Jacob Barthelmeh
|
6613ebb642
|
persistant X509 struct with ssl session
|
2016-05-03 09:22:15 -06:00 |
|
Jacob Barthelmeh
|
f88d82375e
|
add function wolfSSL_ASN1_TIME_to_string
|
2016-05-03 09:22:15 -06:00 |
|
Jacob Barthelmeh
|
f19541ffe5
|
update to MYSQL compatibility
|
2016-05-03 09:22:15 -06:00 |
|
dgarske
|
89f15f9393
|
Merge pull request #400 from ejohnstown/dtls-sanity-check
Fixes DTLS sanity check and bug with DTLS timeout notification deleting the peer's received msg list.
|
2016-04-29 11:55:40 -07:00 |
|
Nickolas Lapp
|
00737d1e82
|
Ensure that tmpBuff gets assigned null after free.
|
2016-04-29 09:45:44 -06:00 |
|
Ludovic FLAMENT
|
1bd65cc8a9
|
First version for OpenSSL BIO compatibility
|
2016-04-29 16:34:11 +02:00 |
|
Chris Conlon
|
78e62eddd7
|
fix visual studio code analysis warnings
|
2016-04-28 13:08:50 -06:00 |
|
John Safranek
|
e0c7739fd6
|
fix bug with non-blocking DTLS where the stored peer messages were deleted after a timeout
|
2016-04-28 10:50:51 -07:00 |
|
Kaleb Himes
|
b2af02a783
|
Merge pull request #383 from kojo1/MDK5
fixes for MDK5 compiler
|
2016-04-26 16:11:59 -06:00 |
|
Nickolas Lapp
|
ccee49978b
|
Fix scan-build warning
|
2016-04-25 11:00:56 -06:00 |
|
Nickolas Lapp
|
1c9bf483ec
|
Reorder check for thread modified in addSession. Make sure tick assigned
correctly in non dynamic case
|
2016-04-25 11:00:56 -06:00 |
|
Nickolas Lapp
|
5f12b4c2ae
|
Add check to see if thread modified session in AddSession
|
2016-04-25 11:00:56 -06:00 |
|
Nickolas Lapp
|
5f9c1ffca6
|
Initial support for deep copying of session
|
2016-04-25 11:00:42 -06:00 |
|
Nickolas Lapp
|
f27aca0956
|
Remove redundant dynTicket pointer. Reorder struct for packing/alignment
|
2016-04-25 11:00:31 -06:00 |
|
Jacob Barthelmeh
|
77a9343973
|
use short for RSA min key size and check casts
|
2016-04-22 12:56:51 -06:00 |
|
Nickolas Lapp
|
0eb59d5c35
|
Fix rand num generation on MacOS, Improve organization with tic storage
|
2016-04-22 10:35:44 -06:00 |
|
Nickolas Lapp
|
c8b20d9090
|
Add support for dynamic session tickets, add openssl.test to testuiste
|
2016-04-22 10:35:44 -06:00 |
|
Jacob Barthelmeh
|
1dac3841ca
|
change type to short for comparision and up default min size
|
2016-04-20 15:44:45 -06:00 |
|
Jacob Barthelmeh
|
3129bb22cd
|
minimum ECC key size check at TLS/SSL level
|
2016-04-19 15:50:25 -06:00 |
|
toddouska
|
117231c0e3
|
Merge pull request #387 from JacobBarthelmeh/RSA-min
add check for min RSA key size at TLS/SSL level
|
2016-04-19 13:57:26 -07:00 |
|
Jacob Barthelmeh
|
789f346c5f
|
follow verifyNone variable when checking key size
|
2016-04-19 10:23:01 -06:00 |
|
Jacob Barthelmeh
|
c9891567e8
|
add check for min RSA key size at TLS/SSL level
|
2016-04-14 13:35:49 -06:00 |
|
Takashi Kojo
|
cfd5af341b
|
fixed test.c compile error and server.c/client.c/ssl.c warnings with MDK5 compiler.
|
2016-04-12 11:05:30 +09:00 |
|
Jacob Barthelmeh
|
23ab4247ea
|
build with asn disabled and opensslextra enabled
|
2016-04-11 11:56:30 -06:00 |
|
Jacob Barthelmeh
|
5b4f17545b
|
autoconf checks on some builds that break, macro for no server, and user rsa
|
2016-04-06 15:36:50 -06:00 |
|
toddouska
|
63b1282e67
|
Merge pull request #335 from dgarske/asynccrypt
Asynchronous crypto and wolf event support
|
2016-03-30 20:12:41 -07:00 |
|
David Garske
|
4472152b18
|
Added new "wolfSSL_poll" which filters event queue by ssl object pointer. Changed wolfSSL_CTX_poll to support using WOLF_POLL_FLAG_PEEK flag to peek at events and return count. Removed "wolfssl_CTX_poll_peek". Switched the examples (test.h AsyncCryptPoll) to use just the WOLFSSL object and call new wolfSSL_poll. Added warning when using the "--enable-asynccrypt" option to make sure users know they need real async.c/.h files.
|
2016-03-30 15:15:38 -07:00 |
|
Jacob Barthelmeh
|
e60adfc9da
|
better naming of macro and alter misc.c check
|
2016-03-29 13:42:40 -06:00 |
|
Jacob Barthelmeh
|
2665db73a4
|
check for compiling misc.c when not needed
|
2016-03-28 16:03:15 -06:00 |
|
Jacob Barthelmeh
|
57ea1cdcd7
|
sanity check on ssl pased to wolfSSL_set_fd
|
2016-03-25 11:32:53 -06:00 |
|
Jacob Barthelmeh
|
8f8f7ac152
|
remove unecessary XFREE
|
2016-03-23 13:40:45 -06:00 |
|
Jacob Barthelmeh
|
620e4fa5ca
|
fix free of WOLFSSL_METHOD pointer on create ctx fail
|
2016-03-23 09:27:27 -06:00 |
|
Jacob Barthelmeh
|
e99a5b0483
|
prepare for release v3.9.0
|
2016-03-17 16:02:13 -06:00 |
|
David Garske
|
e1787fe160
|
Added "--enable-asynccrypt" option for enabling asynchronous crypto. This includes a refactor of SendServerKeyExchange and DoClientKeyExchange to support WC_PENDING_E on key generation, signing and verification. Currently uses async simulator (WOLFSSL_ASYNC_CRYPT_TEST) if cavium not enabled. All of the examples have been updated to support WC_PENDING_E on accept and connect. A generic WOLF_EVENT infrastructure has been added to support other types of future events and is enabled using "HAVE_WOLF_EVENT". Refactor the ASN OID type (ex: hashType/sigType) to use a more unique name. The real "async.c" and "async.h" files are in a private repo.
|
2016-03-17 13:31:03 -07:00 |
|
David Garske
|
0683ecb727
|
Fixed FreeCRL issue with strdup memory. Added additional checks for WOLF_AES_CBC and WOLF_AES_COUNTER. Disabled memory tracker by default for wolfCrypt test and benchmark. Updated README to better document Linux Binutils LD bug workaround.
|
2016-03-16 09:41:19 -07:00 |
|
Jacob Barthelmeh
|
db758dc98b
|
update test script, fall back to cert name search, fix der free
|
2016-03-12 09:37:32 -07:00 |
|
Jacob Barthelmeh
|
060e278559
|
Merge branch 'master' of https://github.com/wolfSSL/wolfssl into Certs
|
2016-03-11 23:48:39 -07:00 |
|
Kaleb Joseph Himes
|
0a1871e77c
|
Merge pull request #337 from dgarske/WarnDoubleFree
Fixes scan-build warning with "--enable-opensslextra --disable-memory"
|
2016-03-09 16:28:18 -08:00 |
|
David Garske
|
f17dfa5b03
|
Moved the x509 XFREE to outside the FreeX509 function. Internally FreeX509 is only used in two places. One is for the ssl->peerCert, which is not dynamic anyways. The second is in the ExternalFreeX509 where it calls FreeX509 if its dynamic and will XFREE there.
|
2016-03-09 09:15:00 -08:00 |
|
David Garske
|
c863300805
|
Fixed scan-build error with possibly using a NULL pointer.
|
2016-03-08 09:34:56 -08:00 |
|
David Garske
|
0f93b86b61
|
Fixes for PK_CALLBACKS and sniffer after DerBuffer refactor #2.
|
2016-03-08 08:56:14 -08:00 |
|
David Garske
|
ce9f14f713
|
Refactor of DerBuffer, so WOLFSSL object doesn't have to grow as a result of additional functionality. Removed InitDer. Changed all DerBuffers to use pointer and pass pointer to DerBuffer* to AllocDer and FreeDer. Result is more efficient code and reduced WOLFSSL object size. AllocDer uses first part of the allocated buffer for the actual DerBuffer.
|
2016-03-08 08:56:14 -08:00 |
|
dgarske
|
8ca1c3935d
|
Merge pull request #322 from ejohnstown/dtls-handshake
DTLS Handshake Update
|
2016-03-03 14:33:31 -08:00 |
|
Jacob Barthelmeh
|
267dc48d95
|
fixs after testing : hash table, using NO_SKID, sanity check, and freeing dCert
|
2016-03-02 15:23:50 -07:00 |
|
Jacob Barthelmeh
|
05d2cec7c1
|
addition to api tests and refactor location of trusted peer cert check
|
2016-03-02 11:35:03 -07:00 |
|
Jacob Barthelmeh
|
7df22ee210
|
Trusted peer certificate use
|
2016-03-02 11:22:34 -07:00 |
|
John Safranek
|
f6fafe6738
|
for DTLS, retain the handshake resources until peer sends application data record
|
2016-02-21 21:52:38 -08:00 |
|
David Garske
|
3fe5ee1a7c
|
Refactor of the DER buffer handling. Added new DerBuffer struct that includes the type and heap ptr. Added new InitDer, AllocDer and FreeDer functions. Cleanup of some missing "heap" args on XMALLOC/XFREE. In FreeDer uses ForceZero if type is private key.
|
2016-02-18 22:42:15 -08:00 |
|
Jacob Barthelmeh
|
2f74706367
|
allow use of RSA signed ECC key certs
|
2016-02-10 13:26:03 -07:00 |
|
Jacob Barthelmeh
|
ff7a9d9f78
|
option for fail on no peer cert except PSK suites
|
2016-02-10 13:26:03 -07:00 |
|