Manuel Pégourié-Gonnard
|
4d8db4ab10
|
Fix typo in a config.h #define
|
2014-05-22 13:52:48 +02:00 |
|
Manuel Pégourié-Gonnard
|
a6916fada8
|
Add (placeholder) CCM module
|
2014-05-06 11:28:09 +02:00 |
|
Manuel Pégourié-Gonnard
|
14d55951ef
|
Split config checks to separate file
|
2014-04-30 16:40:24 +02:00 |
|
Paul Bakker
|
0f90d7d2b5
|
version_check_feature() added to check for compile-time options at run-time
|
2014-04-30 11:49:44 +02:00 |
|
Paul Bakker
|
eaebbd5eaa
|
debug_set_log_mode() added to determine raw or full logging
|
2014-04-25 16:58:14 +02:00 |
|
Paul Bakker
|
088c5c5f18
|
POLARSSL_CONFIG_OPTIONS has been removed. Values are set individually
For the Platform module this requires the introduction of
POLARSSL_PLATFORM_NO_STD_FUNCTIONS to allow not performing the default
assignments.
|
2014-04-25 11:11:10 +02:00 |
|
Paul Bakker
|
03b6a46353
|
Properly comment two defines in config.h
|
2014-04-17 17:24:28 +02:00 |
|
Manuel Pégourié-Gonnard
|
7afb8a0dca
|
Add x509_crt_check_extended_key_usage()
|
2014-04-11 11:09:00 +02:00 |
|
Manuel Pégourié-Gonnard
|
603116c570
|
Add x509_crt_check_key_usage()
|
2014-04-09 15:50:57 +02:00 |
|
Paul Bakker
|
0763a401a7
|
Merged support for the ALPN extension
|
2014-04-08 14:37:12 +02:00 |
|
Paul Bakker
|
27e36d342c
|
Support for the ALPN SSL extension (re-enabled in config.h)
|
2014-04-08 12:33:37 +02:00 |
|
Shuo Chen
|
95a0d118a9
|
Fix compile error when POLARSSL_ERROR_STRERROR_BC is undefined.
|
2014-04-08 10:53:51 +02:00 |
|
Manuel Pégourié-Gonnard
|
83d8c73c91
|
Disable ALPN by default
|
2014-04-07 13:24:21 +02:00 |
|
Manuel Pégourié-Gonnard
|
7e250d4812
|
Add ALPN interface
|
2014-04-04 17:10:40 +02:00 |
|
Manuel Pégourié-Gonnard
|
a27cd4c62e
|
Fix ENTROPY_LEN check
|
2014-04-02 13:46:29 +02:00 |
|
Manuel Pégourié-Gonnard
|
eb82a74ed2
|
Fix header issue with default malloc()
|
2014-04-02 13:43:48 +02:00 |
|
Manuel Pégourié-Gonnard
|
6fac3515d0
|
Make support for SpecifiedECDomain optional
|
2014-03-19 16:50:59 +01:00 |
|
Manuel Pégourié-Gonnard
|
5d917ff6a8
|
Add a 'sni' option to ssl_server2
|
2014-03-14 08:41:01 +01:00 |
|
Manuel Pégourié-Gonnard
|
bb4dd37044
|
Add a warning against compression in config.h
|
2014-03-13 19:25:06 +01:00 |
|
Manuel Pégourié-Gonnard
|
c9093085ed
|
Revert "Merged RSA-PSS support in Certificate, CSR and CRL"
This reverts commit ab50d8d30c , reversing
changes made to e31b1d992a .
|
2014-02-12 09:39:59 +01:00 |
|
Paul Bakker
|
2ceda57989
|
Ability to force the Entropy module to use SHA-256 as its basis
By default the SHA-512 module is used if both are available. On some
systems, SHA-256 is the better choice.
Contributed by: Gergely Budai
|
2014-02-06 15:55:25 +01:00 |
|
Paul Bakker
|
f2561b3f69
|
Ability to provide alternate timing implementation
|
2014-02-06 15:32:26 +01:00 |
|
Paul Bakker
|
6a28e722c9
|
Merged platform compatibility layer
|
2014-02-06 13:44:19 +01:00 |
|
Paul Bakker
|
defc0ca337
|
Migrated the Memory layer to the Platform layer
Deprecated POLARSSL_MEMORY_C and placed placeholder for memory.h to make
sure current code will not break on new version.
|
2014-02-06 13:20:17 +01:00 |
|
Paul Bakker
|
747a83a0f7
|
Platform abstraction layer for memory, printf and fprintf
|
2014-02-06 13:15:25 +01:00 |
|
Paul Bakker
|
ab50d8d30c
|
Merged RSA-PSS support in Certificate, CSR and CRL
|
2014-02-06 13:14:56 +01:00 |
|
Manuel Pégourié-Gonnard
|
792657045b
|
Disable ecp_set_curve() for compatibility
|
2014-02-06 10:28:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
de05390c85
|
Rename ecdh_curve_list to curve_list
|
2014-02-06 10:28:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
5de2580563
|
Make ssl_set_ecdh_curves() a compile-time option
|
2014-02-06 10:28:38 +01:00 |
|
Paul Bakker
|
5fb8efe71e
|
Merged HMAC-DRBG code
|
2014-02-05 15:55:18 +01:00 |
|
Manuel Pégourié-Gonnard
|
ffd94cce6b
|
Fix curve list in dependency checking
|
2014-02-05 15:54:16 +01:00 |
|
Manuel Pégourié-Gonnard
|
0520b60faf
|
Make options configurable for HMAC_DRBG
|
2014-01-30 23:17:33 +01:00 |
|
Manuel Pégourié-Gonnard
|
7845fc06c9
|
Use new HMAC_DRBG module for deterministic ECDSA
|
2014-01-30 10:58:48 +01:00 |
|
Manuel Pégourié-Gonnard
|
490bdf3928
|
Add minimalistic HMAC_DRBG implementation
(copied from ECDSA)
|
2014-01-30 10:58:48 +01:00 |
|
Manuel Pégourié-Gonnard
|
ce7c6fd433
|
Fix dependencies
|
2014-01-25 12:48:58 +01:00 |
|
Manuel Pégourié-Gonnard
|
b1d4eb16e4
|
Basic parsing of certs signed with RSASSA-PSS
|
2014-01-25 12:48:58 +01:00 |
|
Paul Bakker
|
bf98c3dd11
|
Merged deterministic ECDSA
Conflicts:
library/ecdsa.c
|
2014-01-23 15:48:01 +01:00 |
|
Paul Bakker
|
5862eee4ca
|
Merged RIPEMD-160 support
|
2014-01-22 14:18:34 +01:00 |
|
Paul Bakker
|
9f4c162df1
|
Support alternative implementation for RIPEMD-160
(POLARSSL_RIPEMD160_ALT)
|
2014-01-22 14:17:31 +01:00 |
|
Paul Bakker
|
61b699ed1b
|
Renamed RMD160 to RIPEMD160
|
2014-01-22 14:17:31 +01:00 |
|
Manuel Pégourié-Gonnard
|
ea499a7321
|
Add support for secp192k1
|
2014-01-17 21:41:39 +01:00 |
|
Manuel Pégourié-Gonnard
|
18e3ec9b4d
|
Add support for secp224k1
|
2014-01-17 21:41:39 +01:00 |
|
Manuel Pégourié-Gonnard
|
cab4a8807c
|
Add RIPEMD-160 (core functions)
|
2014-01-17 14:04:25 +01:00 |
|
Manuel Pégourié-Gonnard
|
f51c8fc353
|
Add support for secp256k1 arithmetic
|
2014-01-10 18:17:18 +01:00 |
|
Manuel Pégourié-Gonnard
|
5b1a573751
|
Document dependency of ECDSA_DETERMINISTIC on MD_C
|
2014-01-07 16:46:17 +01:00 |
|
Manuel Pégourié-Gonnard
|
461d416892
|
Add minified HMAC_DRBG for deterministic ECDSA
|
2014-01-06 11:01:38 +01:00 |
|
Paul Bakker
|
a8fd3e31ed
|
Removed POLARSSL_THREADING_DUMMY option
|
2013-12-31 11:54:08 +01:00 |
|
Paul Bakker
|
c73879139e
|
Merged ECP memory usage optimizations
|
2013-12-31 10:33:47 +01:00 |
|
Manuel Pégourié-Gonnard
|
9e4191c3e7
|
Add another option to reduce EC memory usage
Also document speed/memory trade-offs better.
|
2013-12-30 19:16:05 +01:00 |
|
Manuel Pégourié-Gonnard
|
92ac76f9db
|
Add files for (upcoming) AES-NI support
|
2013-12-25 13:03:26 +01:00 |
|
Manuel Pégourié-Gonnard
|
1321135758
|
Fix MingW version issue
|
2013-12-17 17:38:55 +01:00 |
|
Paul Bakker
|
5a607d26b7
|
Merged IPv6 support in the NET module
|
2013-12-17 14:34:19 +01:00 |
|
Manuel Pégourié-Gonnard
|
767f02cf6e
|
Update IPv6 comments in config.h
|
2013-12-17 12:00:57 +01:00 |
|
Manuel Pégourié-Gonnard
|
10934de1ca
|
Adapt net_connect() for IPv6
|
2013-12-17 12:00:57 +01:00 |
|
Manuel Pégourié-Gonnard
|
25781b22e3
|
Add ECDH_RSA and ECDH_ECDSA ciphersuites
(not implemented yet)
|
2013-12-17 11:32:31 +01:00 |
|
Paul Bakker
|
e1b665e1aa
|
Added POLARSSL_ECP_MAX_SIZE and POLARSSL_ECP_WINDOW_SIZE to config.h
|
2013-12-11 16:02:58 +01:00 |
|
Manuel Pégourié-Gonnard
|
661536677b
|
Add Curve25519 to known groups
|
2013-12-05 15:58:37 +01:00 |
|
Paul Bakker
|
9dc53a9967
|
Merged client ciphersuite order preference option
|
2013-12-02 14:56:27 +01:00 |
|
Manuel Pégourié-Gonnard
|
1a9f2c7245
|
Add option to respect client ciphersuite order
|
2013-11-30 18:30:06 +01:00 |
|
Manuel Pégourié-Gonnard
|
964bf9b92f
|
Quit using readdir_r()
Prone to buffer overflows on some platforms.
|
2013-11-28 18:07:39 +01:00 |
|
Paul Bakker
|
1642122f8b
|
Merged support for Camellia-GCM + ciphersuite and fixes to cipher layer
|
2013-10-28 14:38:35 +01:00 |
|
Paul Bakker
|
3f917e230d
|
Merged optimizations for MODP NIST curves
|
2013-10-28 14:18:26 +01:00 |
|
Manuel Pégourié-Gonnard
|
18dc0e2746
|
CERTS_C depends on PEM_PARSE_C
|
2013-10-28 13:59:26 +01:00 |
|
Manuel Pégourié-Gonnard
|
7c3291ea87
|
Check dependencies of protocol versions on hashes
|
2013-10-28 13:58:56 +01:00 |
|
Manuel Pégourié-Gonnard
|
c59c9c1453
|
Fix typo in b8012fca (ECP needs at least one curve)
|
2013-10-28 13:57:39 +01:00 |
|
Manuel Pégourié-Gonnard
|
9d70373449
|
Update ciphersuite lists in config.h
|
2013-10-25 18:01:50 +02:00 |
|
Manuel Pégourié-Gonnard
|
7bd8a99e11
|
Fix GCM dependencies
|
2013-10-24 13:39:39 +02:00 |
|
Manuel Pégourié-Gonnard
|
c04c530a98
|
Make NIST curves optimisation an option
|
2013-10-23 16:11:52 +02:00 |
|
Paul Bakker
|
f34673e37b
|
Merged RSA-PSK key-exchange and ciphersuites
|
2013-10-15 12:46:41 +02:00 |
|
Paul Bakker
|
376e8153a0
|
Merged ECDHE-PSK ciphersuites
|
2013-10-15 12:45:36 +02:00 |
|
Paul Bakker
|
a7ea6a5a18
|
config.h is more script-friendly
|
2013-10-15 11:55:10 +02:00 |
|
Manuel Pégourié-Gonnard
|
0fae60bb71
|
Implement RSA-PSK key exchange
|
2013-10-14 19:34:48 +02:00 |
|
Paul Bakker
|
be089b0483
|
Introduced POLARSSL_HAVE_READDIR_R for systems without it
|
2013-10-14 15:51:50 +02:00 |
|
Manuel Pégourié-Gonnard
|
057e0cf263
|
Fix ciphersuites dependencies on MD5 and SHA1
|
2013-10-14 14:26:04 +02:00 |
|
Manuel Pégourié-Gonnard
|
225d6aa786
|
Add ECDHE_PSK ciphersuites
|
2013-10-11 19:07:56 +02:00 |
|
Manuel Pégourié-Gonnard
|
3ce3bbdc00
|
Add support for ECDHE_PSK key exchange
|
2013-10-11 18:16:35 +02:00 |
|
Manuel Pégourié-Gonnard
|
b8012fca5f
|
Adjust dependencies
|
2013-10-10 15:40:49 +02:00 |
|
Manuel Pégourié-Gonnard
|
8195c1a567
|
Add identifiers for Brainpool curves
|
2013-10-10 12:56:00 +02:00 |
|
Paul Bakker
|
6838bd1d73
|
Clarified threading issues
|
2013-09-30 15:24:33 +02:00 |
|
Paul Bakker
|
2466d93546
|
Threading abstraction layer added
|
2013-09-28 15:00:02 +02:00 |
|
Manuel Pégourié-Gonnard
|
cbf3ef3861
|
RSA and ECDSA key exchanges don't depend on CRL
|
2013-09-24 21:25:53 +02:00 |
|
Paul Bakker
|
c27c4e2efb
|
Support faulty X509 v1 certificates with extensions
(POLARSSL_X509_ALLOW_EXTENSIONS_NON_V3)
|
2013-09-23 15:01:36 +02:00 |
|
Manuel Pégourié-Gonnard
|
fe28646f72
|
Fix references to x509parse in config.h
|
2013-09-20 16:51:13 +02:00 |
|
Manuel Pégourié-Gonnard
|
09fff7ee25
|
Cosmetics in config.h
|
2013-09-20 16:51:13 +02:00 |
|
Manuel Pégourié-Gonnard
|
1a483833b3
|
SSL_TLS doesn't depend on PK any more
(But PK does depend on RSA or ECP.)
|
2013-09-20 12:29:15 +02:00 |
|
Manuel Pégourié-Gonnard
|
1032c1d3ec
|
Fix some dependencies and warnings in small config
|
2013-09-19 10:49:00 +02:00 |
|
Paul Bakker
|
f20ba4b7b6
|
Minor typo in config.h
|
2013-09-16 22:46:20 +02:00 |
|
Paul Bakker
|
7c6b2c320e
|
Split up X509 files into smaller modules
|
2013-09-16 21:41:54 +02:00 |
|
Paul Bakker
|
cff6842b39
|
POLARSSL_PEM_C split into POLARSSL_PEM_PARSE_C and POLARSSL_PEM_WRITE_C
|
2013-09-16 13:36:18 +02:00 |
|
Paul Bakker
|
4606c7317b
|
Added POLARSSL_PK_PARSE_C and POLARSSL_PK_WRITE_C
|
2013-09-15 17:04:23 +02:00 |
|
Manuel Pégourié-Gonnard
|
92cb1d3a91
|
Make CBC an option, step 3: individual ciphers
|
2013-09-13 17:25:43 +02:00 |
|
Manuel Pégourié-Gonnard
|
f7dc378ead
|
Make CBC an option, step 1: ssl ciphersuites
|
2013-09-13 15:37:03 +02:00 |
|
Paul Bakker
|
9013af76a3
|
Merged major refactoring of x509write module into development
This refactoring adds support for proper CSR writing and X509
certificate generation / signing
|
2013-09-12 11:58:04 +02:00 |
|
Manuel Pégourié-Gonnard
|
0237620a78
|
Fix some dependencies declaration
|
2013-09-12 11:57:02 +02:00 |
|
Paul Bakker
|
dcbfdcc177
|
Updated doxygen documentation in header files and HTML pages
|
2013-09-10 16:16:50 +02:00 |
|
Paul Bakker
|
eba3ccf785
|
Typo in config.h
|
2013-09-09 15:56:09 +02:00 |
|
Paul Bakker
|
48377d9834
|
Configuration option to enable/disable POLARSSL_PKCS1_V15 operations
|
2013-08-30 13:41:14 +02:00 |
|
Paul Bakker
|
577e006c2f
|
Merged ECDSA-based key-exchange and ciphersuites into development
Conflicts:
include/polarssl/config.h
library/ssl_cli.c
library/ssl_srv.c
library/ssl_tls.c
|
2013-08-28 11:58:40 +02:00 |
|
Manuel Pégourié-Gonnard
|
51be559c53
|
Fix PKCS#11 deps: now goes through PK
|
2013-08-27 22:21:20 +02:00 |
|
Manuel Pégourié-Gonnard
|
c40b4c3708
|
Add configuration item for the PK module
|
2013-08-27 22:21:20 +02:00 |
|