Manuel Pégourié-Gonnard
|
82a5de7bf7
|
Enforce alignment even if buffer is not aligned
|
2014-05-22 13:52:49 +02:00 |
|
Manuel Pégourié-Gonnard
|
fe671f4aeb
|
Add markers around generated code in error.c
|
2014-05-22 13:52:48 +02:00 |
|
Manuel Pégourié-Gonnard
|
8ff17c544c
|
Add missing DEBUG_RET on cipher failures
|
2014-05-22 13:52:48 +02:00 |
|
Manuel Pégourié-Gonnard
|
61edffef28
|
Normalize "should never happen" messages/errors
|
2014-05-22 13:52:47 +02:00 |
|
Paul Bakker
|
5593f7caae
|
Fix typo in debug_print_msg()
|
2014-05-06 10:29:28 +02:00 |
|
Paul Bakker
|
da13016d84
|
Prepped for 1.3.7 release
|
2014-05-01 14:27:19 +02:00 |
|
Paul Bakker
|
c37b0ac4b2
|
Fix typo in bignum.c
|
2014-05-01 14:19:23 +02:00 |
|
Paul Bakker
|
b9e4e2c97a
|
Fix formatting: fix some 'easy' > 80 length lines
|
2014-05-01 14:18:25 +02:00 |
|
Paul Bakker
|
9af723cee7
|
Fix formatting: remove trailing spaces, #endif with comments (> 10 lines)
|
2014-05-01 13:03:14 +02:00 |
|
Paul Bakker
|
c3f89aa26c
|
Removed word 'warning' from PKCS#5 selftest (buildbot warning as a result)
|
2014-05-01 10:56:03 +02:00 |
|
Paul Bakker
|
9bb04b6389
|
Removed redundant code in mpi_fill_random()
|
2014-05-01 09:47:02 +02:00 |
|
Paul Bakker
|
2ca1dc8958
|
Updated error.c and version_features.c based on changes
|
2014-05-01 09:46:38 +02:00 |
|
Markus Pfeiffer
|
a26a005acf
|
Make compilation on DragonFly work
|
2014-04-30 16:52:28 +02:00 |
|
Paul Bakker
|
2a024ac86a
|
Merge dependency fixes
|
2014-04-30 16:50:59 +02:00 |
|
Manuel Pégourié-Gonnard
|
cef4ad2509
|
Adapt sources to configurable config.h name
|
2014-04-30 16:40:20 +02:00 |
|
Manuel Pégourié-Gonnard
|
c16f4e1f78
|
Move RC4 ciphersuites down the list
|
2014-04-30 16:27:06 +02:00 |
|
Paul Bakker
|
8eab8d368b
|
Merge more portable AES-NI
|
2014-04-30 16:21:08 +02:00 |
|
Paul Bakker
|
33dc46b080
|
Fix bug with mpi_fill_random() on big-endian
|
2014-04-30 16:20:39 +02:00 |
|
Paul Bakker
|
f96f7b607a
|
On OpenBSD, use arc4random_buf() instead of rand() to prevent warnings
|
2014-04-30 16:02:38 +02:00 |
|
Paul Bakker
|
6384440b13
|
Better support for the different Attribute Types from IETF PKIX (RFC 5280)
|
2014-04-30 15:34:12 +02:00 |
|
Paul Bakker
|
1a1fbba1ae
|
Sanity length checks in ssl_read_record() and ssl_fetch_input()
Both are already covered in other places, but not in a clear fashion. So
for instance Coverity thinks the value is still tainted.
|
2014-04-30 14:48:51 +02:00 |
|
Paul Bakker
|
24f37ccaed
|
rsa_check_pubkey() now allows an E up to N
|
2014-04-30 13:43:51 +02:00 |
|
Paul Bakker
|
0f90d7d2b5
|
version_check_feature() added to check for compile-time options at run-time
|
2014-04-30 11:49:44 +02:00 |
|
Paul Bakker
|
a70366317d
|
Improve interop by not writing ext_len in ClientHello / ServerHello when 0
The RFC also indicates that without any extensions, we should write a
struct {} (empty) not an array of length zero.
|
2014-04-30 10:16:16 +02:00 |
|
Manuel Pégourié-Gonnard
|
3d41370645
|
Fix hash dependencies in X.509 tests
|
2014-04-29 15:29:41 +02:00 |
|
Manuel Pégourié-Gonnard
|
3a306b9067
|
Fix misplaced #endif in ssl_tls.c
|
2014-04-29 15:11:17 +02:00 |
|
Manuel Pégourié-Gonnard
|
b1fd397be6
|
Adapt AES-NI code to "old" binutil versions
|
2014-04-26 17:17:31 +02:00 |
|
Paul Bakker
|
c73079a78c
|
Add debug_set_threshold() and thresholding of messages
|
2014-04-25 16:58:16 +02:00 |
|
Paul Bakker
|
92478c37a6
|
Debug module only outputs full lines instead of parts
|
2014-04-25 16:58:15 +02:00 |
|
Paul Bakker
|
eaebbd5eaa
|
debug_set_log_mode() added to determine raw or full logging
|
2014-04-25 16:58:14 +02:00 |
|
Paul Bakker
|
61885c7f7f
|
Fix false reject in padding check in ssl_decrypt_buf() for CBC ciphersuites
In case full SSL frames arrived, they were rejected because an overly
strict padding check.
|
2014-04-25 12:59:51 +02:00 |
|
Paul Bakker
|
4ffcd2f9c3
|
Typo in PKCS#11 module
|
2014-04-25 11:44:12 +02:00 |
|
Paul Bakker
|
10a9dd35ea
|
Typo in POLARSSL_PLATFORM_STD_FPRINTF in platform.c
|
2014-04-25 11:27:16 +02:00 |
|
Paul Bakker
|
0767e67d17
|
Add support for 'emailAddress' to x509_string_to_names()
|
2014-04-18 14:11:37 +02:00 |
|
Paul Bakker
|
c70e425a73
|
Only iterate over actual certificates in ssl_write_certificate_request()
|
2014-04-18 13:50:19 +02:00 |
|
Paul Bakker
|
f4cf80b86f
|
Restructured pk_parse_key_pkcs8_encrypted_der() to prevent unreachable code
|
2014-04-17 17:24:29 +02:00 |
|
Paul Bakker
|
4f42c11846
|
Remove arbitrary maximum length for cipher_list and content length
|
2014-04-17 15:37:39 +02:00 |
|
Paul Bakker
|
d893aef867
|
Force default value to curve parameter
|
2014-04-17 14:45:34 +02:00 |
|
Paul Bakker
|
93389cc620
|
Remove const indicator
|
2014-04-17 14:44:38 +02:00 |
|
Paul Bakker
|
874bd64b28
|
Check setsockopt() return value in net_bind()
|
2014-04-17 12:43:05 +02:00 |
|
Paul Bakker
|
3d8fb63e11
|
Added missing MPI_CHK around mpi functions
|
2014-04-17 12:42:41 +02:00 |
|
Paul Bakker
|
a9c16d2825
|
Removed unused cur variable in x509_string_to_names()
|
2014-04-17 12:42:18 +02:00 |
|
Paul Bakker
|
0e4f9115dc
|
Fix iteration counter
|
2014-04-17 12:39:05 +02:00 |
|
Paul Bakker
|
784b04ff9a
|
Prepared for version 1.3.6
|
2014-04-11 15:33:59 +02:00 |
|
Manuel Pégourié-Gonnard
|
9655e4597a
|
Reject certificates with times not in UTC
|
2014-04-11 13:59:36 +02:00 |
|
Manuel Pégourié-Gonnard
|
0776a43788
|
Use UTC to heck certificate validity
|
2014-04-11 13:59:31 +02:00 |
|
Paul Bakker
|
52c5af7d2d
|
Merge support for verifying the extendedKeyUsage extension in X.509
|
2014-04-11 13:58:57 +02:00 |
|
Manuel Pégourié-Gonnard
|
78848375c0
|
Declare EC constants as 'const'
|
2014-04-11 13:58:41 +02:00 |
|
Paul Bakker
|
1630058dde
|
Potential buffer overwrite in pem_write_buffer() fixed
Length indication when given a too small buffer was off.
Added regression test in test_suite_pem to detect this.
|
2014-04-11 13:58:05 +02:00 |
|
Manuel Pégourié-Gonnard
|
0408fd1fbb
|
Add extendedKeyUsage checking in SSL modules
|
2014-04-11 11:09:09 +02:00 |
|