Manuel Pégourié-Gonnard
|
83cdffc437
|
Forbid sequence number wrapping
|
2014-03-13 19:25:06 +01:00 |
|
Manuel Pégourié-Gonnard
|
3c599f11b0
|
Avoid possible segfault on bad server ciphersuite
|
2014-03-13 19:25:06 +01:00 |
|
Manuel Pégourié-Gonnard
|
9533765b25
|
Reject certs and CRLs from the future
|
2014-03-13 19:25:06 +01:00 |
|
Manuel Pégourié-Gonnard
|
6304f786e0
|
Add x509_time_future()
|
2014-03-13 19:25:06 +01:00 |
|
Manuel Pégourié-Gonnard
|
29dcc0b93c
|
Fix depend issues in test suites for cipher modes
|
2014-03-13 19:25:06 +01:00 |
|
Manuel Pégourié-Gonnard
|
1ec220b002
|
Add missing #ifdefs in aes.h
|
2014-03-13 19:25:06 +01:00 |
|
Manuel Pégourié-Gonnard
|
648656a628
|
Fix error code in dhm_selftest()
|
2014-03-13 19:25:06 +01:00 |
|
Manuel Pégourié-Gonnard
|
796c6f3aff
|
Countermeasure against "triple handshake" attack
|
2014-03-13 19:25:06 +01:00 |
|
Manuel Pégourié-Gonnard
|
fdf3f0e671
|
Avoid "unreachable code" warning
|
2014-03-11 13:47:05 +01:00 |
|
Paul Bakker
|
3d52ab76f6
|
Fixed CMake symlinking on out-of-source builds
|
2014-03-07 10:33:55 +01:00 |
|
Manuel Pégourié-Gonnard
|
e8bac683c2
|
Add -Wunreachable-code to check mode
See eg https://www.imperialviolet.org/2014/02/22/applebug.html
|
2014-02-24 10:49:27 +01:00 |
|
Manuel Pégourié-Gonnard
|
2a2ae642d8
|
Fix forgotten curves in #ifdef
|
2014-02-24 10:29:21 +01:00 |
|
Manuel Pégourié-Gonnard
|
47fc5ae400
|
Fxi typo
|
2014-02-20 15:56:43 +01:00 |
|
Manuel Pégourié-Gonnard
|
c580a00e3c
|
Print protocol version in example cli/srv
|
2014-02-12 10:15:30 +01:00 |
|
Manuel Pégourié-Gonnard
|
6b1e207081
|
Fix verion-major intolerance
|
2014-02-12 10:14:54 +01:00 |
|
Manuel Pégourié-Gonnard
|
c9093085ed
|
Revert "Merged RSA-PSS support in Certificate, CSR and CRL"
This reverts commit ab50d8d30c , reversing
changes made to e31b1d992a .
|
2014-02-12 09:39:59 +01:00 |
|
Manuel Pégourié-Gonnard
|
6df09578bb
|
Revert "Mutex call in x509_crt.c depended on PTHREAD specific instead of generic"
This reverts commit 9eae7aae80 .
|
2014-02-12 09:29:05 +01:00 |
|
Paul Bakker
|
2ceda57989
|
Ability to force the Entropy module to use SHA-256 as its basis
By default the SHA-512 module is used if both are available. On some
systems, SHA-256 is the better choice.
Contributed by: Gergely Budai
|
2014-02-06 15:55:25 +01:00 |
|
Paul Bakker
|
cd6d69a414
|
Fixed testing with out-of-source builds using cmake
|
2014-02-06 15:44:11 +01:00 |
|
Paul Bakker
|
f2561b3f69
|
Ability to provide alternate timing implementation
|
2014-02-06 15:32:26 +01:00 |
|
Paul Bakker
|
64abd83b67
|
Fixed file descriptor leak in generic_sum
|
2014-02-06 15:03:06 +01:00 |
|
Paul Bakker
|
47703a0a80
|
More entropy functions made thread-safe (add_source, update_manual, gather)
|
2014-02-06 15:01:20 +01:00 |
|
Paul Bakker
|
9eae7aae80
|
Mutex call in x509_crt.c depended on PTHREAD specific instead of generic
threading
|
2014-02-06 14:51:53 +01:00 |
|
Paul Bakker
|
247b487d61
|
Missing 'else' in gen_key
|
2014-02-06 14:33:52 +01:00 |
|
Paul Bakker
|
6a28e722c9
|
Merged platform compatibility layer
|
2014-02-06 13:44:19 +01:00 |
|
Paul Bakker
|
0910f32ee3
|
Fixed compile warning (in test-ref-configs)
|
2014-02-06 13:41:18 +01:00 |
|
Paul Bakker
|
119602bdde
|
Typo fix in memory_buffer_alloc.c
|
2014-02-06 13:20:19 +01:00 |
|
Paul Bakker
|
71dfa861a6
|
Made valid prototypes by adding ( void ) as parameter prototype
|
2014-02-06 13:20:18 +01:00 |
|
Paul Bakker
|
a9066cf8f1
|
Include stdlib in the right spot
|
2014-02-06 13:20:18 +01:00 |
|
Paul Bakker
|
defc0ca337
|
Migrated the Memory layer to the Platform layer
Deprecated POLARSSL_MEMORY_C and placed placeholder for memory.h to make
sure current code will not break on new version.
|
2014-02-06 13:20:17 +01:00 |
|
Paul Bakker
|
b2f66c9158
|
Only include platform files when needed
|
2014-02-06 13:20:16 +01:00 |
|
Paul Bakker
|
7dc4c44267
|
Library files moved to use platform layer
|
2014-02-06 13:20:16 +01:00 |
|
Paul Bakker
|
747a83a0f7
|
Platform abstraction layer for memory, printf and fprintf
|
2014-02-06 13:15:25 +01:00 |
|
Paul Bakker
|
ab50d8d30c
|
Merged RSA-PSS support in Certificate, CSR and CRL
|
2014-02-06 13:14:56 +01:00 |
|
Paul Bakker
|
e31b1d992a
|
Added Curve preference order to ChangeLog
|
2014-02-06 13:08:02 +01:00 |
|
Paul Bakker
|
77f50c9283
|
Merged option to set Curve Preference order
|
2014-02-06 13:04:35 +01:00 |
|
Manuel Pégourié-Gonnard
|
792657045b
|
Disable ecp_set_curve() for compatibility
|
2014-02-06 10:28:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
f07031aa98
|
debug_ecp: don't print Z, always 1
|
2014-02-06 10:28:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
f6dc5e1d16
|
Remove temporary debug code
|
2014-02-06 10:28:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
c3f6b62ccc
|
Print curve name instead of size in debugging
Also refactor server-side curve selection
|
2014-02-06 10:28:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
ab24010b54
|
Enforce our choice of allowed curves.
|
2014-02-06 10:28:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
7f38ed0bfa
|
ssl_set_curves is no longer ECDHE only
|
2014-02-06 10:28:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
cd49f76898
|
Make ssl_set_curves() work client-side too.
|
2014-02-06 10:28:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
ac7194133e
|
Renamings and other fixes
|
2014-02-06 10:28:38 +01:00 |
|
Gergely Budai
|
e40c469ad3
|
The default ECDH curve list will be dynamically built in the ecp module based on ecp_supported_curves[].
|
2014-02-06 10:28:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
de05390c85
|
Rename ecdh_curve_list to curve_list
|
2014-02-06 10:28:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
5de2580563
|
Make ssl_set_ecdh_curves() a compile-time option
|
2014-02-06 10:28:38 +01:00 |
|
Gergely Budai
|
987bfb510b
|
Added the possibility to define the allowed curves for ECDHE handshake. It also defines the preference of the curves.
|
2014-02-06 10:28:38 +01:00 |
|
Gergely Budai
|
a5d336bcec
|
Increase title size (fits to increased curve names). Give verbose errors on failures.
|
2014-02-06 10:28:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
fbf0915404
|
Fix bug in RSA PKCS#1 v1.5 "reversed" operations
|
2014-02-05 17:01:24 +01:00 |
|