John Safranek
e79ce42ef4
Added checking of the key usage and extended key usage extensions in the
...
certificates.
2014-04-10 16:50:14 -07:00
John Safranek
1f3bc9263d
error to have v1 or v2 certificates with extensions
2014-03-28 11:25:05 -07:00
John Safranek
b5a27b0f41
Add compile flag to disable Cert Sign key usage flag check.
2014-03-28 11:21:07 -07:00
John Safranek
4b22986e74
Check for Certificate Sign key usage bit on intermediate CAs.
2014-03-28 10:10:22 -07:00
Moisés Guimarães
bbc9c53b90
fix error include
2014-03-28 14:01:10 -03:00
Moisés Guimarães
6b9f711de0
DesSetKey refactory to reduce stack usage:
...
--- buffer variable moved to the heap;
--- return type changed to int, returning 0 for success;
--- chain of dependency updated to propagate the error.
2014-03-28 12:59:39 -03:00
Chris Conlon
74a6916606
remove fips file stubs
2014-03-27 12:47:38 -06:00
Chris Conlon
59c1adaf0e
version 2.9.2 release
2014-03-27 10:35:57 -06:00
Chris Conlon
4677f2f2c1
fix windows warnings, ignore empty file ones
2014-03-27 10:09:14 -06:00
Chris Conlon
62b8abafc5
fix variable shadow warning in asn.c
2014-03-26 23:43:44 -06:00
Chris Conlon
9d74775934
add fips file placeholders
2014-03-26 23:40:07 -06:00
toddouska
5bbd36c860
update README for 2.9.2
2014-03-26 14:47:26 -07:00
toddouska
7e9be23628
fix item 5 from report by Ivan Fratric of the Google Security Team
2014-03-26 13:54:16 -07:00
toddouska
717f3adb47
fix item 9 from report by Ivan Fratric of the Google Security Team
2014-03-26 13:28:19 -07:00
toddouska
86ebc48032
fix for item 7 report by Ivan Fratric of the Google Security Team
2014-03-26 13:16:43 -07:00
toddouska
23300a201f
Merge branch 'master' of github.com:cyassl/cyassl
2014-03-26 12:15:04 -07:00
toddouska
43909ac725
fix sslv3 verify mac pad check, item 6 by report from Ivan Fratric of the Google Security Team
2014-03-26 12:14:18 -07:00
John Safranek
dd61daef70
When saving the signature from a DecodedCert to a CYASSL_X509 only copy
...
the signature if it exists.
2014-03-26 12:01:26 -07:00
toddouska
d5be4c4663
SHA-256 fips mode
2014-03-25 17:11:15 -07:00
toddouska
18d178f325
add ShaFinal fips mode
2014-03-25 16:20:03 -07:00
toddouska
b41186a6dd
Merge branch 'master' of github.com:cyassl/cyassl
2014-03-25 16:02:12 -07:00
toddouska
3607db9077
add SHA1 fips mode
2014-03-25 16:01:17 -07:00
Chris Conlon
67672171c1
udpate .gitignore, ignore MPLABX generated files
2014-03-25 16:20:24 -06:00
Chris Conlon
0d25d6f11d
update MCAPI projects to use zlib 1.2.8
2014-03-25 16:18:55 -06:00
Chris Conlon
746fd7d74d
increase MCAPI CRYPT_AES_CTX to hold Aes
2014-03-25 16:16:44 -06:00
Chris Conlon
73e0ef76f7
fix unclosed MPLABX ifdef
2014-03-25 15:39:37 -06:00
toddouska
0fd8ca5409
NO_MAIN_DRIVER for settings
2014-03-25 14:10:07 -07:00
toddouska
b6fc109c1d
add ecc_ctx_reset() so user can reuse ctx w/o init/free
2014-03-25 12:48:25 -07:00
toddouska
43c6ae3691
no C++ comments
2014-03-25 11:44:00 -07:00
toddouska
fb6d671629
resolve pull request merge conflict
2014-03-25 11:39:07 -07:00
toddouska
8c5d958a8b
add Aes SetIV fips mode
2014-03-24 14:01:36 -07:00
toddouska
0ea10a4388
add 3DES fips mode
2014-03-24 13:37:52 -07:00
toddouska
8889e17489
Merge branch 'master' of github.com:cyassl/cyassl
2014-03-21 14:50:52 -07:00
toddouska
9fe9276236
finish fips aes w/ tests
2014-03-21 14:49:49 -07:00
John Safranek
e19e2a801d
Ext Key Usage
...
1. Store reference to raw EKU OIDs in the DecodedCert.
2. Fixed usage of the anyEKU.
2014-03-21 09:37:10 -07:00
John Safranek
08ae775406
Merge branch 'master' of github.com:cyassl/cyassl
2014-03-21 09:34:08 -07:00
toddouska
a0d4c34900
allow snifftest to handle jumbo frames + potential partial 16k record from previous data packet on the stack
2014-03-20 15:34:20 -07:00
toddouska
98c6e3f3af
have Base16 Decode on for FIPS tests
2014-03-20 11:38:14 -07:00
toddouska
c934f6b4b5
linux doesn't suport -o ping, -i 0.2 is more compatible
2014-03-20 11:05:03 -07:00
toddouska
ef8458f754
return right away after valid ping response, use TLSv1.2 for google
2014-03-20 10:37:53 -07:00
toddouska
0e9f2b5996
Merge branch 'master' of github.com:cyassl/cyassl
2014-03-20 10:32:50 -07:00
toddouska
8bc6bf9424
add lower case support to Base16 decode for better known answer test support, export
2014-03-20 10:31:52 -07:00
John Safranek
1e041abf04
decode Extended Key Usage extension
2014-03-20 10:07:47 -07:00
John Safranek
5c41acb6be
Merge branch 'master' of github.com:cyassl/cyassl
2014-03-19 21:31:15 -07:00
John Safranek
acfa8fb966
Added a test script to perform a client/webserver connection.
2014-03-19 21:20:43 -07:00
toddouska
58885b36eb
add AesCbc fips mode
2014-03-19 16:43:52 -07:00
toddouska
388436c53e
add AesSetKey fips mode
2014-03-19 13:56:11 -07:00
toddouska
faecf7f849
require thread local storage for power on self thread check
2014-03-19 10:19:08 -07:00
toddouska
be9451fbc5
rm --cahced didn't work to stop tracking
2014-03-19 09:55:20 -07:00
toddouska
8bbc30f3e1
add fips enable switch
2014-03-19 09:43:57 -07:00
