conlon
a7e0f4e483
add STM32F2 SHA1, MD5 support
2012-12-26 15:16:39 -07:00
John Safranek
4e657debfc
added the ability to disable OCSP nonces
2012-12-19 10:18:11 -08:00
John Safranek
f71376a42b
Merge branch 'master' of github.com:cyassl/cyassl
2012-11-30 15:48:56 -08:00
John Safranek
8c97675979
Lean PSK trimming
...
1. leave out memory and io callback functions, expect user supplied
2. leave out cert and DTLS related functions
3. SHA-1 compile option to use slower, rolled-up transform
2012-11-30 15:45:43 -08:00
toddouska
f23013b8a7
remove runtime memory callback use for leanpsk
2012-11-30 15:41:01 -08:00
John Safranek
66a3ce2ec1
added SHA-256 based RNG when setting NO_RC4 compile flag
2012-11-27 22:17:25 -08:00
John Safranek
f8f7f69f48
compile option to leave out MD5 and SSL code
2012-11-26 18:40:43 -08:00
Chris Conlon
11c8e5afb8
add support for Kinetis K70 HW RNGA
2012-11-02 17:49:30 -06:00
John Safranek
9aa8b71525
Merge branch 'nocerts'
2012-11-01 15:47:02 -07:00
John Safranek
134c6b8b1b
cleaning warnings in OCSP build
2012-11-01 15:03:29 -07:00
toddouska
ae905d70c4
crl warning fixes
2012-11-01 14:14:40 -07:00
toddouska
0e2c236e77
fix x64 windows warnings, make sure word is 64bit
2012-11-01 12:21:47 -07:00
Chris Conlon
f6304ae37a
add support for Freescale MQX
2012-11-01 11:23:42 -06:00
toddouska
01138a5c53
fix stack-check warnings for newer versions but fastmath still has some so take away warning for now
2012-10-30 17:35:12 -07:00
John Safranek
174618ebfb
added build option for leanPSK
2012-10-29 15:39:42 -07:00
toddouska
ef47f1a25e
fix with libz dynamic type
2012-10-17 10:09:28 -07:00
toddouska
c11620f9b4
Merge branch 'master' of github.com:cyassl/cyassl
2012-10-17 10:05:05 -07:00
toddouska
dc708f4f5b
turn on webserver build for some settings
2012-10-17 10:04:44 -07:00
John Safranek
8760e6ac3e
fixed build warnings & aes-gcm/ni conflict
2012-10-10 12:15:13 -07:00
John Safranek
9bbca6acfb
Merge branch 'master' of github.com:cyassl/cyassl
2012-10-02 14:42:06 -07:00
John Safranek
6d1e485ef4
DTLS to use recvfrom and sendto in embed recv and send callbacks. Added support for storing dtls peer address.
2012-10-02 09:15:50 -07:00
toddouska
2c25481e7d
add AesSetKeyDirect for Ctr and Direct when also using aesni
2012-09-28 15:01:07 -07:00
toddouska
4e19c234f4
fix new warnings on linux64
2012-09-21 13:29:04 -07:00
John Safranek
40972868ce
fix merge conflicts
2012-09-14 21:19:06 -07:00
John Safranek
56ee2eaba8
added dtls message retry
2012-09-14 09:35:34 -07:00
toddouska
8c32a5a2ed
make RNG in ssl dynamic, release after hs if stream or < tls1.1
2012-09-05 16:18:29 -07:00
toddouska
9ddf43268d
use dynamic memory for ssl ciphers, only use what needed
2012-09-05 12:30:51 -07:00
toddouska
c47afaf84f
make suites object dynamic, only use during handshake
2012-09-05 10:17:48 -07:00
toddouska
2bee126062
clang scan-build fixes
2012-09-04 10:48:26 -07:00
toddouska
0534d44c9e
don't assume non-Intel CodeWarrior BigEndian anymore
2012-08-23 17:05:58 -07:00
toddouska
f8ffb086ec
tcp errno for SafeRTOS/lwip
2012-08-23 09:45:23 -07:00
toddouska
87762e9012
SafeRTOS client test fixes
2012-08-22 11:07:40 -07:00
toddouska
7a12fb3e6b
IAR inlining and enum warning off
2012-08-20 16:58:11 -07:00
toddouska
f1ed3cefc4
SafeRTOS memory macros
2012-08-20 16:38:43 -07:00
toddouska
690938ffd4
lsr fs macros
2012-08-17 13:45:31 -07:00
toddouska
925ddb6626
Merge branch 'master' of github.com:cyassl/cyassl
2012-08-15 17:00:34 -07:00
toddouska
05692e1d6a
IAR fixes, SafeRTOS port, better LWIP support
2012-08-15 17:00:11 -07:00
Chris Conlon
7ec04c16b6
EBSnet RTIP support
2012-08-13 17:10:05 -06:00
Chris Conlon
afa27f0021
FreeRTOS threads support, windows simulator support
2012-08-02 09:54:41 -06:00
John Safranek
b8b5e7b873
Merge branch 'master' of github.com:cyassl/cyassl
2012-07-31 18:42:44 -07:00
toddouska
a5af2e3d51
add altname retrieval from peer cert
2012-07-31 17:45:48 -07:00
John Safranek
368afbb815
Merge branch 'master' of github.com:cyassl/cyassl
2012-07-31 10:11:21 -07:00
John Safranek
9b8c5fb40e
aes-gcm: modified to use sequence number rather that a random explicit IV
2012-07-31 09:32:29 -07:00
toddouska
e0328ef78a
allow zero legnth asn names, remove weird subjectcn len as zero means we own, use stored flag instead
2012-07-27 16:51:46 -07:00
toddouska
85889f7fb9
add md2 signature hash support
2012-07-27 14:01:02 -07:00
John Safranek
489fbf17fe
Merge branch 'master' of github.com:cyassl/cyassl
2012-07-19 17:22:16 -07:00
John Safranek
cb178856a8
added 64-bit (default), 32-bit version, and 8-bit table based AES-GCM for faster operation. Selection made at configure.
2012-07-19 14:44:08 -07:00
toddouska
d408f01863
add mystrnstr for buffer searching of PEM with no null terminator
2012-07-17 12:01:37 -07:00
John Safranek
87a8cfadd3
Used consistent constants.
2012-07-12 15:20:56 -07:00
John Safranek
00cda6ab72
tied SHA-384 into TLSv1.2 as appropriate
2012-06-27 14:41:16 -07:00
John Safranek
c2cf1fb708
added HMAC-SHA-384
2012-06-27 10:34:43 -07:00
John Safranek
e39e27bb5b
implemented AES-GCM Decrypt
2012-06-15 15:12:56 -07:00
John Safranek
76bb3b2558
added stubs for AES-GCM processing and build option
2012-06-13 21:31:32 -07:00
John Safranek
87b3df8621
Merge branch 'master' of github.com:cyassl/cyassl
2012-06-01 11:57:09 -07:00
John Safranek
6120f03173
ocsp response date checking
2012-06-01 11:57:03 -07:00
toddouska
6dd7eff1a8
add 64 bit misc prototypes for NO_INLINE
2012-06-01 11:07:29 -07:00
John Safranek
6d76b2f247
dynamic allocation of OCSP responses, response signature check
2012-05-31 17:29:32 -07:00
John Safranek
4b8bb6cdfe
fixed merge conflicts
2012-05-29 09:19:53 -07:00
John Safranek
9818fe4f55
changed DN hashing to cover the whole DER encoding per OCSP-RFC, OCSP changes towards dynamic storage of responses
2012-05-29 09:11:37 -07:00
toddouska
3f35c86520
crl signature check, be sure to load CAs first
2012-05-24 15:49:38 -07:00
John Safranek
0a31dc3a37
renumbered new error codes and dynamic data types
2012-05-24 14:36:40 -07:00
toddouska
baddc07300
check next crl date status
2012-05-24 14:07:59 -07:00
John Safranek
f2110487b6
added dynamic types for OCSP data
2012-05-24 14:07:11 -07:00
toddouska
2b48f248c4
crl dir monitoring for linux and mac
2012-05-22 17:25:15 -07:00
John Safranek
8bf2d13f89
Merge branch 'master' of github.com:cyassl/cyassl
2012-05-18 15:33:54 -07:00
toddouska
26153ffad6
add crl monitor flag, handle no revoked case
2012-05-18 10:52:32 -07:00
John Safranek
a3e94f335b
fixed merge conflict
2012-05-18 10:25:16 -07:00
John Safranek
4b3a362705
adding OcspRequest data, check OCSP nonce extension, made ConfirmSignature generic, bug fixes
2012-05-18 10:18:56 -07:00
toddouska
5bc728b882
fix lots o warnings
2012-05-17 17:44:54 -07:00
toddouska
839b5a4478
add set dates from buffer
2012-05-17 14:41:45 -07:00
toddouska
08d9e57bf6
add crl missing url callback
2012-05-16 17:35:51 -07:00
toddouska
c4ea674fc8
Merge branch 'master' of github.com:cyassl/cyassl
2012-05-16 17:05:03 -07:00
toddouska
3ec2b9dbbc
crl stage 2
2012-05-16 17:04:56 -07:00
John Safranek
43592def99
Certificate extension parsing addition
2012-05-14 15:38:59 -07:00
John Safranek
ea2585963f
flattens the serial number
2012-05-08 19:02:25 -07:00
John Safranek
4feeeeda55
OCSP request creation almost complete, added ocsp revoke error code
2012-05-08 18:32:57 -07:00
John Safranek
81a6ed4577
added the hash of the issuer's public key to the decoded cert
2012-05-08 15:12:33 -07:00
John Safranek
5aad32eb28
Merge branch 'master' of github.com:cyassl/cyassl
2012-05-07 17:02:47 -07:00
toddouska
2a817adfcc
ssh non ecc
2012-05-07 16:35:23 -07:00
John Safranek
f9985f5399
merge fix
2012-05-05 14:49:17 -07:00
toddouska
4fe81df45c
basic extneral cert manager added
2012-05-03 18:07:31 -07:00
toddouska
a54f51d886
first static ECDH suite
2012-05-03 08:18:59 -07:00
John Safranek
7ee09ea23c
Merge branch 'master' of github.com:cyassl/cyassl
2012-05-02 21:59:54 -07:00
toddouska
2a5db9371c
BN help
2012-05-02 15:11:20 -07:00
John Safranek
9c5bcca1ab
updates to OCSP
2012-05-02 14:45:30 -07:00
John Safranek
ec5b3fe313
Merge branch 'master' of github.com:cyassl/cyassl
2012-04-27 15:46:27 -07:00
John Safranek
3fdca1f714
added sha384 and sha512 to certificate checking
2012-04-27 13:49:35 -07:00
John Safranek
f987da38d8
Merge branch 'master' of github.com:cyassl/cyassl
2012-04-27 10:08:09 -07:00
toddouska
81be167ee2
init ssh changes
2012-04-26 16:27:27 -07:00
toddouska
dd431dbeff
merge conflict
2012-04-26 15:01:00 -07:00
toddouska
0f5b0ff8c3
sha384 plus merge changes
2012-04-26 14:58:29 -07:00
John Safranek
27f9cf01af
Changed the OCSP fcn protos to be LOCAL, not API
2012-04-26 14:16:34 -07:00
John Safranek
cbde04a06b
added OCSP Response simple parsing
2012-04-26 13:52:48 -07:00
toddouska
3001804c51
make SetAltNames optional since need bigger buffer with -DCYASSL_ALT_NAMES
2012-04-05 12:48:28 -07:00
toddouska
f8e610493c
add ability to set Temp EC-DHE key size in octets for ctx or ssl, 20 - 66 allowed for 160bit - 521bit
2012-02-14 12:46:32 -08:00
toddouska
84614da13e
increase copyright date 2012
2012-02-13 11:54:10 -08:00
toddouska
bce2508878
add path handling (basic) for load_verify_locations()
2012-02-08 18:07:20 -08:00
toddouska
f5e53de098
export Base64_Encode for general use
2012-01-27 10:10:07 -08:00
toddouska
247d5b5609
some root CAs loaded by user won't have basic constraint, allow
2011-12-06 15:17:10 -08:00
toddouska
e82516ad2a
fix ecc pkcs8 import
2011-12-01 13:10:01 -08:00
toddouska
f4a9002bdb
ecc fixed point compile fixes, still need ecc_mul2add
2011-11-23 16:11:56 -08:00
toddouska
3dd338a062
add aes counter mode
2011-11-22 17:02:36 -08:00
toddouska
185e23fc58
microchip pic32 port
2011-11-09 17:32:24 -08:00
toddouska
c603efd023
normal math default mp_digit to 32 bit int instead of long
2011-11-07 11:52:17 -08:00
toddouska
11d15f32b9
check basic contsraint CA flag before adding as signer even if explicit add
2011-11-02 14:57:14 -07:00
toddouska
f97759c9e1
hostapd adds
2011-10-31 17:33:40 -07:00
toddouska
3ac390c147
add direct AES one block access and ECB DES for compatibility
2011-10-26 17:10:44 -07:00
toddouska
d3bb4bf4d4
move signature algo types to public header and have test cert gen use SHA256wRSA as example
2011-10-26 13:23:03 -07:00
toddouska
494d048980
warning fixes
2011-10-11 12:06:04 -07:00
toddouska
2021461d7c
add alt name copying for cert gen
2011-10-07 16:50:32 -07:00
toddouska
340f275a8a
add fastmath to bump, add fastmath FP_MAX_BITS runtime check
2011-10-04 12:29:59 -07:00
Todd A Ouska
762d6a3e00
fix up for pending release
2011-09-23 10:37:26 -07:00
Todd A Ouska
526fe9b6d6
have connect_cert verify
2011-09-07 18:06:21 -07:00
Todd A Ouska
d29d9b73e1
conditional byte typedef
2011-09-07 16:03:17 -07:00
Todd A Ouska
1f2109e5fd
add cert gen CA extenstion basic constraint true
2011-09-06 17:30:57 -07:00
Todd A Ouska
3eb3a70074
try to set sizeof long / long long if user doesn't set
2011-08-29 15:37:12 -07:00
Todd A Ouska
dbbdd83a57
check sizeof long / long long against 64 bit width for mismatch
2011-08-29 11:11:55 -07:00
Todd A Ouska
d0193ba8eb
add math library runtime settings check
2011-08-29 10:39:40 -07:00
Todd A Ouska
5619fa81fa
remove ctc_ prefix and cyassl_ prefix since all includes now specify dir
2011-08-25 12:41:19 -07:00
Todd A Ouska
5876f4acf2
fix sniffer and hc128 builds
2011-08-24 17:39:23 -07:00
Todd A Ouska
9d34e45b71
remove automatic version generated file use since embedded, windows, and project builds won't have available, can turn on in settings
2011-08-24 16:23:27 -07:00
Todd A Ouska
5d49bf7cb0
Brian Aker commits plus some minor changes like AM_CFLAGS getting AC_SUBST and --enable-xxx #ifdef to new header layout
2011-08-24 15:54:58 -07:00