David Garske
|
96da2df7ec
|
Additional max index and serial number size checks in "GetSerialNumber".
|
2016-08-03 17:04:44 -07:00 |
|
David Garske
|
2c1309ffc7
|
Fixes for warnings when cross-compiling with GCC ARM.
|
2016-08-03 16:53:53 -07:00 |
|
Takashi Kojo
|
e01dcb671d
|
eliminate tail nl
|
2016-08-03 11:12:10 +09:00 |
|
Takashi Kojo
|
ed4cd2438f
|
CRL_Type to wc_DerToPem
|
2016-08-03 10:53:54 +09:00 |
|
David Garske
|
9ddfe93c43
|
Fixed issue with CRL check and zero pad (the GetRevoked function was not trimming pad). Added new ASN "GetSerialNumber" function and implemented it in three places in asn.c.
|
2016-08-02 16:47:21 -07:00 |
|
toddouska
|
67d607324a
|
Merge pull request #509 from JacobBarthelmeh/Release
prepare for release 3.9.8
v3.9.8
|
2016-07-28 18:47:39 -07:00 |
|
Jacob Barthelmeh
|
32c0b6d97a
|
prepare for release 3.9.8
|
2016-07-28 15:46:45 -06:00 |
|
JacobBarthelmeh
|
dcc0f87ce6
|
Merge pull request #506 from toddouska/del_point
fix remaining non fpecc ecc_del_point w/o heap
|
2016-07-27 18:54:46 -06:00 |
|
dgarske
|
303561c1a1
|
Merge pull request #505 from toddouska/timing
fix scan-build warning on ecc memory alloc failure
|
2016-07-27 15:52:01 -07:00 |
|
toddouska
|
a94f34c8e2
|
fix remaining non fpecc ecc_del_point w/o heap
|
2016-07-27 14:24:34 -07:00 |
|
toddouska
|
6cd4acbdba
|
Merge pull request #504 from dgarske/oid_unknown_fix
Fix for "OID Check Failed"
|
2016-07-27 14:16:04 -07:00 |
|
toddouska
|
20c991717f
|
Merge pull request #503 from JacobBarthelmeh/mysql
change priority of cipher suite TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
|
2016-07-27 12:13:47 -07:00 |
|
toddouska
|
7cf0b8fe85
|
fix scan-build warning on ecc memory alloc failure
|
2016-07-27 11:20:08 -07:00 |
|
David Garske
|
b0e72dd692
|
Fix for "OID Check Failed". This restores behavior to what it was prior to commit "7a1acc7". If an OID is not known internally skip the verify and return success and the OID sum.
|
2016-07-27 10:39:42 -07:00 |
|
Jacob Barthelmeh
|
37b84abe0b
|
change priority of cipher suite TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
|
2016-07-27 09:36:16 -06:00 |
|
toddouska
|
c834216cca
|
Merge pull request #501 from ejohnstown/key-usage
only check server's cert key encipher on client for RSA key exchange
|
2016-07-26 15:45:38 -07:00 |
|
John Safranek
|
0265b0f4bb
|
only check server's cert key encipher on client for RSA key exchange
|
2016-07-26 13:32:54 -07:00 |
|
John Safranek
|
993838153e
|
Merge pull request #487 from moisesguimaraes/fix-ocspstapling-getca
fixes ocsp signer lookup in the cert manager.
|
2016-07-26 12:42:47 -07:00 |
|
John Safranek
|
edbec4db20
|
Merge pull request #500 from dgarske/ocsp2_asn_fix
Fix for failing OID check with "ocspstapling2" enabled
|
2016-07-26 12:41:50 -07:00 |
|
toddouska
|
242d26eba2
|
Merge pull request #488 from cconlon/sig_algo
leave off SHA1-RSA/ECDSA signature algorithms when NO_OLD_TLS is defined
|
2016-07-26 11:05:24 -07:00 |
|
David Garske
|
c80f1805f0
|
Fix for failing OID check with "ocspstapling2" enabled. Found OID type in "ToTraditional" that should be keyType, not sigType. Added optional OID decode function and optional OID info dump in "GetObjectId" (both off by default).
|
2016-07-26 10:35:40 -07:00 |
|
dgarske
|
5bb250583e
|
Merge pull request #499 from toddouska/timing
add --enable-harden swtich for timing resistance and blinding, on by …
|
2016-07-26 10:14:20 -07:00 |
|
toddouska
|
fc6a5c0702
|
fix mcapi w/o harden
|
2016-07-26 09:06:46 -07:00 |
|
toddouska
|
a274386693
|
fix user rsa no error codes?
|
2016-07-25 19:19:46 -07:00 |
|
toddouska
|
51042e166f
|
fix mcapi with blinding API addition
|
2016-07-25 15:57:38 -07:00 |
|
toddouska
|
cd5486a4e6
|
fix user_rsa with blinding API addition
|
2016-07-25 15:33:28 -07:00 |
|
John Safranek
|
ea683f493a
|
Merge pull request #498 from kaleb-himes/cert-updates
update certs pre-release: NTRU certs expired in mid june
|
2016-07-25 15:19:34 -07:00 |
|
toddouska
|
16336e37ec
|
fix blinding with fips
|
2016-07-25 13:47:53 -07:00 |
|
toddouska
|
88f847de90
|
add --enable-harden swtich for timing resistance and blinding, on by default
|
2016-07-25 13:24:36 -07:00 |
|
kaleb-himes
|
4121667586
|
update certs pre-release: NTRU certs expired in mid june
|
2016-07-25 13:05:52 -06:00 |
|
toddouska
|
096e3f9b8b
|
Merge pull request #496 from JacobBarthelmeh/staticmemory
add helper functions for choosing static buffer size
|
2016-07-21 16:17:34 -07:00 |
|
Jacob Barthelmeh
|
e8f7d78fc4
|
add helper functions for choosing static buffer size
|
2016-07-21 12:11:15 -06:00 |
|
toddouska
|
b81e687bf3
|
Merge pull request #490 from JacobBarthelmeh/master
Static Memory Fixes
|
2016-07-20 20:27:03 -07:00 |
|
toddouska
|
8f2af608a7
|
Merge pull request #492 from JacobBarthelmeh/staticmemory
set heap hint for ctx
|
2016-07-20 20:25:38 -07:00 |
|
dgarske
|
e920e6cee0
|
Merge pull request #495 from toddouska/rng-redef
fix WC_RNG redeclare
|
2016-07-20 19:22:08 -07:00 |
|
toddouska
|
2c92fee59f
|
fix WC_RNG redeclare
|
2016-07-20 17:18:58 -07:00 |
|
dgarske
|
b265666174
|
Merge pull request #491 from toddouska/rsab-fixes
fix rsablind other builds
|
2016-07-20 15:22:19 -07:00 |
|
toddouska
|
81526f8384
|
move wolfSSL Get RNG out of ifdef in header
|
2016-07-20 11:35:57 -07:00 |
|
toddouska
|
1b980867d6
|
fix rsablind other builds
|
2016-07-20 11:35:57 -07:00 |
|
Jacob Barthelmeh
|
5d8a78be30
|
set heap hint for ctx
|
2016-07-20 11:47:36 -06:00 |
|
Jacob Barthelmeh
|
1f5b6d4e66
|
sanity check on buffer size
|
2016-07-20 11:44:22 -06:00 |
|
Jacob Barthelmeh
|
01ecc64052
|
avoid race condition with IO and handshake counter
|
2016-07-20 11:44:22 -06:00 |
|
Jacob Barthelmeh
|
17207ff61b
|
account for when FreeHandshakeResources is not called
|
2016-07-20 11:44:22 -06:00 |
|
toddouska
|
8423ad0e96
|
Merge pull request #493 from dgarske/ecc_fixes
ECC fixes with Shamir disabled
|
2016-07-20 10:40:14 -07:00 |
|
David Garske
|
e0f2bbd1b4
|
Added comment about why 0's test is disabled. ECC without Shamir fails with fast or normal math.
|
2016-07-19 19:12:45 -07:00 |
|
David Garske
|
5e2502fa95
|
ECC without Shamir has issues testing all zero's digest, so disable this test if not using Shamir method. Fixed comment about "NO_ECC_SECP".
|
2016-07-19 14:34:32 -07:00 |
|
toddouska
|
7a419ba6d8
|
Merge pull request #472 from dgarske/ecc_brainpool_koblitz
ECC and TLS support for all SECP, Koblitz and Brainpool curves
|
2016-07-19 11:44:53 -07:00 |
|
toddouska
|
bdbf972d42
|
Merge pull request #486 from cconlon/openssl-script
openssl.test, switch -Verify to -verify to accomodate ADH cipher suites
|
2016-07-19 11:38:52 -07:00 |
|
dgarske
|
32a2bd3863
|
Merge pull request #489 from toddouska/rsablind
Adds WC_RSA_BLINDING for RSA Private Operations
|
2016-07-19 09:03:09 -07:00 |
|
toddouska
|
f88f501923
|
add unique RNG missing error
|
2016-07-18 18:10:38 -07:00 |
|