Paul Bakker
|
7c6b2c320e
|
Split up X509 files into smaller modules
|
2013-09-16 21:41:54 +02:00 |
|
Paul Bakker
|
cff6842b39
|
POLARSSL_PEM_C split into POLARSSL_PEM_PARSE_C and POLARSSL_PEM_WRITE_C
|
2013-09-16 13:36:18 +02:00 |
|
Paul Bakker
|
77e23fb0e0
|
Move *_pemify() function to PEM module
|
2013-09-15 20:03:26 +02:00 |
|
Paul Bakker
|
40ce79f1e6
|
Moved DHM parsing from X509 module to DHM module
|
2013-09-15 17:43:54 +02:00 |
|
Paul Bakker
|
3e41fe8938
|
Remove printf when RSA selftest is skipped
|
2013-09-15 17:42:50 +02:00 |
|
Paul Bakker
|
dce7fdcbc9
|
Fixed warnings in case POLARSSL_PEM_C is not defined
|
2013-09-15 17:15:26 +02:00 |
|
Paul Bakker
|
2292d1fad0
|
Fixed warnings in case POLARSSL_X509_PARSE_C is not defined
|
2013-09-15 17:06:49 +02:00 |
|
Paul Bakker
|
4606c7317b
|
Added POLARSSL_PK_PARSE_C and POLARSSL_PK_WRITE_C
|
2013-09-15 17:04:23 +02:00 |
|
Paul Bakker
|
c7bb02be77
|
Moved PK key writing from X509 module to PK module
|
2013-09-15 14:54:56 +02:00 |
|
Paul Bakker
|
1a7550ac67
|
Moved PK key parsing from X509 module to PK module
|
2013-09-15 13:47:30 +02:00 |
|
Manuel Pégourié-Gonnard
|
92cb1d3a91
|
Make CBC an option, step 3: individual ciphers
|
2013-09-13 17:25:43 +02:00 |
|
Manuel Pégourié-Gonnard
|
989ed38de2
|
Make CBC an option, step 2: cipher layer
|
2013-09-13 15:48:40 +02:00 |
|
Manuel Pégourié-Gonnard
|
f7dc378ead
|
Make CBC an option, step 1: ssl ciphersuites
|
2013-09-13 15:37:03 +02:00 |
|
Manuel Pégourié-Gonnard
|
b72b4edec1
|
Fix memory leak in DHM
|
2013-09-13 13:55:26 +02:00 |
|
Manuel Pégourié-Gonnard
|
4fe9200f47
|
Fix memory leak in GCM by adding gcm_free()
|
2013-09-13 13:45:58 +02:00 |
|
Manuel Pégourié-Gonnard
|
735b8fcb0b
|
Fix blunder in 8a109f1
|
2013-09-13 12:57:23 +02:00 |
|
Paul Bakker
|
9013af76a3
|
Merged major refactoring of x509write module into development
This refactoring adds support for proper CSR writing and X509
certificate generation / signing
|
2013-09-12 11:58:04 +02:00 |
|
Manuel Pégourié-Gonnard
|
bb323ffc7c
|
Complete EC support in x509write_crt
|
2013-09-12 11:57:02 +02:00 |
|
Manuel Pégourié-Gonnard
|
31e59400d2
|
Add missing f_rng/p_rng arguments to x509write_crt
|
2013-09-12 11:57:02 +02:00 |
|
Manuel Pégourié-Gonnard
|
53c642504e
|
Use PK internally for x509write_crt
|
2013-09-12 11:57:02 +02:00 |
|
Manuel Pégourié-Gonnard
|
f38e71afd5
|
Convert x509write_crt interface to PK
|
2013-09-12 11:57:02 +02:00 |
|
Manuel Pégourié-Gonnard
|
6de63e480d
|
Add EC support to x509write_key
|
2013-09-12 11:57:01 +02:00 |
|
Manuel Pégourié-Gonnard
|
7f1f0926e4
|
Add test for x509write_key
|
2013-09-12 11:57:01 +02:00 |
|
Manuel Pégourié-Gonnard
|
0088c69fbf
|
Complete x509write_csr support for EC key
No automated test yet (complicated by the fact that ECDSA signatures are not
deterministic), tested using cert_req (and openssl for verification).
|
2013-09-12 11:57:01 +02:00 |
|
Manuel Pégourié-Gonnard
|
edda9041fc
|
Adapt asn1_write_algorithm_identifier() to params
|
2013-09-12 11:57:01 +02:00 |
|
Manuel Pégourié-Gonnard
|
3837daec9e
|
Add EC support to x509write_pubkey
|
2013-09-12 11:57:01 +02:00 |
|
Manuel Pégourié-Gonnard
|
e1f821a6eb
|
Adapt x509write_pubkey interface to use PK
key_app_writer will be fixed later
|
2013-09-12 11:57:01 +02:00 |
|
Manuel Pégourié-Gonnard
|
ee73179b2f
|
Adapt x509write_csr prototypes for PK
|
2013-09-12 11:57:00 +02:00 |
|
Manuel Pégourié-Gonnard
|
8053da4057
|
x509write_csr() now fully using PK internally
|
2013-09-12 11:57:00 +02:00 |
|
Manuel Pégourié-Gonnard
|
d4eb5b5196
|
Add references
|
2013-09-12 11:57:00 +02:00 |
|
Manuel Pégourié-Gonnard
|
27d87fa6c4
|
Fix many off-by-one errors
|
2013-09-12 11:57:00 +02:00 |
|
Manuel Pégourié-Gonnard
|
6dcf0bfcf4
|
Use x509write_pubkey_der() when applicable
|
2013-09-12 11:57:00 +02:00 |
|
Manuel Pégourié-Gonnard
|
5353a03eb9
|
x509write_csr using PK internally (WIP)
|
2013-09-12 11:57:00 +02:00 |
|
Manuel Pégourié-Gonnard
|
85dfe08b31
|
Merge duplicated else/#else branch
|
2013-09-12 11:57:00 +02:00 |
|
Paul Bakker
|
18f0341aed
|
Typo in comments in ctr_drbg.c
|
2013-09-11 11:05:56 +02:00 |
|
Manuel Pégourié-Gonnard
|
da7317ed00
|
Use asn1_free_named_data_list() when relevant
|
2013-09-10 15:52:52 +02:00 |
|
Paul Bakker
|
c0dcf0ceb1
|
Merged blinding additions for EC, RSA and DHM into development
|
2013-09-10 14:44:27 +02:00 |
|
Paul Bakker
|
36b7e1efe7
|
Merged GCM refactoring into development
GCM is now independent of AES and can be used as a mode for any
cipher-layer supported 128-bit based block cipher
|
2013-09-10 14:41:05 +02:00 |
|
Paul Bakker
|
2a6a3a7e69
|
Better checking on cipher_info_from_values()
|
2013-09-10 14:29:28 +02:00 |
|
Paul Bakker
|
a0558e0484
|
Check that the cipher GCM receives is a 128-bit-based cipher
|
2013-09-10 14:25:51 +02:00 |
|
Manuel Pégourié-Gonnard
|
8a109f106d
|
Optimize RSA blinding by caching-updating values
|
2013-09-10 13:55:36 +02:00 |
|
Manuel Pégourié-Gonnard
|
ea53a55c0f
|
Refactor to prepare for RSA blinding optimisation
|
2013-09-10 13:55:35 +02:00 |
|
Paul Bakker
|
1c3853b953
|
oid_get_oid_by_*() now give back oid length as well
|
2013-09-10 11:43:44 +02:00 |
|
Paul Bakker
|
003dbad250
|
Fixed file descriptor leak in x509parse_crtpath()
|
2013-09-09 17:26:14 +02:00 |
|
Paul Bakker
|
a5943858d8
|
x509_verify() now case insensitive for cn (RFC 6125 6.4)
|
2013-09-09 17:21:45 +02:00 |
|
Paul Bakker
|
f9f377e652
|
CSR Parsing (without attributes / extensions) implemented
|
2013-09-09 15:35:10 +02:00 |
|
Paul Bakker
|
d4bf870ff5
|
Allow spaces after the comma when converting X509 names
|
2013-09-09 13:59:11 +02:00 |
|
Paul Bakker
|
52be08c299
|
Added support for writing Key Usage and NS Cert Type extensions
|
2013-09-09 12:38:45 +02:00 |
|
Paul Bakker
|
cd35803684
|
Changes x509_csr to x509write_csr
|
2013-09-09 12:38:45 +02:00 |
|
Paul Bakker
|
5f45e62afe
|
Migrated from x509_req_name to asn1_named_data structure
|
2013-09-09 12:02:36 +02:00 |
|