Manuel Pégourié-Gonnard
|
eebb5ad6cc
|
Add RSA-PSK and ECDHE-PSK suites to compat.sh
|
2013-10-15 12:27:22 +02:00 |
|
Manuel Pégourié-Gonnard
|
59b9fe28f0
|
Fix bug in psk_identity_hint parsing
|
2013-10-15 11:55:33 +02:00 |
|
Manuel Pégourié-Gonnard
|
bac0e3b7d2
|
Dependency fixes
|
2013-10-15 11:54:47 +02:00 |
|
Manuel Pégourié-Gonnard
|
09258b9537
|
Refactor parse_server_key_exchange a bit
|
2013-10-15 11:19:54 +02:00 |
|
Manuel Pégourié-Gonnard
|
8a3c64d73f
|
Fix and simplify *-PSK ifdef's
|
2013-10-14 19:54:10 +02:00 |
|
Manuel Pégourié-Gonnard
|
ef0eb1ebd8
|
Add two missing RSA-PSK ciphersuites
|
2013-10-14 19:34:48 +02:00 |
|
Manuel Pégourié-Gonnard
|
0fae60bb71
|
Implement RSA-PSK key exchange
|
2013-10-14 19:34:48 +02:00 |
|
Manuel Pégourié-Gonnard
|
057e0cf263
|
Fix ciphersuites dependencies on MD5 and SHA1
|
2013-10-14 14:26:04 +02:00 |
|
Manuel Pégourié-Gonnard
|
1b62c7f93d
|
Fix dependencies and related issues
|
2013-10-14 14:02:19 +02:00 |
|
Manuel Pégourié-Gonnard
|
72fb62daa2
|
More *-PSK refactoring
|
2013-10-14 14:01:58 +02:00 |
|
Manuel Pégourié-Gonnard
|
bd1ae24449
|
Factor PSK pms computation to ssl_tls.c
|
2013-10-14 13:17:36 +02:00 |
|
Manuel Pégourié-Gonnard
|
b59d699a65
|
Fix bugs in ECDHE_PSK key exchange
|
2013-10-14 12:00:45 +02:00 |
|
Manuel Pégourié-Gonnard
|
225d6aa786
|
Add ECDHE_PSK ciphersuites
|
2013-10-11 19:07:56 +02:00 |
|
Manuel Pégourié-Gonnard
|
3ce3bbdc00
|
Add support for ECDHE_PSK key exchange
|
2013-10-11 18:16:35 +02:00 |
|
Paul Bakker
|
d93d28e370
|
Fixed release date for 1.3.0
|
2013-10-01 10:15:23 +02:00 |
|
Paul Bakker
|
356b0ad8bb
|
Added threading modlue to VS project files
|
2013-10-01 10:11:38 +02:00 |
|
Paul Bakker
|
30b95fa921
|
Fixed cplusplus extern defines in header files
|
2013-10-01 10:09:06 +02:00 |
|
Paul Bakker
|
ed3cce46e9
|
Merged threading-layer into development
|
2013-09-30 15:26:19 +02:00 |
|
Paul Bakker
|
6838bd1d73
|
Clarified threading issues
|
2013-09-30 15:24:33 +02:00 |
|
Paul Bakker
|
c9965dca27
|
RSA blinding threading support
|
2013-09-29 15:02:11 +02:00 |
|
Paul Bakker
|
1337affc91
|
Buffer allocator threading support
|
2013-09-29 15:02:11 +02:00 |
|
Paul Bakker
|
f4e7dc50ea
|
entropy_func() threading support
|
2013-09-29 15:02:07 +02:00 |
|
Paul Bakker
|
1ffefaca1e
|
Introduced entropy_free()
|
2013-09-29 15:01:42 +02:00 |
|
Paul Bakker
|
c55988406f
|
SSL Cache threading support
|
2013-09-28 15:24:59 +02:00 |
|
Paul Bakker
|
2466d93546
|
Threading abstraction layer added
|
2013-09-28 15:00:02 +02:00 |
|
Paul Bakker
|
bf796acf07
|
Added implementation for memory_buffer_set_verify()
|
2013-09-28 11:08:44 +02:00 |
|
Paul Bakker
|
caa3af47c0
|
Handle missing curve extension correctly in ssl_parse_client_hello()
|
2013-09-28 11:08:43 +02:00 |
|
Paul Bakker
|
396333e0a3
|
Updated ssl_test to handle EOF return value
|
2013-09-28 11:08:43 +02:00 |
|
Paul Bakker
|
c13aab18dc
|
Added 1.1.8 and 1.2.9 release
|
2013-09-26 10:12:19 +02:00 |
|
Paul Bakker
|
f18084a201
|
Ready for 1.3.0 release
|
2013-09-26 10:07:09 +02:00 |
|
Paul Bakker
|
ca9c87ed2b
|
Removed possible cache-timing difference for pad check
|
2013-09-25 18:52:37 +02:00 |
|
Paul Bakker
|
8b817dc47e
|
Merged support for multiple certificate/key pairs in SSL into
development
|
2013-09-25 18:05:16 +02:00 |
|
Manuel Pégourié-Gonnard
|
a0fdf8b0a0
|
Simplify the way default certs are used
|
2013-09-25 14:05:49 +02:00 |
|
Manuel Pégourié-Gonnard
|
cb99bdb27e
|
Client: if no cert, send empty cert list
|
2013-09-25 13:30:56 +02:00 |
|
Manuel Pégourié-Gonnard
|
641de714b6
|
Use both RSA and ECDSA CA if available
|
2013-09-25 13:23:33 +02:00 |
|
Manuel Pégourié-Gonnard
|
420edcaf1d
|
Clean up config-suite-b.h thanks to new certs
|
2013-09-25 11:52:38 +02:00 |
|
Manuel Pégourié-Gonnard
|
ac8474fb1c
|
Changed default cert loading in ssl_server2
|
2013-09-25 11:35:15 +02:00 |
|
Manuel Pégourié-Gonnard
|
8372454615
|
Rework SNI to fix memory issues
|
2013-09-24 22:30:56 +02:00 |
|
Manuel Pégourié-Gonnard
|
b095a7bf29
|
Offer both RSA and ECDSA by default in ssl_server2
|
2013-09-24 21:25:54 +02:00 |
|
Manuel Pégourié-Gonnard
|
482a2828e4
|
Offer both EC and RSA in certs.c, RSA first
|
2013-09-24 21:25:54 +02:00 |
|
Manuel Pégourié-Gonnard
|
4618459fa1
|
Update EC certificates in certs.c
|
2013-09-24 21:25:54 +02:00 |
|
Manuel Pégourié-Gonnard
|
cc648d19dc
|
Adapt test cases to new certs and file names
|
2013-09-24 21:25:54 +02:00 |
|
Manuel Pégourié-Gonnard
|
6a987f4a90
|
Update EC certs to use NIST-256 and NIST-384
|
2013-09-24 21:25:54 +02:00 |
|
Manuel Pégourié-Gonnard
|
705fcca409
|
Adapt support for SNI to recent changes
|
2013-09-24 21:25:54 +02:00 |
|
Manuel Pégourié-Gonnard
|
d09453c88c
|
Check our ECDSA cert(s) against supported curves
|
2013-09-24 21:25:53 +02:00 |
|
Manuel Pégourié-Gonnard
|
f24b4a7316
|
Interface change in ECP info functions
ecp_named_curve_from_grp_id() -> ecp_curve_info_from_grp_id()
ecp_grp_id_from_named_curve() -> ecp_curve_info_from_tls_id()
|
2013-09-24 21:25:53 +02:00 |
|
Manuel Pégourié-Gonnard
|
f71e587c5e
|
Fix memory leak in ssl cipher usage
|
2013-09-24 21:25:53 +02:00 |
|
Manuel Pégourié-Gonnard
|
3ebb2cdb52
|
Add support for multiple server certificates
|
2013-09-24 21:25:53 +02:00 |
|
Manuel Pégourié-Gonnard
|
834ea8587f
|
Change internal structs for multi-cert support
|
2013-09-24 21:25:53 +02:00 |
|
Manuel Pégourié-Gonnard
|
cbf3ef3861
|
RSA and ECDSA key exchanges don't depend on CRL
|
2013-09-24 21:25:53 +02:00 |
|