1366 Commits

Author	SHA1	Message	Date
Manuel Pégourié-Gonnard	7c3b4ab6f2	Fix typos in comments	2015-07-02 17:59:52 +02:00
Manuel Pégourié-Gonnard	5791109707	Make the hardclock test optional ... Known to fail on VMs (such as the buildbots), see eg http://blog.badtrace.com/post/rdtsc-x86-instruction-to-detect-vms/	2015-07-01 19:22:12 +02:00
Manuel Pégourié-Gonnard	9bd0afdb22	Add guards for closed socket in net.c ... This is particularly problematic when calling FD_SET( -1, ... ), but let's check it in all functions. This was introduced with the new API and the fact the net_free() now sets the internal fd to -1 in order to mark it as closed: now using this information.	2015-07-01 19:03:27 +02:00
Manuel Pégourié-Gonnard	2505528be4	Rm obsolete defines for inline wiht MSVC ... The "inline" keyword is supported since Visual Studio 2005 according to MSDN, and we require Visual Studio 2010 or higher.	2015-07-01 17:22:36 +02:00
Manuel Pégourié-Gonnard	abc729e664	Simplify net_accept() with UDP sockets ... This is made possible by the new API where net_accept() gets a pointer to bind_ctx, so it can update it.	2015-07-01 01:28:24 +02:00
Manuel Pégourié-Gonnard	3d7d00ad23	Rename mbedtls_net_close() to mbedtls_net_free() ... close() may be more meaningful, but free() is symmetric with _init(), and more consistent with all other modules	2015-06-30 16:50:37 +02:00
Manuel Pégourié-Gonnard	91895853ac	Move from naked int to a structure in net.c ... Provides more flexibility for future changes/extensions.	2015-06-30 15:56:25 +02:00
Manuel Pégourié-Gonnard	a16e7c468c	Rename a debug function	2015-06-29 20:14:19 +02:00
Manuel Pégourié-Gonnard	b74c245a20	Rework debug to not need dynamic alloc ... But introduces dependency on variadic macros	2015-06-29 20:08:23 +02:00
Manuel Pégourié-Gonnard	9db2887672	Actually enable fixed snprintf on windows	2015-06-26 11:04:08 +02:00
Manuel Pégourié-Gonnard	dc54ff8578	Improve documentation about SSL ticket encryption	2015-06-25 12:44:46 +02:00
Manuel Pégourié-Gonnard	216a1831de	Fix whitespace in CMakeLists.txt ... - all spaces no tabs - indent with 4 spaces everywhere	2015-06-25 10:59:57 +02:00
Manuel Pégourié-Gonnard	53585eeb17	Remove test DHM params from certs.c ... certs.c belongs to the X.509 library, while DHM belongs to the crypto lib.	2015-06-25 10:59:57 +02:00
Manuel Pégourié-Gonnard	0761733c1b	Fix potential NULL dereference ... We document that either of recv or recv_timeout may be NULL, but for TLS we always used recv... Thanks Coverity for catching that. (Not remotely trigerrable: local configuration.) Also made me notice net_recv_timeout didn't do its job properly.	2015-06-25 10:59:57 +02:00
Manuel Pégourié-Gonnard	fd474233c8	Change SSL debug API in the library	2015-06-23 18:44:11 +02:00
Manuel Pégourié-Gonnard	c0d749418b	Make 'port' a string in NET module ... - avoids dependency on snprintf - allows using "smtps" instead of "456" if desired	2015-06-23 13:09:11 +02:00
Manuel Pégourié-Gonnard	e244f9ffc0	Improve doc about length of strings written	2015-06-23 13:09:11 +02:00
Manuel Pégourié-Gonnard	d23f593737	Avoid static buffer in debug module ... Caused issues in threading situations	2015-06-23 13:09:11 +02:00
Manuel Pégourié-Gonnard	1cd10adc7c	Update prototype of x509write_set_key_usage() ... Allow for future support of decipherOnly and encipherOnly. Some work will be required to ensure we still write only one byte when only one is needed.	2015-06-23 13:09:10 +02:00
Manuel Pégourié-Gonnard	655a964539	Adapt check_key_usage to new weird bits	2015-06-23 13:09:10 +02:00
Manuel Pégourié-Gonnard	9a702255f4	Add parsing/printing for new X.509 keyUsage flags	2015-06-23 13:09:10 +02:00
Manuel Pégourié-Gonnard	07894338a0	Rename M255 to Curve25519	2015-06-23 13:09:10 +02:00
Manuel Pégourié-Gonnard	7320eb46d4	Remove references to some Montgomery curves ... After all it looks like those won't become standard.	2015-06-23 13:09:10 +02:00
Manuel Pégourié-Gonnard	e7e89844d6	Fix and document corner-cases of time checking	2015-06-22 23:41:24 +02:00
Manuel Pégourié-Gonnard	cdc26ae099	Add mbedtls_ssl_set_hs_authmode ... While at it, fix the following: - on server with RSA_PSK, we don't want to set flags (client auth happens via the PSK, no cert is expected). - use safer tests (eg == OPTIONAL vs != REQUIRED)	2015-06-22 14:52:40 +02:00
Manuel Pégourié-Gonnard	1685368408	Rationalize snprintf() usage in X.509 modules	2015-06-22 14:42:04 +02:00
Manuel Pégourié-Gonnard	6c0c8e0d3d	Include fixed snprintf for Windows in platform.c ... Use _WIN32 to detect it rather that _MSC_VER as it turns out MSYS2 uses the broken MS version by default too.	2015-06-22 14:42:04 +02:00
Manuel Pégourié-Gonnard	8ba88f0460	Fix stupid typo in documentation	2015-06-22 14:40:56 +02:00
Manuel Pégourié-Gonnard	7580ba475d	Add a concept of entropy source strength. ... The main goal is, we want and error if cycle counter is the only source.	2015-06-22 14:40:56 +02:00
Manuel Pégourié-Gonnard	3f77dfbd52	Add MBEDTLS_ENTROPY_HARDWARE_ALT ... Makes it easier for an external module to plug its hardware entropy collector.	2015-06-22 14:40:56 +02:00
Manuel Pégourié-Gonnard	bf82ff0209	Fix entropy thresholds	2015-06-22 14:40:56 +02:00
Manuel Pégourié-Gonnard	60c793bdc9	Split HAVE_TIME into HAVE_TIME + HAVE_TIME_DATE ... First one means we have time() but it may not return the actual wall clock time, second means it does.	2015-06-22 14:40:56 +02:00
Manuel Pégourié-Gonnard	c0696c216b	Rename mbedtls_mpi_msb to mbedtls_mpi_bitlen	2015-06-18 16:49:37 +02:00
Manuel Pégourié-Gonnard	097c7bb05b	Rename relevant global symbols from size to bitlen ... Just applying rename.pl with this file: mbedtls_cipher_get_key_size mbedtls_cipher_get_key_bitlen mbedtls_pk_get_size mbedtls_pk_get_bitlen MBEDTLS_BLOWFISH_MIN_KEY MBEDTLS_BLOWFISH_MIN_KEY_BITS MBEDTLS_BLOWFISH_MAX_KEY MBEDTLS_BLOWFISH_MAX_KEY_BITS	2015-06-18 16:43:38 +02:00
Manuel Pégourié-Gonnard	fb317c5221	Rename parameter in a x509 helper	2015-06-18 16:41:13 +02:00
Manuel Pégourié-Gonnard	39a48f4934	Internal renamings in PK ... + an unrelated comment in SSL	2015-06-18 16:06:55 +02:00
Manuel Pégourié-Gonnard	12ad798c87	Rename ssl_session.length to id_len	2015-06-18 15:50:37 +02:00
Manuel Pégourié-Gonnard	797f48ace6	Rename ecp_curve_info.size to bit_size	2015-06-18 15:45:05 +02:00
Manuel Pégourié-Gonnard	898e0aa210	Rename key_length in cipher_info	2015-06-18 15:31:10 +02:00
Manuel Pégourié-Gonnard	b8186a5e54	Rename len to bitlen in function parameters ... Clarify a few comments too.	2015-06-18 14:58:58 +02:00
Manuel Pégourié-Gonnard	b31c5f68b1	Add SSL presets. ... No need to use a separate profile as in X.509, everything we need is already in ssl_config. Just load appropriate values.	2015-06-17 14:59:27 +02:00
Manuel Pégourié-Gonnard	7bfc122703	Implement sig_hashes	2015-06-17 14:34:48 +02:00
Manuel Pégourié-Gonnard	36a8b575a9	Create API for mbedtls_ssl_conf_sig_hashes(). ... Not implemented yet.	2015-06-17 14:27:39 +02:00
Manuel Pégourié-Gonnard	9d412d872c	Small internal changes in curve checking ... - switch from is_acceptable to the more usual check - add NULL check just in case user screwed up config	2015-06-17 14:27:39 +02:00
Manuel Pégourié-Gonnard	27716cc1da	Clarify a point in the documentation	2015-06-17 14:27:38 +02:00
Manuel Pégourié-Gonnard	b541da6ef3	Fix define for ssl_conf_curves() ... This is a security feature, it shouldn't be optional.	2015-06-17 14:27:38 +02:00
Manuel Pégourié-Gonnard	6e3ee3ad43	Add mbedtls_ssl_conf_cert_profile()	2015-06-17 14:27:38 +02:00
Manuel Pégourié-Gonnard	f8ea856296	Change data structure of profiles to bitfields ... - allows to express 'none' or 'all' more easily than lists - more compact and easier to declare statically - easier to check too Only drawback: if we ever have more than 32 curves, we'll need an ABI change to make that field a uint64_t.	2015-06-17 14:27:38 +02:00
Manuel Pégourié-Gonnard	88db5da117	Add pre-defined profiles for cert verification	2015-06-17 14:27:38 +02:00
Manuel Pégourié-Gonnard	9505164ef4	Create cert profile API (unimplemented yet)	2015-06-17 14:27:38 +02:00