639 Commits

Author	SHA1	Message	Date
Paul Bakker	3f917e230d	Merged optimizations for MODP NIST curves	2013-10-28 14:18:26 +01:00
Manuel Pégourié-Gonnard	21ef42f257	Don't select a PSK ciphersuite if no key available	2013-10-28 14:00:45 +01:00
Manuel Pégourié-Gonnard	18dc0e2746	CERTS_C depends on PEM_PARSE_C	2013-10-28 13:59:26 +01:00
Manuel Pégourié-Gonnard	7c3291ea87	Check dependencies of protocol versions on hashes	2013-10-28 13:58:56 +01:00
Manuel Pégourié-Gonnard	3daaf3d21d	X509 key identifiers depend on SHA1	2013-10-28 13:58:32 +01:00
Manuel Pégourié-Gonnard	c59c9c1453	Fix typo in b8012fca (ECP needs at least one curve)	2013-10-28 13:57:39 +01:00
Paul Bakker	677377f472	Server does not send out extensions not advertised by client	2013-10-28 12:54:26 +01:00
Manuel Pégourié-Gonnard	cae6f3ed45	Reorganize code in ecp.c	2013-10-23 20:19:57 +02:00
Manuel Pégourié-Gonnard	5779cbe582	Make mod_p{224,256,384] a bit faster ... Speedup is roughly 25%, giving a 6% speedup on ecp_mul() for these curves.	2013-10-23 20:17:00 +02:00
Manuel Pégourié-Gonnard	c04c530a98	Make NIST curves optimisation an option	2013-10-23 16:11:52 +02:00
Manuel Pégourié-Gonnard	a47e7058ea	mod_p224 now endian-neutral	2013-10-23 13:24:55 +02:00
Paul Bakker	5c17ccdf2a	Bumped version to 1.3.1	2013-10-15 13:12:41 +02:00
Paul Bakker	f34673e37b	Merged RSA-PSK key-exchange and ciphersuites	2013-10-15 12:46:41 +02:00
Paul Bakker	376e8153a0	Merged ECDHE-PSK ciphersuites	2013-10-15 12:45:36 +02:00
Paul Bakker	a7ea6a5a18	config.h is more script-friendly	2013-10-15 11:55:10 +02:00
Manuel Pégourié-Gonnard	8a3c64d73f	Fix and simplify *-PSK ifdef's	2013-10-14 19:54:10 +02:00
Manuel Pégourié-Gonnard	0fae60bb71	Implement RSA-PSK key exchange	2013-10-14 19:34:48 +02:00
Paul Bakker	be089b0483	Introduced POLARSSL_HAVE_READDIR_R for systems without it	2013-10-14 15:51:50 +02:00
Paul Bakker	b9cfaa0c7f	Explicit conversions and minor changes to prevent MSVC compiler warnings	2013-10-14 15:50:40 +02:00
Manuel Pégourié-Gonnard	057e0cf263	Fix ciphersuites dependencies on MD5 and SHA1	2013-10-14 14:26:04 +02:00
Manuel Pégourié-Gonnard	1b62c7f93d	Fix dependencies and related issues	2013-10-14 14:02:19 +02:00
Manuel Pégourié-Gonnard	bd1ae24449	Factor PSK pms computation to ssl_tls.c	2013-10-14 13:17:36 +02:00
Manuel Pégourié-Gonnard	225d6aa786	Add ECDHE_PSK ciphersuites	2013-10-11 19:07:56 +02:00
Manuel Pégourié-Gonnard	3ce3bbdc00	Add support for ECDHE_PSK key exchange	2013-10-11 18:16:35 +02:00
Paul Bakker	4aa40d4f51	Better support for MSVC	2013-10-11 10:49:24 +02:00
Paul Bakker	b799dec4c0	Merged support for Brainpool curves and ciphersuites	2013-10-11 10:05:43 +02:00
Paul Bakker	1677033bc8	TLS compression only allocates working buffer once	2013-10-11 09:59:44 +02:00
Paul Bakker	d61cc3b246	Possible naming collision in dhm_context	2013-10-11 09:38:49 +02:00
Paul Bakker	fcc172138c	Fixed const-correctness issues	2013-10-11 09:38:06 +02:00
Manuel Pégourié-Gonnard	bdc96765d6	Remove polarssl/ from header includes	2013-10-11 09:17:09 +02:00
Manuel Pégourié-Gonnard	0cd6f98c0f	Don't special-case a = -3, not worth it	2013-10-10 15:55:39 +02:00
Manuel Pégourié-Gonnard	b8012fca5f	Adjust dependencies	2013-10-10 15:40:49 +02:00
Manuel Pégourié-Gonnard	48ac3db551	Add OIDs for brainpool curves	2013-10-10 15:11:33 +02:00
Manuel Pégourié-Gonnard	cd7458aafd	Support brainpool curves in ecp_check_pubkey()	2013-10-10 12:56:00 +02:00
Manuel Pégourié-Gonnard	8195c1a567	Add identifiers for Brainpool curves	2013-10-10 12:56:00 +02:00
Manuel Pégourié-Gonnard	9eb883104e	Update some comments on ecp_group	2013-10-07 19:38:56 +02:00
Paul Bakker	30b95fa921	Fixed cplusplus extern defines in header files	2013-10-01 10:09:06 +02:00
Paul Bakker	6838bd1d73	Clarified threading issues	2013-09-30 15:24:33 +02:00
Paul Bakker	c9965dca27	RSA blinding threading support	2013-09-29 15:02:11 +02:00
Paul Bakker	1337affc91	Buffer allocator threading support	2013-09-29 15:02:11 +02:00
Paul Bakker	f4e7dc50ea	entropy_func() threading support	2013-09-29 15:02:07 +02:00
Paul Bakker	1ffefaca1e	Introduced entropy_free()	2013-09-29 15:01:42 +02:00
Paul Bakker	c55988406f	SSL Cache threading support	2013-09-28 15:24:59 +02:00
Paul Bakker	2466d93546	Threading abstraction layer added	2013-09-28 15:00:02 +02:00
Manuel Pégourié-Gonnard	a0fdf8b0a0	Simplify the way default certs are used	2013-09-25 14:05:49 +02:00
Manuel Pégourié-Gonnard	641de714b6	Use both RSA and ECDSA CA if available	2013-09-25 13:23:33 +02:00
Manuel Pégourié-Gonnard	8372454615	Rework SNI to fix memory issues	2013-09-24 22:30:56 +02:00
Manuel Pégourié-Gonnard	482a2828e4	Offer both EC and RSA in certs.c, RSA first	2013-09-24 21:25:54 +02:00
Manuel Pégourié-Gonnard	705fcca409	Adapt support for SNI to recent changes	2013-09-24 21:25:54 +02:00
Manuel Pégourié-Gonnard	d09453c88c	Check our ECDSA cert(s) against supported curves	2013-09-24 21:25:53 +02:00