toddouska
dafcd8782a
add altnames check to domain match
2013-04-17 09:37:57 -07:00
toddouska
d50b388a33
add wildcard check to domain name match
2013-04-17 09:07:26 -07:00
John Safranek
fe13b4b6c6
moved and renamed the CBIO error codes so they are publically available
2013-04-16 12:32:55 -07:00
toddouska
7c003c5755
add sanity check on cleanup for possible no init
2013-04-12 17:07:00 -07:00
toddouska
97e0ec073f
make sure all lib proper *.c files have config.h then settings.h then checks for defines in case user using settings.h for lib config
2013-04-10 11:04:29 -07:00
toddouska
185331f007
fix shadow on decl
2013-04-10 10:24:33 -07:00
Chris Conlon
27d6c727e0
add MICROCHIP_TCPIP
2013-04-10 09:16:11 -06:00
John Safranek
e98193000a
KEEP_PEER_CERT includes the function CyaSSL_X509_get_subjectCN
2013-04-09 09:45:25 -07:00
John Safranek
b0dca8ea69
updated SHOW_SIZES, opionally adds sizes as available, added flag to example client to print sizes
2013-04-08 16:01:52 -07:00
John Safranek
9b0ffa0249
brought CYASSL_CALLBACK code up to current standard
2013-04-08 15:34:54 -07:00
John Safranek
786e4d9462
fixed leak of method when ctx malloc fails; implemented get_shutdown
2013-04-03 16:35:19 -07:00
John Safranek
217254b533
check CBIOCookie for NULL before trying to call it
2013-04-02 16:36:07 -07:00
toddouska
1224d3d907
Merge branch 'master' of github.com:cyassl/cyassl
2013-04-01 15:52:23 -07:00
toddouska
0005b4cbe4
move pthread flags/libs to autoconf defines so available to library proper and external tests/examples
2013-04-01 15:50:13 -07:00
John Safranek
e9bc868dbb
AES-GCM does not require SHA-384, but will use it if enabled in build; reorder some of the requirement checks to regroup some NO_RSA suite checks
2013-04-01 14:25:20 -07:00
John Safranek
9975d1d675
Merge branch 'master' of github.com:cyassl/cyassl
2013-04-01 13:39:09 -07:00
John Safranek
44352b5673
don't return closed alert if peer sends fatal alert; respond to closed alert with closed alert
2013-04-01 13:37:25 -07:00
toddouska
4b90474581
move CM VerifyBuffer out of no filesystem
2013-04-01 11:59:17 -07:00
John Safranek
a572967017
when checking for DTLS, only need to compare against major version
2013-03-28 13:28:12 -07:00
toddouska
f396de1191
add DTLS support for alignment
2013-03-27 16:58:27 -07:00
toddouska
82e3c00075
add CYASSL_GENERAL_ALIGNMENT detection and setting for TLS alignment attempt
2013-03-27 15:11:49 -07:00
toddouska
6d8246e98c
fix scan-build 272 warnings
2013-03-27 12:32:22 -07:00
toddouska
7d82bec7fc
do rabbit/hc128 alignment at crypto layer for non intel
2013-03-26 18:16:15 -07:00
toddouska
14b4bb3b0f
change rabbit and hc128 to return values for key and process, will add error rets for alignment issues
2013-03-26 14:42:09 -07:00
toddouska
f601b7bfda
move aesni cbc encrypt align check down to crypto layer
2013-03-26 14:13:01 -07:00
toddouska
6bc7ba1592
change AesCBC end/dec to return status, will add failure cases with align checks
2013-03-26 12:36:39 -07:00
toddouska
8e53c7a62e
fix inline type spot
2013-03-25 11:50:15 -07:00
toddouska
9d77ca744f
fix C++ cast problem on make_eap
2013-03-24 13:06:22 -07:00
John Safranek
436a51a0d7
Merge branch 'ccm'
2013-03-22 17:29:30 -07:00
John Safranek
f65f86bb88
improvements to CCM, ssn6
2013-03-22 11:30:12 -07:00
toddouska
d6deb690e6
Merge branch 'master' into blake2
2013-03-22 10:20:01 -07:00
John Safranek
692dc09d10
Merge branch 'compress'
2013-03-20 10:05:49 -07:00
toddouska
f878dbcef2
fix ecc key load w/ no rsa, ssn5
2013-03-20 09:18:05 -07:00
toddouska
0f8111fc77
zero out psk keys asap, ssn4
2013-03-20 09:12:00 -07:00
John Safranek
e8b9651075
hid the internal compress functions from the cryptlib versions
2013-03-19 16:44:50 -07:00
John Safranek
fc928e7725
added stubs and a test for ctaocrypt compress
2013-03-19 16:25:58 -07:00
toddouska
4f9e915bc1
add KEEP_PEER_CERT flag for non opensslextra peer cert storage, ssn3
2013-03-19 12:18:52 -07:00
toddouska
31b03c8a2d
dtls defaults to no static buffers now, fix valgrind errors with dtls
2013-03-15 14:21:36 -07:00
toddouska
4e99c7ac99
check TRUE/FALSE and move after all includes in ssl.c
2013-03-14 09:34:29 -07:00
toddouska
bb103561ae
fix non DTLS USER_IO cb
2013-03-14 09:16:47 -07:00
toddouska
2e980423ec
hash session IDs since some aren't random afterall
2013-03-13 17:19:36 -07:00
toddouska
e515638503
make EmbedGenerateCookie a callback, USER_IO can install their own or default to ours
2013-03-13 16:41:50 -07:00
toddouska
129de03da0
switch --enable-noInline to enable/disable-inline to match all others
2013-03-13 12:25:34 -07:00
toddouska
0a63898f5b
make sure stat uses full path for REG check
2013-03-13 11:17:14 -07:00
toddouska
11ffca451a
make readdir file type check more generic
2013-03-12 16:21:07 -07:00
toddouska
ec0a4d45cb
add --enable-memory, build, disable runtime memory cbs, check leanpsk
2013-03-12 13:31:14 -07:00
toddouska
4774f1b285
add --enable-coding, build, leanpsk check
2013-03-12 13:12:10 -07:00
toddouska
e8ce0b7f51
add --enable-dh, build, checks w/o asn
2013-03-12 13:03:42 -07:00
toddouska
9a1b32d830
add --enable-asn, build, and checks for rsa / psk w/o asn
2013-03-12 12:48:41 -07:00
toddouska
6773287895
add --enable-des3 and build, no strnstr in tests
2013-03-12 09:46:15 -07:00
toddouska
1628b6f83f
add --enable-sha and build, disables examples for now since certs still use sha, when add --disable-certs add more thorough check
2013-03-11 17:53:38 -07:00
toddouska
7914938e60
--enable-md5 and build, needs NO_OLD_TLS, suite test version check
2013-03-11 17:37:08 -07:00
toddouska
894a35a0f2
add --enable-arc4 and build
2013-03-11 17:13:24 -07:00
toddouska
5a0d108cd9
add --enable-aes and build
2013-03-11 17:07:37 -07:00
toddouska
f232ff84b4
add --enable-pwdbased and build, opensslextra needs
2013-03-11 17:01:05 -07:00
toddouska
7719cd9faa
add --enable-dsa
2013-03-11 16:39:06 -07:00
toddouska
2ab409df96
add --enable-md4
2013-03-11 16:26:08 -07:00
toddouska
49e62f0858
fix general NO_SHA NO_ASN NO_CERTS NO_SESSION_CACHE builds/examples
2013-03-11 16:07:46 -07:00
toddouska
87ad65d33f
add --disable-rsa, bump dev version
2013-03-11 12:49:59 -07:00
toddouska
9210395c57
init alert history state
2013-03-11 12:28:17 -07:00
John Safranek
ec3d060691
fixed a cygwin bug for the build test. recv() was returning an unexpected error code for non-blocking sockets.
2013-03-08 18:09:52 -08:00
John Safranek
20e4889092
Merge branch 'dtls'
...
Conflicts:
src/ssl.c
2013-03-08 17:45:35 -08:00
toddouska
01a5368ffc
rest of ECC no error strings for cipher names
2013-03-08 12:11:49 -08:00
John Safranek
43ed4a7424
added test cases and fixed a bug with AEAD ciphers with DTLSv1.2.
2013-03-07 22:52:51 -08:00
toddouska
6b3a80366f
NO_RSA with ecc build fixes
2013-03-07 18:10:18 -08:00
toddouska
85b3346bbf
NO_RSA build, cipher suite tests need work for this build optoin, ssn2
2013-03-07 17:44:40 -08:00
toddouska
23d6c70d3e
allow for extra bytes in sig encoding for conforming signed big int, patch ssn1
2013-03-07 10:47:01 -08:00
John Safranek
591e1fc772
DTLSv1.2, fixed DTLS socket timeout
2013-03-06 23:02:33 -08:00
John Safranek
49e67487e7
Merge branch 'master' of github.com:cyassl/cyassl
2013-03-04 17:16:32 -08:00
John Safranek
b9ab09a5a6
added test cases for SHA-256 cipher suites, fixed a bug in ECDH-RSA-AES128-SHA256 picking
2013-03-04 16:16:34 -08:00
John Safranek
d52fe96063
added AES-CBC-SHA256 and SHA384 cipher suites.
2013-03-04 13:25:46 -08:00
toddouska
12371d1c3b
fix windows build warnings
2013-03-04 12:18:21 -08:00
toddouska
3319ed9921
Merge branch 'master' into blake2
2013-02-28 16:50:45 -08:00
toddouska
cc9ac1846d
fix ecc w/ no rsa send cert verify and server flag for missing cert verify
2013-02-26 22:24:34 -08:00
toddouska
b397f89b27
better inits for sniffer use
2013-02-26 09:00:46 -08:00
toddouska
f3a16e56c7
help static analysis
2013-02-25 10:47:55 -08:00
toddouska
4fe2a1ec42
fix sigAlgo unused-but-set gcc 4.6 warning
2013-02-25 10:42:51 -08:00
toddouska
48303918c2
Merge branch 'master' into blake2
2013-02-22 15:22:02 -08:00
John Safranek
88ba790930
added an additional failure case log output to InitSSL() for the RNG initialize failing
2013-02-22 09:51:07 -08:00
John Safranek
6ff39cffe4
Merge branch 'dtls'
...
Conflicts:
cyassl/ctaocrypt/types.h
2013-02-20 17:08:22 -08:00
toddouska
b2b45d3f4a
sb fixes for crl and ocsp
2013-02-20 15:26:22 -08:00
John Safranek
ffc67892a4
allow for 0 length handshake messages, still need to store the message header
2013-02-20 10:43:50 -08:00
John Safranek
598043dd6f
drains the DTLS message store once an in-order message is received.
2013-02-20 09:28:09 -08:00
John Safranek
2c1ed7c11c
removed old defragmentation code. fixed new defragment code.
2013-02-20 08:35:33 -08:00
John Safranek
bdadeab342
added storing of out-of-order and fragmented message, missing processing of the stored list
2013-02-19 16:06:02 -08:00
toddouska
07baa27b20
fix scan build for fastmath, dtls, ecc, psk, sha512
2013-02-19 12:53:58 -08:00
John Safranek
116f2403d0
updated the list for storing out of order messages
2013-02-19 12:51:02 -08:00
John Safranek
7e29b8d2a6
Merge branch 'master' of github.com:cyassl/cyassl
2013-02-18 15:20:25 -08:00
toddouska
59af8944cb
fix opensslextra sb issue
2013-02-18 15:11:33 -08:00
John Safranek
87cad7a966
merge branch tls12 into master
2013-02-18 14:36:50 -08:00
John Safranek
0acd8f0670
added sig_algo for rsa for missing cases in SetCipherSpecs()
2013-02-15 12:16:19 -08:00
toddouska
dfa1553548
3rd scan build fixes
2013-02-14 16:23:48 -08:00
toddouska
9ea3371079
2nd round scan build
2013-02-14 16:00:45 -08:00
toddouska
62ef5de25c
scan build fixes
2013-02-14 14:09:41 -08:00
John Safranek
982b72796e
added list for DTLS handshake datagram reordering
2013-02-07 11:26:02 -08:00
toddouska
44e0d7543c
change copyright name with name change
2013-02-05 12:44:17 -08:00
Joakim Soderberg
834ebe5bd8
BUGFIX: Fixed segmentation fault on CyaSSL_BIO_free().
...
In CyaSSL_BIO_new_socket() bio->mem is never initialized. This will cause freeing of unallocated memory in CyaSSL_BIO_free:
if (bio->mem)
XFREE(bio->mem, 0, DYNAMIC_TYPE_OPENSSL);
since bio->mem is not NULL, resulting in a crash.
2013-02-05 11:22:36 +00:00
toddouska
f4f13371f9
update copyright date
2013-02-04 14:51:41 -08:00
toddouska
36f62a5707
fix CyaSSL_write memory error return, bump dev version
2013-02-04 14:11:20 -08:00
toddouska
543d81ba97
release 2.5.0
2013-02-04 13:11:21 -08:00
Todd Ouska
24e22d4b6e
add cavium notes and free ssl cavium ciphers
2013-02-01 16:26:42 -08:00
Todd Ouska
44b6593fe5
add cavium ciphers to SSL, and example client
2013-02-01 12:21:38 -08:00
Todd Ouska
a361f5c4bf
initial cavium, crypto only, no rsa
2013-01-29 16:22:49 -08:00
toddouska
ef644d4de0
fix libz warning
2013-01-25 13:06:44 -08:00
John Safranek
b17b81ef43
added sanity check on return from recv callback
2013-01-24 14:44:08 -08:00
John Safranek
6616975f81
added AES-CCM-8 ECC cipher suites, and more test cases
2013-01-21 15:19:45 -08:00
John Safranek
0e3a093cc5
renamed the Camellia cipher suites, dropped CBC and RSA from the strings
2013-01-21 11:10:11 -08:00
toddouska
9f77aea1f8
Merge branch 'master' into blake2
2013-01-21 10:56:46 -08:00
John Safranek
a453ccba57
Added TLS support for Camellia
2013-01-21 10:53:42 -08:00
John Safranek
425d418dee
added stubs, tests, and benchmark for Camellia to ctaocrypt
2013-01-17 21:52:31 -08:00
toddouska
fe0772bcbf
Merge branch 'master' into blake2
2013-01-17 16:08:47 -08:00
John Safranek
3f77a2c8c9
fixed bug where alerts sent during DTLS handshaking are malformed. check for out of order Server Hello Done during DTLS
2013-01-16 17:25:20 -08:00
John Safranek
ccff37f4b1
added TLS support for AES-CCM-8
2013-01-15 15:20:30 -08:00
John Safranek
eb221238c2
separated TLS-AEAD and AES-GCM so TLS-AEAD can also use AES-CCM
2013-01-14 15:59:53 -08:00
toddouska
51c56051fb
use dynamic buffer for AES-NI encrypt
2013-01-07 14:11:52 -08:00
toddouska
eeb11a6e51
fix rabbit and hc128 CTaoCrypt test buffers for aligned access only, allow TLS on intel w/o aligned stream buffers, otherwise align
2013-01-07 14:06:58 -08:00
John Safranek
f756573401
Merge branch 'ocsp-test'
2013-01-04 14:11:47 -08:00
John Safranek
ac885c40f0
fix a memory leak when OCSP lookup fails
2013-01-04 13:13:20 -08:00
John Safranek
3b6ba7935d
default ocsp lookup callback returns an error if unable to connect to a responder
2013-01-04 10:34:29 -08:00
John Safranek
a695599667
bug fix in default ocsp lookup function
2013-01-03 17:58:45 -08:00
John Safranek
ac227910f1
modify OCSP to use a replacable callback to perform the OCSP transaction
2013-01-03 17:19:56 -08:00
toddouska
53e4c2ed72
fix pvs studio warnings
2013-01-02 11:39:12 -08:00
toddouska
0c363a17f1
init blake2
2012-12-31 13:10:47 -08:00
toddouska
acb3e446ab
typo
2012-12-29 13:33:13 -08:00
toddouska
27a7cf609b
only do Init once per compression rounds
2012-12-29 13:30:23 -08:00
toddouska
3d88d8851a
sslv3 may have bad padding, can't verify
2012-12-29 13:11:31 -08:00
toddouska
640a0cb0e3
fix stream hmac check on multi data
2012-12-28 18:55:18 -08:00
toddouska
4c453d4d69
have server side reply unexpected_message for hello_request
2012-12-28 14:36:19 -08:00
toddouska
f073f49ead
make sure handshake complete before sending encrypted alert
2012-12-28 14:29:15 -08:00
toddouska
6d3728fe61
fix ripemd compression round
2012-12-28 14:19:28 -08:00
toddouska
23ff36075b
check RSA explicit size
2012-12-28 12:28:25 -08:00
toddouska
09ea7169d7
use exisiting dummy data for compression round
2012-12-28 11:48:30 -08:00
John Safranek
7ac6a21af5
updated comment for aead in SanityCheckCipherText()
2012-12-27 19:51:06 -08:00
toddouska
561906cffd
Merge branch 'master' of github.com:cyassl/cyassl
2012-12-27 16:36:48 -08:00
toddouska
f0bc61a5d3
add more robust pad/verify checks
2012-12-27 16:35:43 -08:00
John Safranek
e70838e984
Merge branch 'ecc'
2012-12-27 11:41:20 -08:00
John Safranek
581f91b984
Merge branch 'master' of github.com:cyassl/cyassl
2012-12-27 11:40:17 -08:00
Chris Conlon
60f4919ee6
add STM32 to README
2012-12-27 10:16:08 -07:00
Chris Conlon
254d53bb18
add CYASSL_STM32F2 define, LwIP errno.h
2012-12-27 10:06:29 -07:00
John Safranek
cf114b92df
made the ecc keys in the CYASSL struct dynamic
2012-12-26 16:39:19 -08:00
John Safranek
6913a46331
Merge branch 'master' of github.com:cyassl/cyassl
2012-12-26 10:40:28 -08:00
toddouska
59419bef89
non block type ciphertext sanity checks
2012-12-26 10:11:15 -08:00
John Safranek
5bc976ee0f
free ecc keys at the end of handshaking
2012-12-26 09:49:53 -08:00
toddouska
9c58f70e29
add ciphertext size sanity checks
2012-12-24 15:40:09 -08:00
John Safranek
831c760edc
Merge branch 'ocsp'
...
Fixes some bugs in the ocsp code, and adds a new option to skip nonces.
2012-12-20 16:26:49 -08:00
John Safranek
51787db76b
changed ocsp lookup to use dynamic mem for request rather than stack
2012-12-19 18:09:05 -08:00
John Safranek
4e657debfc
added the ability to disable OCSP nonces
2012-12-19 10:18:11 -08:00
John Safranek
b36bc55197
Merge branch 'ocsp'
2012-12-17 22:23:31 -08:00
John Safranek
359e86adf6
1. When OCSP and CRL enabled, checks CRL if unable to contact OCSP responder
...
and OCSP was enabled.
2. Fixed a couple string typos.
3. Only check OCSP if cert successfully parsed.
2012-12-17 22:19:20 -08:00
toddouska
b25061844c
remove hmac array initializers to 0 when non full because of reported compiler weirdness from user
2012-12-14 16:47:03 -08:00
toddouska
0e67cd17d6
clang opensslExtra fix
2012-12-12 20:04:10 -08:00
toddouska
726d686b07
fix clang scan-build problems
2012-12-12 18:03:32 -08:00
John Safranek
977ff51ad5
Merge branch 'master' of github.com:cyassl/cyassl
2012-12-12 09:42:21 -08:00
John Safranek
ac1890922b
removed unused variable from lookup cert
2012-12-12 08:53:51 -08:00
toddouska
7e8438b7b4
fix pvs studio warnings
2012-12-11 11:33:49 -08:00
John Safranek
e925fbdbd6
check correct pointer before freeing when done looking up cert
2012-12-07 15:49:43 -08:00
toddouska
5ecca5a89d
user no longer has to call CyaSSL_Init
2012-12-06 09:26:59 -08:00
toddouska
067f10ae8e
add enable-valgrind
2012-12-04 21:28:18 -08:00
John Safranek
8c97675979
Lean PSK trimming
...
1. leave out memory and io callback functions, expect user supplied
2. leave out cert and DTLS related functions
3. SHA-1 compile option to use slower, rolled-up transform
2012-11-30 15:45:43 -08:00
toddouska
6e4d33eb00
move ProtocolVersion struct members directly into RecordLayerHeader
2012-11-28 16:34:41 -08:00
toddouska
6280aa9c91
make sure converted errors are handled by string output
2012-11-28 11:54:25 -08:00
John Safranek
77bf77dfd7
Merge branch 'master' of github.com:cyassl/cyassl
2012-11-27 22:19:01 -08:00
John Safranek
66a3ce2ec1
added SHA-256 based RNG when setting NO_RC4 compile flag
2012-11-27 22:17:25 -08:00
toddouska
4af555b502
unused no_session_cache fix
2012-11-27 15:39:40 -08:00
toddouska
faa7283ff3
fix crl resource leaks
2012-11-27 11:36:36 -08:00
John Safranek
f8f7f69f48
compile option to leave out MD5 and SSL code
2012-11-26 18:40:43 -08:00
John Safranek
78c1d592cc
Merge branch 'master' of github.com:cyassl/cyassl
2012-11-20 14:54:59 -08:00
John Safranek
a89398fdbc
added the cipher suites PSK-NULL-SHA256 and PSK-AES128-CBC-SHA256
2012-11-20 14:52:17 -08:00
toddouska
da386691a1
allow no end of line on last line of PEMs
2012-11-20 12:45:24 -08:00
toddouska
d4035e5f62
add freebsd crl-monitor support
2012-11-16 13:25:45 -08:00
toddouska
dd259b12c7
add CyaSSL_peek()
2012-11-16 12:16:00 -08:00
toddouska
5d912d4c2b
shadow crl-monitor linux fix
2012-11-16 10:54:36 -08:00
toddouska
9ac2eaa3d6
fix ipv6 unused warning, add os check for crl monitor
2012-11-16 10:47:13 -08:00
toddouska
5767db4cb5
minor warnings fixes
2012-11-13 18:32:13 -08:00
Chris Conlon
54a7740cfe
substitue posix.h for errno.h in MQX build
2012-11-12 14:25:59 -07:00
toddouska
53c14bdf1f
fix XMALLOC_USER typos
2012-11-07 17:10:34 -08:00
John Safranek
b8c9247769
for lean-psk build: remove big int math, MD4, error strings
2012-11-02 16:49:31 -07:00
John Safranek
5e48dcbeeb
fixed build warning with Fortress build
2012-11-01 15:59:13 -07:00
John Safranek
9aa8b71525
Merge branch 'nocerts'
2012-11-01 15:47:02 -07:00
John Safranek
90e6a4dd8c
linux build warnings fix
2012-11-01 15:27:05 -07:00
John Safranek
134c6b8b1b
cleaning warnings in OCSP build
2012-11-01 15:03:29 -07:00
toddouska
ae905d70c4
crl warning fixes
2012-11-01 14:14:40 -07:00
John Safranek
85e8f1988a
leanpsk build removes cert code, moved ctaocrypt error strings to own file
2012-11-01 12:36:47 -07:00
toddouska
0e2c236e77
fix x64 windows warnings, make sure word is 64bit
2012-11-01 12:21:47 -07:00
Chris Conlon
f6304ae37a
add support for Freescale MQX
2012-11-01 11:23:42 -06:00
toddouska
a4220120ba
remove memset for setcokopt uninit
2012-10-31 15:43:08 -07:00
toddouska
6348f3f2c7
fix valgrind uninit warning on dtls setsockopt
2012-10-31 13:26:03 -07:00
toddouska
01138a5c53
fix stack-check warnings for newer versions but fastmath still has some so take away warning for now
2012-10-30 17:35:12 -07:00
John Safranek
174618ebfb
added build option for leanPSK
2012-10-29 15:39:42 -07:00
toddouska
35b4f08049
add CyaSSL_send()/recv() with flags parameter
2012-10-26 15:09:58 -07:00
toddouska
d4d5243f4d
add user ability to set IO read/write flags
2012-10-25 14:17:11 -07:00
toddouska
01ae0696af
shorten64 fixes for key-gen/cert-gen
2012-10-25 12:31:11 -07:00
toddouska
0bbbea20be
switch sniffer buffers to dynamic, reduce holding memory if large number of sessions cached
2012-10-24 17:37:57 -07:00
toddouska
3e7619c785
make sure sniffer frees handhsake resources early
2012-10-24 14:51:04 -07:00
toddouska
f969bc3645
if sniffer sees ACK for missing packet(s) set to error, can't recover
2012-10-24 13:33:11 -07:00
John Safranek
ba2a7f2627
Merge branch 'master' of github.com:cyassl/cyassl
2012-10-24 11:27:05 -07:00
John Safranek
936d0ff7a9
fixed off-by-one dtls cookie size check. fixed some warnings when disabling features
2012-10-24 11:05:50 -07:00
toddouska
2885d66b17
remove fatal sniffer error sessions right away
2012-10-23 16:32:47 -07:00
toddouska
4d719897a5
Merge branch 'master' of github.com:cyassl/cyassl
2012-10-22 17:29:19 -07:00
toddouska
aef97af361
make rabbit optional with configure option
2012-10-22 17:28:46 -07:00
John Safranek
5a421c04e7
Merge branch 'master' of github.com:cyassl/cyassl
2012-10-22 14:50:02 -07:00
John Safranek
d78770c1e5
change null cipher to allow different buffers
2012-10-22 14:48:27 -07:00
toddouska
cb08eb672e
Merge branch 'master' of https://github.com/BrianAker/cyassl
2012-10-22 10:56:53 -07:00
John Safranek
a92b639155
add optional null cipher support for RSA
2012-10-19 20:52:22 -07:00
Brian Aker
b883cc55a4
Fix rules around pthread usage to fix clang warning.
2012-10-19 20:09:17 -07:00
toddouska
a5d7a3ea8f
fix opensslExtra with psk server example, add psk to commit tests
2012-10-19 12:54:15 -07:00
toddouska
c974d77213
add shorten 64 to 32 warnings back on with fixes
2012-10-19 12:44:23 -07:00
John Safranek
346a52a58c
add optional null cipher support for PSK
2012-10-19 10:37:21 -07:00
John Safranek
e673b1852a
fixed windows build warnings
2012-10-09 16:13:05 -07:00
toddouska
4a739f6bc7
sniffer handshake state fix for sanity checks
2012-10-05 13:39:11 -07:00
toddouska
57e7e28d6d
Merge branch 'master' of github.com:cyassl/cyassl
2012-10-03 17:10:05 -07:00
toddouska
9ca07d1f4d
dtls may have different first handshake message
2012-10-03 17:09:45 -07:00
John Safranek
0d80343073
Merge branch 'master' of github.com:cyassl/cyassl
2012-10-03 16:53:55 -07:00
toddouska
257d10a69f
sanity check for out of order handshake messages
2012-10-03 16:44:08 -07:00
toddouska
66c95b0c15
DoAppData sanity check for handshake complete
2012-10-03 16:36:00 -07:00
John Safranek
397fbb743f
Merge branch 'master' of github.com:cyassl/cyassl
2012-10-03 15:33:23 -07:00
John Safranek
95a30e3f0a
windows bug fix on dtls retry
2012-10-03 15:29:28 -07:00
toddouska
e970cdfbc0
init cipher specs, check client key exchange state b4 process
2012-10-03 11:57:20 -07:00
John Safranek
9bbca6acfb
Merge branch 'master' of github.com:cyassl/cyassl
2012-10-02 14:42:06 -07:00
John Safranek
6d1e485ef4
DTLS to use recvfrom and sendto in embed recv and send callbacks. Added support for storing dtls peer address.
2012-10-02 09:15:50 -07:00
toddouska
36eeab927b
fix sniffer assert comparison on newer gcc
2012-10-01 13:16:37 -07:00
toddouska
e0413df92a
add key setup flag for malicious or misbehaving handshake messages with new memory system
2012-10-01 11:32:05 -07:00
toddouska
e5c04e70a7
make sure existing nonblocking users still work
2012-09-28 15:10:35 -07:00
toddouska
dd421ebb7d
cleaner sniffer mem fix
2012-09-28 11:04:20 -07:00
toddouska
30bec6c193
fix sniffer out of memory potential problem
2012-09-28 10:58:33 -07:00
John Safranek
dfb84dff37
added accessors for CYASSL members for use in send/recv callbacks
2012-09-25 15:51:56 -07:00
John Safranek
cd0226924a
Merge branch 'master' of github.com:cyassl/cyassl
2012-09-21 16:37:34 -07:00
John Safranek
9643e58dad
fixed bug for Windows build
2012-09-21 16:36:48 -07:00
toddouska
4e19c234f4
fix new warnings on linux64
2012-09-21 13:29:04 -07:00
John Safranek
c3aedc940f
improved dtls retry on connect
2012-09-21 09:36:01 -07:00
John Safranek
08a3423f43
changed error return code for dtls functions to NOT_COMPILED_IN
2012-09-19 09:09:27 -07:00
John Safranek
059db7f69c
check the return code of DtlsPoolSave()
2012-09-18 16:00:30 -07:00
John Safranek
d1068d25d1
fixed another compile warning
2012-09-18 12:05:16 -07:00
John Safranek
68cb6044cb
Merge branch 'master' of github.com:cyassl/cyassl
2012-09-18 11:41:25 -07:00
John Safranek
989d7f4aad
fixed windows build warning
2012-09-18 11:11:45 -07:00
toddouska
f6c5bf032d
update sniffer more memory changes
2012-09-18 09:08:40 -07:00
John Safranek
d1baa9f541
Merge branch 'master' of github.com:cyassl/cyassl
2012-09-18 08:46:11 -07:00
toddouska
53ccbddd01
allow meta PEM data at end of file too
2012-09-17 17:25:38 -07:00
John Safranek
88bba146ae
fixed bug with handshake defragmentation and ordering
2012-09-17 11:32:36 -07:00
John Safranek
40eb5b3cc5
DTLS resend allocates only enough buffer when needed
2012-09-17 09:52:20 -07:00
John Safranek
40972868ce
fix merge conflicts
2012-09-14 21:19:06 -07:00
John Safranek
7899252104
dtls handshake improvement
2012-09-14 19:30:50 -07:00
John Safranek
56ee2eaba8
added dtls message retry
2012-09-14 09:35:34 -07:00
John Safranek
97ca8439a4
Merge branch 'master' of github.com:cyassl/cyassl
2012-09-07 08:30:03 -07:00
John Safranek
407397e8be
adding DTLS retry timeout, added CYASSL pointer to recv/send callbacks
2012-09-06 22:41:55 -07:00
toddouska
8c32a5a2ed
make RNG in ssl dynamic, release after hs if stream or < tls1.1
2012-09-05 16:18:29 -07:00
toddouska
9ddf43268d
use dynamic memory for ssl ciphers, only use what needed
2012-09-05 12:30:51 -07:00
toddouska
c47afaf84f
make suites object dynamic, only use during handshake
2012-09-05 10:17:48 -07:00
toddouska
56960ef1cc
cyassl object size debug output
2012-09-05 09:02:51 -07:00
toddouska
43a0a21fb6
add GetOjbectSize for CYASSL*
2012-09-05 08:26:08 -07:00
toddouska
982526ed13
go straight to p_hash in TLS 1.2 to remove PRF stack use
2012-09-04 16:34:26 -07:00
toddouska
0ee22d8f94
don't use SSL Master Secret stack space in TLS mode
2012-09-04 16:03:45 -07:00
toddouska
6943229f87
reduce client key exchange stack use in non NTRU mode
2012-09-04 15:56:52 -07:00
toddouska
b1e603ae6b
opensslextra clang static fixes
2012-09-04 15:47:40 -07:00
toddouska
1ba8aff525
don't allow corrupted change cipher (fix by antoxa), don't allow multiple decryptions of corrupted messages
2012-09-04 11:37:47 -07:00
toddouska
2bee126062
clang scan-build fixes
2012-09-04 10:48:26 -07:00
John Safranek
820d934ae8
Merge branch 'master' of github.com:cyassl/cyassl
2012-08-28 09:37:02 -07:00
John Safranek
c9625789cd
allow early DTLS datagrams, but drop late ones.
2012-08-28 08:55:31 -07:00
toddouska
30a264eb65
make sure mp_init return always checked
2012-08-27 11:30:22 -07:00
John Safranek
98bc1f8c46
fix build warning
2012-08-23 16:28:24 -07:00
John Safranek
561a7fc35d
drop out of order dtls packets
2012-08-23 15:50:56 -07:00
John Safranek
f6cca6049f
Merge branch 'master' of github.com:cyassl/cyassl
2012-08-22 16:16:49 -07:00
John Safranek
79c14dc825
Merge branch 'master' of github.com:cyassl/cyassl
2012-08-22 15:36:07 -07:00
John Safranek
31d036178e
fix DTLS cookies and session resumption
2012-08-22 14:06:08 -07:00
toddouska
87762e9012
SafeRTOS client test fixes
2012-08-22 11:07:40 -07:00
John Safranek
c20eb88d3d
Merge branch 'master' of github.com:cyassl/cyassl
2012-08-17 14:21:17 -07:00
toddouska
690938ffd4
lsr fs macros
2012-08-17 13:45:31 -07:00
toddouska
925ddb6626
Merge branch 'master' of github.com:cyassl/cyassl
2012-08-15 17:00:34 -07:00
toddouska
05692e1d6a
IAR fixes, SafeRTOS port, better LWIP support
2012-08-15 17:00:11 -07:00
John Safranek
c42792e0f1
fix compiler warnings
2012-08-14 13:51:56 -07:00
Chris Conlon
198e48fa94
minor RTIP adjustments
2012-08-14 13:10:27 -06:00
John Safranek
9d912970c8
Merge branch 'master' of github.com:cyassl/cyassl
2012-08-13 17:33:20 -07:00
Chris Conlon
7ec04c16b6
EBSnet RTIP support
2012-08-13 17:10:05 -06:00
John Safranek
c08debf236
Merge branch 'master' of github.com:cyassl/cyassl
2012-08-13 16:04:41 -07:00
John Safranek
bfd510b919
cleaned up the cookie generator for Windows and IPv4 only
2012-08-13 15:05:28 -07:00
toddouska
4c66c4c3b5
use XBADFILE for init in bad state
2012-08-13 10:59:34 -07:00
toddouska
220bd66a63
allow XFILE to work with non pointer types
2012-08-13 10:53:47 -07:00
John Safranek
1c2a3eddc1
Merge branch 'master' of github.com:cyassl/cyassl
2012-08-10 14:15:31 -07:00
toddouska
d5fdb74d9a
fix small build proper
2012-08-10 12:40:22 -07:00
John Safranek
70552ef8e1
added DTLS handshake message defragmentation
2012-08-10 10:24:31 -07:00
John Safranek
11df1d25d4
fixed the dtls handshake header handling
2012-08-09 13:27:30 -07:00
John Safranek
93c89ccc35
Merge branch 'master' of github.com:cyassl/cyassl
2012-08-09 11:02:27 -07:00
John Safranek
6722022201
splitting off dtls handshake header to be handled differently
2012-08-09 11:02:21 -07:00
toddouska
80326fa1fa
pub EmbedGenerateCookie around dtls for now
2012-08-08 17:21:03 -07:00
toddouska
18c3679444
fix DLTS cookieSz init problem
2012-08-08 16:56:19 -07:00
toddouska
17a92e76d3
add aesgcm openssl, and fix requires to use our local enum for aesgcm
2012-08-08 15:37:00 -07:00
toddouska
08ff33894f
add ECDH static cipher suite tests including RSA signed ECDH, clean up code with haveECDSA -> haveECDSAsig
2012-08-08 15:09:26 -07:00
John Safranek
3747246133
added the generation, verification, and client usage of DTLS handshake cookies
2012-08-08 10:38:12 -07:00
Chris Conlon
afa27f0021
FreeRTOS threads support, windows simulator support
2012-08-02 09:54:41 -06:00
John Safranek
b8b5e7b873
Merge branch 'master' of github.com:cyassl/cyassl
2012-07-31 18:42:44 -07:00
toddouska
a5af2e3d51
add altname retrieval from peer cert
2012-07-31 17:45:48 -07:00
John Safranek
ab570a2130
aes-gcm wrap two new aes-gcm code bits with ifdef option
2012-07-31 16:26:17 -07:00
John Safranek
368afbb815
Merge branch 'master' of github.com:cyassl/cyassl
2012-07-31 10:11:21 -07:00
John Safranek
9b8c5fb40e
aes-gcm: modified to use sequence number rather that a random explicit IV
2012-07-31 09:32:29 -07:00
toddouska
85889f7fb9
add md2 signature hash support
2012-07-27 14:01:02 -07:00
toddouska
e2eb1b78cc
Merge branch 'master' of github.com:cyassl/cyassl
2012-07-27 12:32:42 -07:00
toddouska
6e84ab1271
add max chain depth unique error, increase depth to 6
2012-07-27 12:32:22 -07:00
John Safranek
3cd231bdfc
Merge branch 'master' of github.com:cyassl/cyassl
2012-07-24 15:04:16 -07:00
John Safranek
cf7e8baa19
moved aes-gcm cipher suites around in the list to follow the existing suites
2012-07-23 15:15:40 -07:00
toddouska
aa164e5266
make compression more standard, no size prefix, default zlib comp, check verify before overwrite w/ decomp... still needs FIN and ALERT processing
2012-07-23 13:47:30 -07:00
