Commit Graph

  • 3a9a195683 Initial draft of AES GCM cipher suites. Missing SHA-384 support. John Safranek 2012-06-26 09:30:48 -07:00
  • 737cd127e8 Changed AesGcmEncrypt and Decrypt to allow the same pointer to write and read buffers. John Safranek 2012-06-26 09:29:48 -07:00
  • 918ea3a074 added the library framework for handling aes-gcm in TLS John Safranek 2012-06-18 15:57:37 -07:00
  • 4e73ad8547 AES-GCM requires SHA-384, configure adds it automatically John Safranek 2012-06-18 14:31:46 -07:00
  • eecdfe1648 added test case for AES-GCM John Safranek 2012-06-15 16:05:47 -07:00
  • e39e27bb5b implemented AES-GCM Decrypt John Safranek 2012-06-15 15:12:56 -07:00
  • bac34015cc implemented AES-GCM Encrypt John Safranek 2012-06-15 14:38:11 -07:00
  • 76bb3b2558 added stubs for AES-GCM processing and build option John Safranek 2012-06-13 21:31:32 -07:00
  • 31bf833239 have separate --enable-crl-monitor toddouska 2012-06-05 11:31:00 -07:00
  • 59e4c346f0 Merge branch 'master' of github.com:cyassl/cyassl John Safranek 2012-06-05 10:38:46 -07:00
  • c08486e5e2 bump library version number John Safranek 2012-06-05 10:38:39 -07:00
  • 8f30850840 CRL fix label in debug output John Safranek 2012-06-05 10:35:30 -07:00
  • cb3d998301 asn checks toddouska 2012-06-01 15:55:41 -07:00
  • 3d91a55b88 tls sanity check toddouska 2012-06-01 15:37:51 -07:00
  • ba2d7f590e internal sanity checks on memcmp toddouska 2012-06-01 15:25:46 -07:00
  • 217053a780 integer comba array sanity check toddouska 2012-06-01 14:49:07 -07:00
  • 32fc5daf43 64 decoding sanity checks toddouska 2012-06-01 14:37:59 -07:00
  • 8a52cd3780 byte warning casts toddouska 2012-06-01 14:37:39 -07:00
  • 7edd1bd843 don't use -Warray-bounds except on linux with lots-o-warnings toddouska 2012-06-01 12:14:30 -07:00
  • 87b3df8621 Merge branch 'master' of github.com:cyassl/cyassl John Safranek 2012-06-01 11:57:09 -07:00
  • 6120f03173 ocsp response date checking John Safranek 2012-06-01 11:57:03 -07:00
  • 6dd7eff1a8 add 64 bit misc prototypes for NO_INLINE toddouska 2012-06-01 11:07:29 -07:00
  • ca7bf0d01e Merge branch 'master' of github.com:cyassl/cyassl John Safranek 2012-05-31 17:29:41 -07:00
  • 6d76b2f247 dynamic allocation of OCSP responses, response signature check John Safranek 2012-05-31 17:29:32 -07:00
  • fbc5c8d6dc add SSL set version, different from ctx version toddouska 2012-05-31 15:24:25 -07:00
  • a1157da304 move HAVE_OCSP to top of source for different build envs toddouska 2012-05-30 14:40:25 -07:00
  • 458302f9fe warning cast toddouska 2012-05-30 10:03:05 -07:00
  • f528f5a7d3 add CertManager Verify with Buffer toddouska 2012-05-29 12:04:48 -07:00
  • 4b8bb6cdfe fixed merge conflicts John Safranek 2012-05-29 09:19:53 -07:00
  • 9818fe4f55 changed DN hashing to cover the whole DER encoding per OCSP-RFC, OCSP changes towards dynamic storage of responses John Safranek 2012-05-29 09:11:37 -07:00
  • c2292c31b0 fixed ASN.1 decoding bug in the basic ca constraint certificate extension John Safranek 2012-05-25 16:32:10 -07:00
  • 28fb9fb0f7 new dev version toddouska 2012-05-25 14:43:36 -07:00
  • 02079a2f79 c++ cast fix v2.2.2 toddouska 2012-05-25 13:38:44 -07:00
  • 82a56daaaf ecc crls toddouska 2012-05-25 13:26:28 -07:00
  • a1bb4e3f93 gcc-lots-o-warnings fixes toddouska 2012-05-25 13:09:27 -07:00
  • 6a62623c64 verify suite validity before server picks toddouska 2012-05-25 12:18:18 -07:00
  • 7332b4843c remove hard tabs, bad sublime setting toddouska 2012-05-24 20:10:38 -07:00
  • 3f35c86520 crl signature check, be sure to load CAs first v2.2.1 v2.1.1 toddouska 2012-05-24 15:49:38 -07:00
  • 0a31dc3a37 renumbered new error codes and dynamic data types John Safranek 2012-05-24 14:36:40 -07:00
  • e8e575fd58 public OCSP functions are available, just return errors when OCSP not compiled in John Safranek 2012-05-24 14:12:28 -07:00
  • baddc07300 check next crl date status toddouska 2012-05-24 14:07:59 -07:00
  • f2110487b6 added dynamic types for OCSP data John Safranek 2012-05-24 14:07:11 -07:00
  • 73ddd32539 add crl checkall processing toddouska 2012-05-24 12:45:10 -07:00
  • db7773aa54 linux crl dir monitoring fixes toddouska 2012-05-23 16:55:26 -07:00
  • 0aea2607b5 don't install example certs and keys toddouska 2012-05-23 10:28:02 -07:00
  • 2b48f248c4 crl dir monitoring for linux and mac toddouska 2012-05-22 17:25:15 -07:00
  • 97042d8661 OCSP use URL from cert as appropriate John Safranek 2012-05-22 15:54:27 -07:00
  • 708f38ac8d added OCSP error codes John Safranek 2012-05-22 15:52:08 -07:00
  • 09e24d5469 OCSP set option bug fix John Safranek 2012-05-22 15:38:12 -07:00
  • e48f5a31d6 Merge branch 'master' of github.com:cyassl/cyassl John Safranek 2012-05-21 14:21:34 -07:00
  • 4c79ac1f88 windows build fix Chris Conlon 2012-05-21 15:13:11 -06:00
  • 2ed143bee0 Merge branch 'master' of github.com:cyassl/cyassl John Safranek 2012-05-20 14:53:07 -07:00
  • 2b6044c6ee add dump file option to snifftest, along with keyfile, optional server and port arguments toddouska 2012-05-20 12:46:50 -07:00
  • ba6d956d02 fix sniffer resumption for new sessionId flag in 2.2.0 toddouska 2012-05-19 14:37:26 -07:00
  • 387d9400b9 Merge branch 'master' of github.com:cyassl/cyassl John Safranek 2012-05-18 17:06:09 -07:00
  • 5b5b7e231d fix crl dist and dev build toddouska 2012-05-18 16:35:19 -07:00
  • 86408406fd add metatdata to crls toddouska 2012-05-18 16:29:57 -07:00
  • 3d67caa353 normal crl doesn't revoke test certs, crl.revoked revokes test server toddouska 2012-05-18 16:24:23 -07:00
  • ecef0e38d5 fix configure sha-512 message toddouska 2012-05-18 16:18:53 -07:00
  • ddb5c3a2aa crl potential memory leak fix toddouska 2012-05-18 16:01:21 -07:00
  • 8bf2d13f89 Merge branch 'master' of github.com:cyassl/cyassl John Safranek 2012-05-18 15:33:54 -07:00
  • 88b46d58d7 small warning fix v2.2.0 toddouska 2012-05-18 12:10:04 -07:00
  • c3627df018 README fix toddouska 2012-05-18 11:50:08 -07:00
  • 314630d0e3 Merge branch 'master' of github.com:cyassl/cyassl toddouska 2012-05-18 11:48:57 -07:00
  • 7e322558ef windows build fixes toddouska 2012-05-18 11:48:38 -07:00
  • 6f90cdd465 update README for 2.2.0 release Chris Conlon 2012-05-18 12:43:56 -06:00
  • 2806c995a8 pre release 2.2.0 toddouska 2012-05-18 11:06:32 -07:00
  • fd70122378 add external der CRL checker toddouska 2012-05-18 11:03:44 -07:00
  • 26153ffad6 add crl monitor flag, handle no revoked case toddouska 2012-05-18 10:52:32 -07:00
  • a3e94f335b fixed merge conflict John Safranek 2012-05-18 10:25:16 -07:00
  • 4b3a362705 adding OcspRequest data, check OCSP nonce extension, made ConfirmSignature generic, bug fixes John Safranek 2012-05-18 10:18:56 -07:00
  • a697a60bfd fixed a bounds check error John Safranek 2012-05-18 10:06:06 -07:00
  • 5bc728b882 fix lots o warnings toddouska 2012-05-17 17:44:54 -07:00
  • 7c91372621 skip crl revoked entry extensions toddouska 2012-05-17 15:16:53 -07:00
  • 839b5a4478 add set dates from buffer toddouska 2012-05-17 14:41:45 -07:00
  • 4b8ab62bd1 don't retrieve or cache null sessions toddouska 2012-05-17 10:55:42 -07:00
  • e5953ce6f6 Merge branch 'master' of github.com:cyassl/cyassl toddouska 2012-05-17 10:05:37 -07:00
  • 146e7ff1f4 c++ build fixes toddouska 2012-05-17 10:05:24 -07:00
  • b9773673f7 minor typo fix in PSK build Chris Conlon 2012-05-17 10:20:51 -06:00
  • ac92d30955 fix else braces toddouska 2012-05-17 07:55:25 -07:00
  • 08d9e57bf6 add crl missing url callback toddouska 2012-05-16 17:35:51 -07:00
  • c4ea674fc8 Merge branch 'master' of github.com:cyassl/cyassl toddouska 2012-05-16 17:05:03 -07:00
  • 3ec2b9dbbc crl stage 2 toddouska 2012-05-16 17:04:56 -07:00
  • 43592def99 Certificate extension parsing addition John Safranek 2012-05-14 15:38:59 -07:00
  • 32095795f2 Merge branch 'master' of github.com:cyassl/cyassl toddouska 2012-05-11 12:22:23 -07:00
  • 6210ff78aa init crl toddouska 2012-05-11 12:22:16 -07:00
  • 7b2d62f4f7 don't compare session id if server rejects toddouska 2012-05-11 12:21:17 -07:00
  • 89b0c932a5 bump version number to v2.1.5 John Safranek 2012-05-10 13:55:34 -07:00
  • b26f577454 ocsp build fix John Safranek 2012-05-09 20:45:56 -07:00
  • 07990acaa6 fixed off-by-one bug when encoding serial number as ASN.1 John Safranek 2012-05-09 16:40:36 -07:00
  • 59e0181c8d checked the bytes written to the OCSP socket John Safranek 2012-05-08 19:12:35 -07:00
  • ea2585963f flattens the serial number John Safranek 2012-05-08 19:02:25 -07:00
  • 4feeeeda55 OCSP request creation almost complete, added ocsp revoke error code John Safranek 2012-05-08 18:32:57 -07:00
  • 81a6ed4577 added the hash of the issuer's public key to the decoded cert John Safranek 2012-05-08 15:12:33 -07:00
  • 4d9fe4dafe Merge branch 'master' of github.com:cyassl/cyassl John Safranek 2012-05-08 14:05:35 -07:00
  • 833552ebac OCSP tweak to clean warnings from build John Safranek 2012-05-08 14:05:26 -07:00
  • 306a2013a9 ecc client cert dist toddouska 2012-05-08 11:38:31 -07:00
  • b8411f1217 fixed compile flag for SHA-384 when enabling Fortress John Safranek 2012-05-08 09:35:18 -07:00
  • 344b60eb92 Merge branch 'master' of github.com:cyassl/cyassl John Safranek 2012-05-07 20:16:21 -07:00
  • a97dbb8a14 global rng added to RAND_bytes v2.1.4 toddouska 2012-05-07 19:36:19 -07:00