Moisés Guimarães
|
5c665fe614
|
Added options to SNI (now it is possible to choose whether or not to abort on a SNI Host Name mismatch)
Exposed SNI Type at ssl.h
|
2013-05-30 15:26:41 -03:00 |
|
toddouska
|
d2003bb8b7
|
merge in sni
|
2013-05-21 14:37:50 -07:00 |
|
John Safranek
|
b347df8d9a
|
DTLS rx size check, ssn10
Allows for receiving datagrams larger than the MTU that are reassembled
by the IP stack.
|
2013-05-21 13:52:22 -07:00 |
|
toddouska
|
fd5937b599
|
MDK-ARM updates
|
2013-05-20 17:56:27 -07:00 |
|
toddouska
|
10e6e7fbb5
|
check error_string_n size and truncate if too short
|
2013-05-20 10:36:06 -07:00 |
|
toddouska
|
dcf88daae7
|
fix KEIL warnings
|
2013-05-17 09:49:46 -07:00 |
|
Chris Conlon
|
f5c3458795
|
fix typos
|
2013-05-10 17:31:50 -06:00 |
|
toddouska
|
83b96d748e
|
external API use SSL_FATAL_ERROR instead of -1 cases
|
2013-05-09 13:17:07 -07:00 |
|
toddouska
|
47b468d14f
|
add dtls recv timeout max user setting too
|
2013-05-08 12:49:55 -07:00 |
|
toddouska
|
8cb5f6d5d4
|
add user setting for dtls recv timeout init value
|
2013-05-07 16:14:26 -07:00 |
|
toddouska
|
fa35353e75
|
cleaup memsave cert cache
|
2013-05-02 12:23:49 -07:00 |
|
toddouska
|
a0c630b4ee
|
add cert cache persistence
|
2013-05-02 11:34:26 -07:00 |
|
toddouska
|
5104f4ea7a
|
fix typos
|
2013-04-29 20:17:43 -07:00 |
|
toddouska
|
1e6119bb0d
|
always try most recent used session on row first for match
|
2013-04-29 20:08:21 -07:00 |
|
toddouska
|
8c1310e376
|
fix mem save/restore size with clientcache
|
2013-04-29 16:56:30 -07:00 |
|
toddouska
|
aebd926472
|
better endif ids
|
2013-04-29 14:52:28 -07:00 |
|
toddouska
|
8e64f9903d
|
fix typos
|
2013-04-29 14:48:03 -07:00 |
|
toddouska
|
5a1886656a
|
Merge branch 'master' of github.com:cyassl/cyassl
|
2013-04-29 14:23:22 -07:00 |
|
toddouska
|
5c4fdb30ad
|
add client session table lookup based on serverID, use CyaSSL_SetServerID to set/store with serverid
|
2013-04-29 14:22:32 -07:00 |
|
John Safranek
|
87048698e5
|
use subject key id and authentication key id to ID CA certs in the signers list instead of subject name hashes.
|
2013-04-29 12:08:16 -07:00 |
|
toddouska
|
411a096b2b
|
add memory versions of session cache save/restore
|
2013-04-25 17:23:58 -07:00 |
|
toddouska
|
05dd84598b
|
turn CA signer list into CA signer hash table, defaults CA_TABLE_SIZE to 11
|
2013-04-25 15:36:33 -07:00 |
|
toddouska
|
9dbf6a5e10
|
fix Signer hash size w/o SHA, fix GetCA caList b4 lock
|
2013-04-25 14:47:09 -07:00 |
|
toddouska
|
98b7ed9d47
|
more consistent SSL_SUCCESS for external SSL() returns
|
2013-04-25 11:36:38 -07:00 |
|
toddouska
|
942480e6ba
|
fix save cache file problem, version id, and match cache separarte error
|
2013-04-24 14:17:50 -07:00 |
|
toddouska
|
158029752c
|
only reset session cache with lock
|
2013-04-24 11:20:54 -07:00 |
|
toddouska
|
956ac08cab
|
add persistent session cache, ssn9
|
2013-04-24 11:10:23 -07:00 |
|
toddouska
|
65913b0d6c
|
error out earlier in get_chain_X509
|
2013-04-23 13:21:00 -07:00 |
|
toddouska
|
bad1c32df2
|
add session cert conversion to x509, and free x509 for dynamic variety
|
2013-04-23 11:50:06 -07:00 |
|
toddouska
|
4491de3b77
|
add UnloadCAs ability for CTX or CertManager
|
2013-04-22 13:18:08 -07:00 |
|
toddouska
|
8c0ee8a6f7
|
make sure all external APIs at SSL level return SSL_SUCCESS instead of sometimes 0 from old CyaSSL API
|
2013-04-22 12:43:57 -07:00 |
|
toddouska
|
d665e16bd8
|
add user ctx to verify callback with CyaSSL_SetCertCbCtx
|
2013-04-18 10:37:10 -07:00 |
|
toddouska
|
7c003c5755
|
add sanity check on cleanup for possible no init
|
2013-04-12 17:07:00 -07:00 |
|
toddouska
|
97e0ec073f
|
make sure all lib proper *.c files have config.h then settings.h then checks for defines in case user using settings.h for lib config
|
2013-04-10 11:04:29 -07:00 |
|
John Safranek
|
e98193000a
|
KEEP_PEER_CERT includes the function CyaSSL_X509_get_subjectCN
|
2013-04-09 09:45:25 -07:00 |
|
John Safranek
|
b0dca8ea69
|
updated SHOW_SIZES, opionally adds sizes as available, added flag to example client to print sizes
|
2013-04-08 16:01:52 -07:00 |
|
John Safranek
|
9b0ffa0249
|
brought CYASSL_CALLBACK code up to current standard
|
2013-04-08 15:34:54 -07:00 |
|
John Safranek
|
786e4d9462
|
fixed leak of method when ctx malloc fails; implemented get_shutdown
|
2013-04-03 16:35:19 -07:00 |
|
toddouska
|
4b90474581
|
move CM VerifyBuffer out of no filesystem
|
2013-04-01 11:59:17 -07:00 |
|
John Safranek
|
a572967017
|
when checking for DTLS, only need to compare against major version
|
2013-03-28 13:28:12 -07:00 |
|
toddouska
|
6d8246e98c
|
fix scan-build 272 warnings
|
2013-03-27 12:32:22 -07:00 |
|
toddouska
|
6bc7ba1592
|
change AesCBC end/dec to return status, will add failure cases with align checks
|
2013-03-26 12:36:39 -07:00 |
|
John Safranek
|
f65f86bb88
|
improvements to CCM, ssn6
|
2013-03-22 11:30:12 -07:00 |
|
toddouska
|
f878dbcef2
|
fix ecc key load w/ no rsa, ssn5
|
2013-03-20 09:18:05 -07:00 |
|
toddouska
|
4f9e915bc1
|
add KEEP_PEER_CERT flag for non opensslextra peer cert storage, ssn3
|
2013-03-19 12:18:52 -07:00 |
|
toddouska
|
4e99c7ac99
|
check TRUE/FALSE and move after all includes in ssl.c
|
2013-03-14 09:34:29 -07:00 |
|
toddouska
|
2e980423ec
|
hash session IDs since some aren't random afterall
|
2013-03-13 17:19:36 -07:00 |
|
toddouska
|
0a63898f5b
|
make sure stat uses full path for REG check
|
2013-03-13 11:17:14 -07:00 |
|
toddouska
|
11ffca451a
|
make readdir file type check more generic
|
2013-03-12 16:21:07 -07:00 |
|
toddouska
|
9a1b32d830
|
add --enable-asn, build, and checks for rsa / psk w/o asn
|
2013-03-12 12:48:41 -07:00 |
|