293 Commits

Author	SHA1	Message	Date
Manuel Pégourié-Gonnard	7d38d215b1	Allow disabling HelloVerifyRequest	2014-10-21 16:30:18 +02:00
Manuel Pégourié-Gonnard	d485d194f9	Move to a callback interface for DTLS cookies	2014-10-21 16:30:17 +02:00
Manuel Pégourié-Gonnard	82202f0a9c	Make DTLS_HELLO_VERIFY a compile option	2014-10-21 16:30:16 +02:00
Manuel Pégourié-Gonnard	98545f128a	Generate random key for HelloVerifyRequest	2014-10-21 16:30:16 +02:00
Manuel Pégourié-Gonnard	43c021874d	Add ssl_set_client_transport_id()	2014-10-21 16:30:15 +02:00
Manuel Pégourié-Gonnard	879a4f9623	Abort on DTLS epoch wrap	2014-10-21 16:30:12 +02:00
Manuel Pégourié-Gonnard	805e2300af	Fix error message and return code	2014-10-21 16:30:12 +02:00
Manuel Pégourié-Gonnard	67427c07b2	Fix checksum computation with HelloVerifyRequest	2014-10-21 16:30:11 +02:00
Manuel Pégourié-Gonnard	74848811b4	Implement HelloVerifyRequest on client	2014-10-21 16:30:11 +02:00
Manuel Pégourié-Gonnard	b2f3be8757	Support multiple records in one datagram	2014-10-21 16:30:10 +02:00
Manuel Pégourié-Gonnard	34c1011b3d	Fix a few warnings in reduced configs	2014-10-21 16:30:09 +02:00
Manuel Pégourié-Gonnard	fe98aceb70	Adapt ssl_fetch_input() for UDP	2014-10-21 16:30:09 +02:00
Manuel Pégourié-Gonnard	e89bcf05da	Write new DTLS handshake fields correctly	2014-10-21 16:30:07 +02:00
Manuel Pégourié-Gonnard	ce441b3442	Add space for new DTLS fields in handshake	2014-10-21 16:30:07 +02:00
Manuel Pégourié-Gonnard	a59543af30	Minor refactoring in ssl_read_record()	2014-10-21 16:30:07 +02:00
Manuel Pégourié-Gonnard	f302fb52e1	Fix hmac computation for DTLS	2014-10-21 16:30:06 +02:00
Manuel Pégourié-Gonnard	5afb167e2c	Implement DTLS epochs	2014-10-21 16:30:06 +02:00
Manuel Pégourié-Gonnard	0619348288	Add explicit counter in DTLS record header	2014-10-21 16:30:06 +02:00
Manuel Pégourié-Gonnard	507e1e410a	Prep: allow {in,out}_len != {in,out}_hdr + 3	2014-10-21 16:30:06 +02:00
Manuel Pégourié-Gonnard	7ee6f0e6e5	Preparation: allow {in,out}_ctr != {in,out}_buf	2014-10-21 16:30:05 +02:00
Manuel Pégourié-Gonnard	abc7e3b4ba	Handle DTLS version encoding and fix some checks	2014-10-21 16:30:05 +02:00
Manuel Pégourié-Gonnard	864a81fdc0	More ssl_set_XXX() functions can return BAD_INPUT	2014-10-21 16:30:04 +02:00
Manuel Pégourié-Gonnard	b21ca2a69f	Adapt version-handling functions to DTLS	2014-10-21 16:30:04 +02:00
Manuel Pégourié-Gonnard	0b1ff29328	Add basic flags for DTLS	2014-10-21 16:30:03 +02:00
Paul Bakker	82788fb63b	Fix minor style issues	2014-10-20 13:59:19 +02:00
Manuel Pégourié-Gonnard	a13500fdf7	Fix bug with ssl_close_notify and non-blocking I/O	2014-08-19 16:14:04 +02:00
Manuel Pégourié-Gonnard	f07f421759	Fix server-initiated renego with non-blocking I/O	2014-08-19 13:32:15 +02:00
Manuel Pégourié-Gonnard	6591962f06	Allow delay on renego on client ... Currently unbounded: will be fixed later	2014-08-19 12:50:30 +02:00
Manuel Pégourié-Gonnard	f26a1e8602	ssl_read() stops returning non-application data	2014-08-19 12:28:50 +02:00
Manuel Pégourié-Gonnard	55e4ff2ace	Tune comments	2014-08-19 11:52:33 +02:00
Manuel Pégourié-Gonnard	8d4ad07706	SHA-2 ciphersuites now require TLS 1.x	2014-08-14 11:34:34 +02:00
Paul Bakker	968afaa06f	ssl_key_cert not available in all configurations	2014-07-09 11:34:48 +02:00
Paul Bakker	84bbeb58df	Adapt cipher and MD layer with _init() and _free()	2014-07-09 10:19:24 +02:00
Paul Bakker	accaffe2c3	Restructure ssl_handshake_init() and small fixes	2014-07-09 10:19:24 +02:00
Paul Bakker	8f870b047c	Add dhm_init()	2014-07-09 10:19:23 +02:00
Paul Bakker	5b4af39a36	Add _init() and _free() for hash modules	2014-07-09 10:19:23 +02:00
Paul Bakker	c7ea99af4f	Add _init() and _free() for cipher modules	2014-07-09 10:19:22 +02:00
Paul Bakker	8fb99abaac	Merge changes for leaner memory footprint	2014-07-04 15:02:19 +02:00
Manuel Pégourié-Gonnard	481fcfde93	Make PSK_LEN configurable and adjust PMS size	2014-07-04 14:59:08 +02:00
Manuel Pégourié-Gonnard	a9964dbcd5	Add ssl_set_renegotiation_enforced()	2014-07-04 14:16:07 +02:00
Manuel Pégourié-Gonnard	dd0c0f33c0	Better usage of dhm_calc_secret in SSL	2014-06-25 11:26:14 +02:00
Manuel Pégourié-Gonnard	8df68632e8	Fix bug in DHE-PSK PMS computation	2014-06-25 11:26:14 +02:00
Manuel Pégourié-Gonnard	03576887c2	Remove misplaced debugging message	2014-06-25 11:26:13 +02:00
Manuel Pégourié-Gonnard	eaa76f7e20	Fix computation of minlen for encrypted packets	2014-06-25 11:26:12 +02:00
Manuel Pégourié-Gonnard	e800cd81d7	Re-arrange some code in ssl_derive_keys()	2014-06-25 11:26:11 +02:00
Manuel Pégourié-Gonnard	0bcc4e1df7	Fix length checking for AEAD ciphersuites	2014-06-25 11:26:10 +02:00
Manuel Pégourié-Gonnard	4d2a8eb6ff	SSL modules now using x509_crt_parse_der() ... Avoid uselessly trying to decode PEM.	2014-06-23 11:54:57 +02:00
Paul Bakker	66d5d076f7	Fix formatting in various code to match spacing from coding style	2014-06-17 17:06:47 +02:00
Paul Bakker	d8bb82665e	Fix code styling for return statements	2014-06-17 14:06:49 +02:00
Paul Bakker	3461772559	Introduce polarssl_zeroize() instead of memset() for zeroization	2014-06-14 16:46:03 +02:00