dgarske
|
f549f71912
|
Merge pull request #325 from kaleb-himes/CID-66016-coverity
Always execute wc_InitRsaKey if we are always going to execute wc_Fre…
|
2016-02-25 08:45:06 +01:00 |
|
dgarske
|
f0b1d2fd9d
|
Merge pull request #324 from JacobBarthelmeh/master
argument peer can be NULL when macro INADDR_ANY is NULL
|
2016-02-25 08:40:37 +01:00 |
|
John Safranek
|
aa7eae3294
|
Merge pull request #320 from moisesguimaraes/fix-ocsp-dependency-check
fixes ocsp dependency check on asn during configure.
|
2016-02-24 16:21:51 -08:00 |
|
kaleb-himes
|
16dac5597f
|
prevent buffer overflows if sigSz > MAX_ENCODED_SIG_SZ
|
2016-02-24 16:08:54 -07:00 |
|
Moisés Guimarães
|
fb9697bda6
|
adds check for missing rsa and ecc at the same time
|
2016-02-24 18:57:16 -03:00 |
|
kaleb-himes
|
4858a65984
|
Always execute wc_InitRsaKey if we are always going to execute wc_FreeRsaKey
|
2016-02-24 14:42:07 -07:00 |
|
Jacob Barthelmeh
|
6ee3c0ae59
|
argument peer can be NULL when macro INADDR_ANY is NULL
|
2016-02-24 13:55:44 -07:00 |
|
Moisés Guimarães
|
1824a494d1
|
adds missing ENABLED_OCSP test
|
2016-02-24 16:45:07 -03:00 |
|
toddouska
|
35b48250ad
|
Merge pull request #321 from dgarske/FixCryptBenchEdCurve25519
Fixes issue with building crypt benchmark with only ED/Curve25519 ena…
|
2016-02-24 11:19:30 -08:00 |
|
toddouska
|
12bb050ec9
|
Merge pull request #323 from JacobBarthelmeh/master
check for RSA and ECC before testing RSA signed ECC cert
|
2016-02-24 09:34:37 -08:00 |
|
Jacob Barthelmeh
|
dcfec3d2fa
|
check for RSA and ECC before testing RSA signed ECC cert
|
2016-02-23 17:03:52 -07:00 |
|
Moisés Guimarães
|
143b9fda1b
|
adds build dependency check for OCSP
|
2016-02-23 15:19:04 -03:00 |
|
Moisés Guimarães
|
a92d2d582f
|
Revert "fixes ocsp dependency check on asn during configure."
This reverts commit 46ade8f03ff2a53a710beacc438f875dd3610969.
|
2016-02-23 14:13:52 -03:00 |
|
toddouska
|
8dbef9b14b
|
Merge pull request #318 from dgarske/BuildErrorNoFileSysWCerts
Fixes build error with NO_FILESYSTEM and !NO_CERTS
|
2016-02-22 12:12:24 -08:00 |
|
David Garske
|
731e13ecf2
|
Fixes issue with building crypt benchmark with only ED/Curve25519 enabled with static rng missing.
|
2016-02-22 16:46:13 +01:00 |
|
Moisés Guimarães
|
46ade8f03f
|
fixes ocsp dependency check on asn during configure.
|
2016-02-21 20:54:45 -03:00 |
|
David Garske
|
953a3bd01d
|
Fixes build error with NO_FILESYSTEM and !NO_CERTS where the wolfssl/test.h load_buffer() function is passing non-existent enum value. Was renamed from CYASSL_ to WOLFSSL_.
|
2016-02-19 13:52:06 -08:00 |
|
dgarske
|
b72c83e191
|
Merge pull request #315 from kaleb-himes/fix-no-sha
update for configure option --disable-sha
|
2016-02-16 13:08:59 -08:00 |
|
toddouska
|
c1ef4d4521
|
Merge pull request #313 from kaleb-himes/master
wolfssl.com and google.com now differ in pre-reqs for external test
|
2016-02-16 11:05:55 -08:00 |
|
kaleb-himes
|
24d93c90cd
|
update for configure option --disable-sha
|
2016-02-16 12:03:37 -07:00 |
|
kaleb-himes
|
46b34c19d0
|
wolfssl.com and google.com now differ in pre-reqs for external test
|
2016-02-15 13:30:11 -07:00 |
|
toddouska
|
3d8f91d418
|
Merge pull request #302 from dgarske/EccOnlyNoSignVerify
New ECC and ASN build options for reduce build size options
|
2016-02-15 12:13:43 -08:00 |
|
toddouska
|
d7d2a6f565
|
Merge pull request #307 from JacobBarthelmeh/PSK
New fail with no peer cert behavior and allow RSA signed ECC key certs
|
2016-02-12 15:27:18 -08:00 |
|
JacobBarthelmeh
|
7de352a0e9
|
Merge pull request #311 from dgarske/FixSkipObjectIdWarn
Fixes warning with SkipObjectId defined but not used.
|
2016-02-12 15:04:04 -07:00 |
|
toddouska
|
951fe0a927
|
Merge pull request #310 from dgarske/CustRngGenBlock
Added new CUSTOM_RAND_GENERATE_BLOCK option that allows override and …
|
2016-02-12 13:51:06 -08:00 |
|
David Garske
|
a969dd8efd
|
Fixed "error: unused function 'StoreRsaKey'" with NO_ASN_TIME and RSA enabled.
|
2016-02-12 13:19:58 -08:00 |
|
David Garske
|
aeaac15682
|
Fixed compile errors in signature.c if ECC on but ECC sign/verify disabled. Added new NO_ASN_TIME option to reduce ASN size for space constrained or missing RTC. Added check to make sure ASN is enabled if ECC sign/verify is enabled.
|
2016-02-12 13:16:39 -08:00 |
|
Jacob Barthelmeh
|
8073024ee7
|
fix formatting of .conf file so ephemeral port is used
|
2016-02-12 13:41:30 -07:00 |
|
David Garske
|
f328c6bdf7
|
Fixes warning with SkipObjectId defined but not used.
|
2016-02-12 12:34:22 -08:00 |
|
David Garske
|
08c663a4ac
|
Added new CUSTOM_RAND_GENERATE_BLOCK option that allows override and disabling of the HASHDRBG for customers who have a HW RNG they would like to use instead.
Examples:
"./configure --disable-hashdrbg CFLAGS="-DCUSTOM_RAND_GENERATE_BLOCK= custom_rand_generate_block".
OR
/* RNG */
//#define HAVE_HASHDRBG
extern int custom_rand_generate_block(unsigned char* output, unsigned int sz);
|
2016-02-12 11:59:51 -08:00 |
|
David Garske
|
4872f2bc33
|
Added the following ECC optional config defines: HAVE_ECC_SIGN, HAVE_ECC_VERIFY, HAVE_ECC_DHE, HAVE_ECC_KEY_IMPORT and HAVE_ECC_KEY_EXPORT. Still working through issues with using ECC sign/verify with ASN disabled. Added documentation to top of ecc.c for all the ECC define options.
|
2016-02-12 11:07:50 -08:00 |
|
Jacob Barthelmeh
|
3e860107f3
|
remove extra cert and key, plus add new test
|
2016-02-11 13:49:07 -07:00 |
|
Jacob Barthelmeh
|
1197f88c4f
|
add psk.test script for testing
|
2016-02-11 09:15:04 -07:00 |
|
toddouska
|
09f631238e
|
Merge pull request #306 from kaleb-himes/master
correct logic to allow for static RSA if ECC and no Curves
|
2016-02-10 16:47:17 -08:00 |
|
dgarske
|
49a5ea18e8
|
Merge pull request #303 from ejohnstown/sniffer-check
When loading a named key, check that the save buffer mallocs.
|
2016-02-10 13:19:59 -08:00 |
|
dgarske
|
b0a51a22a1
|
Merge pull request #304 from cconlon/testh-fix
Check build_addr() arguments for NULL
|
2016-02-10 13:19:28 -08:00 |
|
David Garske
|
a83ff6aada
|
Updated the configure.ac comments about big int being used for ECC and DH. Moved the checks for ecc/asn and psk/asn until after cryptonly value is set and fixed so those checks work for normal build and are excluded for crypt only builds.
|
2016-02-10 13:03:53 -08:00 |
|
Jacob Barthelmeh
|
9defe9b42b
|
fix warning of unused variable and adjust debug statements
|
2016-02-10 13:57:10 -07:00 |
|
kaleb-himes
|
ffe7b38409
|
correct logic to allow for static RSA if ECC and no Curves
use same coding standards as the rest of the libraries
|
2016-02-10 13:39:59 -07:00 |
|
Jacob Barthelmeh
|
69fc400d28
|
add new certs to EXTRA_DIST
|
2016-02-10 13:26:03 -07:00 |
|
Jacob Barthelmeh
|
2f74706367
|
allow use of RSA signed ECC key certs
|
2016-02-10 13:26:03 -07:00 |
|
Jacob Barthelmeh
|
ff7a9d9f78
|
option for fail on no peer cert except PSK suites
|
2016-02-10 13:26:03 -07:00 |
|
Chris Conlon
|
3293857834
|
check build_addr() arguments for NULL before memset
|
2016-02-10 10:35:48 -07:00 |
|
David Garske
|
8d0d5a3f90
|
Fixes so ECC only build works. Fixes so ECC enabled with ASN disabled works and will prevent ECC sign/verify.
|
2016-02-10 08:53:09 -08:00 |
|
dgarske
|
9a5938432b
|
Merge pull request #301 from kaleb-himes/master
if connecting to google.com and using ECC need supported curves
|
2016-02-10 08:42:28 -08:00 |
|
kaleb-himes
|
bf4d6454b1
|
if connection to google.com and using ECC need supported curves
|
2016-02-09 17:06:06 -07:00 |
|
John Safranek
|
ccffee1617
|
When loading a named key, check that the save buffer mallocs. It calls a library function that checks the pointer, but an application of the library shouldn't depend on side effects. This fixes #300.
|
2016-02-09 15:17:05 -08:00 |
|
Kaleb Joseph Himes
|
62a2efdacc
|
Merge pull request #298 from kaleb-himes/master
Avoid unnecessary assignments in client example
|
2016-02-09 09:54:55 -08:00 |
|
toddouska
|
f30ef33d8b
|
Merge pull request #295 from JacobBarthelmeh/master
ECDHE-PSK and added cipher suites
|
2016-02-09 09:40:13 -08:00 |
|
toddouska
|
66aa1da829
|
Merge pull request #299 from dgarske/MinGWFixes
Fixes for warnings found using MinGW
|
2016-02-09 09:32:18 -08:00 |
|