Juliusz Sosinowicz 651a7a97b9 Add secure renegotiation to DTLS 1.2 ...

- Hash of fragmented certificate was not calculated as a single message and instead we were hashing individual fragments which produced the wrong digest, shared secret, etc...
- Reset handshake number after server Finished packet is sent or received (depending on side)
- Reserve space in buffer for cipher stuff
- Take `DTLS_RECORD_EXTRA` and  `DTLS_HANDSHAKE_EXTRA` into size and offset calculations for DTLS path
- Fix renegotiation in DTLS with AES128-SHA
- Fix renegotiation in DTLS with AES-GCM
- Support HelloVerify request during secure renegotiation
- Save renegotiation handshake messages for retransmission in timeout
- Handle cipher parameters from different epochs. DTLS may need to resend and receive messages from previous epochs so handling different sets of encryption and decryption parameters is crucial.

2020-06-12 11:36:43 +02:00

..

bio.c

Fix EVP_MD_CTX_type to return NID

2020-04-14 14:27:21 -05:00

crl.c

…

include.am

for OE6 sp_arm32.c asm code is inlined in rsa.c and ecc.c

2020-05-12 16:28:39 -06:00

internal.c

Add secure renegotiation to DTLS 1.2

2020-06-12 11:36:43 +02:00

keys.c

Add secure renegotiation to DTLS 1.2

2020-06-12 11:36:43 +02:00

ocsp.c

…

sniffer.c

…

ssl.c

Add secure renegotiation to DTLS 1.2

2020-06-12 11:36:43 +02:00

tls13.c

Fixes for building with ./configure --enable-tls13 --disable-rsa --disable-ecc --enable-psk. Fix to properly detect if missing a asymmetric key algorithm (required by TLS v1.3).

2020-06-04 16:31:19 -07:00

tls.c

Add secure renegotiation to DTLS 1.2

2020-06-12 11:36:43 +02:00

wolfio.c

Add secure renegotiation to DTLS 1.2

2020-06-12 11:36:43 +02:00