288 Commits

Author	SHA1	Message	Date
Paul Bakker	b68cad6cc7	- Made cipersuites in ssl context const (no intention to modify) ... - Adjusted ssl_set_ciphersuites() to match	2012-08-23 08:34:18 +00:00
Paul Bakker	bb51f0cb3d	- Only include md.h if needed by POLARSSL_PKCS1_V21	2012-08-23 07:46:58 +00:00
Paul Bakker	6a2f857b08	- Added DragonflyBSD support	2012-08-23 07:45:37 +00:00
Paul Bakker	3c16db9a10	- Fixed potential memory zeroization on miscrafted RSA key	2012-07-05 13:58:08 +00:00
Paul Bakker	6132d0aa93	- Added Blowfish to generic cipher layer ... - Renamed POLARSSL_MODE_CFB128 to POLARSSL_MODE_CFB	2012-07-04 17:10:40 +00:00
Paul Bakker	83f00bba9c	- Updated strerror codes for SSL Compression and Blowfish	2012-07-04 11:08:50 +00:00
Paul Bakker	a9379c0ed1	- Added base blowfish algorithm	2012-07-04 11:02:11 +00:00
Paul Bakker	2770fbd651	- Added DEFLATE compression support as per RFC3749 (requires zlib)	2012-07-03 13:30:23 +00:00
Paul Bakker	cefb396a77	- Handle empty certificate subject names	2012-06-27 11:51:09 +00:00
Paul Bakker	e4791f3936	- Bugfix for Windows in cert path handling	2012-06-04 21:29:15 +00:00
Paul Bakker	67820bd38e	- Only include padlock header when POLARSSL_PADLOCK_C is defined	2012-06-04 12:47:23 +00:00
Paul Bakker	8d914583f3	- Added X509 CA Path support	2012-06-04 12:46:42 +00:00
Paul Bakker	e6ee41f932	- Added OpenSSL / PolarSSL compatibility script (tests/compat.sh) and example application (programs/ssl/o_p_test) (Requires OpenSSL) ... - Handle encryption with private key and decryption with public key as per RFC 2313	2012-05-19 08:43:48 +00:00
Paul Bakker	50546921ac	- Moved to prevent uninitialized exit var	2012-05-19 08:40:49 +00:00
Paul Bakker	f6198c1513	- mpi_exp_mod() now correctly handles negative base numbers (Closes ticket #52)	2012-05-16 08:02:29 +00:00
Paul Bakker	2a5c7a87af	- Add Windows required library	2012-05-10 21:54:28 +00:00
Paul Bakker	62f88dc473	Makefile more compatible with WINDOWS environment	2012-05-10 21:26:28 +00:00
Paul Bakker	cd5b529d6d	- Added automatic WINDOWS define in Makefile	2012-05-10 20:49:10 +00:00
Paul Bakker	4d2c1243b1	- Changed certificate verify behaviour to comply with RFC 6125 section 6.3 to not match CN if subjectAltName extension is present.	2012-05-10 14:12:46 +00:00
Paul Bakker	7e2c728178	- Updated to support NetBSD	2012-05-08 13:23:16 +00:00
Paul Bakker	186751d9dd	- Moved out_msg to out_hdr + 32 to support hardware acceleration	2012-05-08 13:16:14 +00:00
Paul Bakker	3aac1daf1d	- Added exception error parsing when FATAL ssl message is received	2012-05-08 13:12:27 +00:00
Paul Bakker	6b906e5095	- Const correctness mpi_get_bit() ... - Documentation mpi_lsb(), mpi_msb()	2012-05-08 12:01:43 +00:00
Paul Bakker	05ef835b6a	- Added support for Hardware Acceleration hooking in SSL/TLS	2012-05-08 09:17:57 +00:00
Paul Bakker	430ffbe564	- Fixed potential heap corruption in x509_name allocation	2012-05-01 08:14:20 +00:00
Paul Bakker	aec37cb653	- Added extra sanity check to DHM values	2012-04-26 18:59:59 +00:00
Paul Bakker	279432a7c0	- Fixed size of clean	2012-04-26 10:09:35 +00:00
Paul Bakker	901c65620e	- Fill full buffer (Wrong parameter usage)	2012-04-20 13:25:38 +00:00
Paul Bakker	380da53c48	- Abstracted checksum updating during handshake	2012-04-18 16:10:25 +00:00
Paul Bakker	ca4ab49158	- Added GCM ciphersuites to TLS implementation	2012-04-18 14:23:57 +00:00
Paul Bakker	d8ef167833	- Updated for latest GCM error	2012-04-18 14:17:32 +00:00
Paul Bakker	fc5183cf5d	- Added input checking and more efficient buffer overlap use	2012-04-18 14:17:01 +00:00
Paul Bakker	369e14bbf1	- Small code rewrite	2012-04-18 14:16:09 +00:00
Paul Bakker	030277ab1e	- Updated error.c to include GCM errors	2012-04-17 12:24:26 +00:00
Paul Bakker	13ed9ab921	- Removed unused variable	2012-04-16 09:43:49 +00:00
Paul Bakker	0a9251870a	- Report unexpected_message if unknown record type is received	2012-04-16 06:46:41 +00:00
Paul Bakker	10cd225962	- Added support for the SHA256 ciphersuites of AES and Camellia	2012-04-12 21:26:34 +00:00
Paul Bakker	bf63b36127	- Updated comments	2012-04-12 20:44:34 +00:00
Paul Bakker	c3f177a77b	- Added client side support for signature_algorithm extension and affiliated handling	2012-04-11 16:11:49 +00:00
Paul Bakker	1ef83d66dd	- Initial bare version of TLS 1.2	2012-04-11 12:09:53 +00:00
Paul Bakker	f34cf85534	- Fixed too restrictive test	2012-04-10 07:48:40 +00:00
Paul Bakker	96d42da8fe	- Removed debug value	2012-04-05 13:22:07 +00:00
Paul Bakker	c7ffd36a97	- Added automatic debug flags to CFLAGS if DEBUG is set in shell	2012-04-05 12:08:29 +00:00
Paul Bakker	452d532955	- Fixed potential memory corruption on miscrafted client messages (found by Frama-C team at CEA LIST)	2012-04-05 12:07:34 +00:00
Paul Bakker	6126481796	- Added compat for sun in net.c	2012-04-03 07:54:30 +00:00
Paul Bakker	56a7684023	- Added alternative for SHA1 signature structure to check for (without NULL)	2012-03-22 15:31:27 +00:00
Paul Bakker	0c8f73ba8b	- Fixed a mistake in mpi_cmp_mpi() where longer B values are handled wrong	2012-03-22 14:08:57 +00:00
Paul Bakker	f9169629c9	- Removed unused variables	2012-03-20 15:05:51 +00:00
Paul Bakker	89e80c9a43	- Added base Galois/Counter mode (GCM) for AES	2012-03-20 13:50:09 +00:00
Paul Bakker	b6ad62dd21	- Added missing x509write.c	2012-03-20 13:41:33 +00:00