David Garske
|
0e43fca1f3
|
Resolve unused "typeH" warning.
|
2016-03-17 15:56:51 -07:00 |
|
David Garske
|
e1787fe160
|
Added "--enable-asynccrypt" option for enabling asynchronous crypto. This includes a refactor of SendServerKeyExchange and DoClientKeyExchange to support WC_PENDING_E on key generation, signing and verification. Currently uses async simulator (WOLFSSL_ASYNC_CRYPT_TEST) if cavium not enabled. All of the examples have been updated to support WC_PENDING_E on accept and connect. A generic WOLF_EVENT infrastructure has been added to support other types of future events and is enabled using "HAVE_WOLF_EVENT". Refactor the ASN OID type (ex: hashType/sigType) to use a more unique name. The real "async.c" and "async.h" files are in a private repo.
|
2016-03-17 13:31:03 -07:00 |
|
Jacob Barthelmeh
|
db758dc98b
|
update test script, fall back to cert name search, fix der free
|
2016-03-12 09:37:32 -07:00 |
|
Jacob Barthelmeh
|
060e278559
|
Merge branch 'master' of https://github.com/wolfSSL/wolfssl into Certs
|
2016-03-11 23:48:39 -07:00 |
|
JacobBarthelmeh
|
154f027c54
|
Merge pull request #347 from dgarske/ScanBuildFix214
Address scan-build issue on build #214 after DerBuffer refactor part 2
|
2016-03-11 16:53:41 -07:00 |
|
David Garske
|
81b0ccdb1a
|
Address scan-build issue on build #214 after DerBuffer refactor part 2 (ceafb25).
|
2016-03-11 09:39:13 -08:00 |
|
Moisés Guimarães
|
2e1c1ca7f8
|
remove unnecessary condition
|
2016-03-10 23:07:36 -03:00 |
|
David Garske
|
80aa431689
|
Fixes multiple Jenkins warnings/failures. First is PickHashSigAlgo is required for client builds or if certs are enabled. Fixed scan-build warning with OCSP not recognized ForceZero as cleaning memory and using possible garbage value. Also cleaned up the OCSP functions to use struct buffer* instead of void* for clarity with a little forward declaration.
|
2016-03-10 09:38:11 -08:00 |
|
Kaleb Joseph Himes
|
0a1871e77c
|
Merge pull request #337 from dgarske/WarnDoubleFree
Fixes scan-build warning with "--enable-opensslextra --disable-memory"
|
2016-03-09 16:28:18 -08:00 |
|
toddouska
|
ceafb25f49
|
Merge pull request #338 from dgarske/DerBufferRefactor2
Refactor of DerBuffer, so WOLFSSL object doesn't have to grow as a re…
|
2016-03-09 12:36:22 -08:00 |
|
David Garske
|
f17dfa5b03
|
Moved the x509 XFREE to outside the FreeX509 function. Internally FreeX509 is only used in two places. One is for the ssl->peerCert, which is not dynamic anyways. The second is in the ExternalFreeX509 where it calls FreeX509 if its dynamic and will XFREE there.
|
2016-03-09 09:15:00 -08:00 |
|
David Garske
|
0f93b86b61
|
Fixes for PK_CALLBACKS and sniffer after DerBuffer refactor #2.
|
2016-03-08 08:56:14 -08:00 |
|
David Garske
|
ce9f14f713
|
Refactor of DerBuffer, so WOLFSSL object doesn't have to grow as a result of additional functionality. Removed InitDer. Changed all DerBuffers to use pointer and pass pointer to DerBuffer* to AllocDer and FreeDer. Result is more efficient code and reduced WOLFSSL object size. AllocDer uses first part of the allocated buffer for the actual DerBuffer.
|
2016-03-08 08:56:14 -08:00 |
|
David Garske
|
daa1cd634e
|
Fixes scan-build warning with "--enable-opensslextra --disable-memory". Problem was different #if defines on the InitX509 and FreeX509, which caused the static analyzer to think the "x509->dynamicMemory" was always true.
|
2016-03-08 08:38:02 -08:00 |
|
David Garske
|
8e8ee45828
|
LeanTLS: Fixed issue with GetCA, GetCAByName and PickHashSigAlgo with HAVE_ECC, NO_RSA and NO_CERTS defined. Added new "--enable-leantls" option, which enables TLS 1.2 client only with ECC256, AES128 and SHA256 (no RSA, DH, DSA, MD4, MD5, SHA, PSK, PWD, CERTS, DES3, Error Strings, ARC4, Coding, Memory or File System).
|
2016-03-08 08:35:28 -08:00 |
|
dgarske
|
98a72a3f9d
|
Merge pull request #334 from JacobBarthelmeh/master
update wolfssl-ntru vs project and fix warnings
|
2016-03-03 15:53:52 -08:00 |
|
dgarske
|
8ca1c3935d
|
Merge pull request #322 from ejohnstown/dtls-handshake
DTLS Handshake Update
|
2016-03-03 14:33:31 -08:00 |
|
Jacob Barthelmeh
|
c98c457b9b
|
update wolfssl-ntru vs project and fix warnings
|
2016-03-03 14:35:39 -07:00 |
|
dgarske
|
a0f1e1e3ea
|
Merge pull request #331 from kaleb-himes/CID-66006-coverity
Move assignment to after the null check
|
2016-03-02 15:23:58 -08:00 |
|
Jacob Barthelmeh
|
267dc48d95
|
fixs after testing : hash table, using NO_SKID, sanity check, and freeing dCert
|
2016-03-02 15:23:50 -07:00 |
|
Jacob Barthelmeh
|
05d2cec7c1
|
addition to api tests and refactor location of trusted peer cert check
|
2016-03-02 11:35:03 -07:00 |
|
kaleb-himes
|
01cd43c319
|
Seperate declaration and assignment per c99 standards
|
2016-03-02 11:31:08 -07:00 |
|
kaleb-himes
|
1f4ddb20df
|
Move assignment to after the null check
|
2016-03-01 17:00:27 -07:00 |
|
David Garske
|
a46fd6612b
|
Changed CopyDecodedToX509 AllocDer error code handing to return MEMORY_E, since that is an explicitly handled case. Also resolves the issue with "warning: Value stored to 'ret' is never read".
|
2016-02-25 14:35:54 +01:00 |
|
David Garske
|
1227db4e44
|
Fixed issue with not properly returning memory error in CopyDecodedToX509 after DER refactor.
|
2016-02-24 07:04:03 +01:00 |
|
John Safranek
|
f621f81fa2
|
1. Some DTLS code was missing an ifdef.
2. If receiving a handshake message that's already been processed,
retransmit the previous message flight.
|
2016-02-22 14:08:35 -08:00 |
|
John Safranek
|
f6fafe6738
|
for DTLS, retain the handshake resources until peer sends application data record
|
2016-02-21 21:52:38 -08:00 |
|
David Garske
|
3fe5ee1a7c
|
Refactor of the DER buffer handling. Added new DerBuffer struct that includes the type and heap ptr. Added new InitDer, AllocDer and FreeDer functions. Cleanup of some missing "heap" args on XMALLOC/XFREE. In FreeDer uses ForceZero if type is private key.
|
2016-02-18 22:42:15 -08:00 |
|
Jacob Barthelmeh
|
9defe9b42b
|
fix warning of unused variable and adjust debug statements
|
2016-02-10 13:57:10 -07:00 |
|
Jacob Barthelmeh
|
2f74706367
|
allow use of RSA signed ECC key certs
|
2016-02-10 13:26:03 -07:00 |
|
Jacob Barthelmeh
|
ff7a9d9f78
|
option for fail on no peer cert except PSK suites
|
2016-02-10 13:26:03 -07:00 |
|
toddouska
|
f30ef33d8b
|
Merge pull request #295 from JacobBarthelmeh/master
ECDHE-PSK and added cipher suites
|
2016-02-09 09:40:13 -08:00 |
|
Jacob Barthelmeh
|
53162d5fc4
|
addjust size according to offset length and add PMS size comment
|
2016-02-08 15:22:49 -07:00 |
|
Jacob Barthelmeh
|
3dc2e01180
|
warning from windows build with ECDHE-PSK and fix potential memory leak
|
2016-02-05 09:54:39 -07:00 |
|
JacobBarthelmeh
|
60668be1c0
|
Merge pull request #285 from ejohnstown/dtls-hello
DTLS server should be able to receive multiple client hellos without …
|
2016-02-04 14:27:03 -07:00 |
|
Jacob Barthelmeh
|
3ce64da44c
|
ChaCha20-Poly1305 PSK cipher suites
|
2016-02-04 09:50:29 -07:00 |
|
Jacob Barthelmeh
|
5a9175a758
|
add cipher suite ECDHE-PSK-AES128-SHA256 and adjustments to ECDHE-PSK
|
2016-02-04 09:39:34 -07:00 |
|
Jacob Barthelmeh
|
d04a7e802a
|
add ECDHE-PSK and cipher suite ECDHE-PSK-NULL-SHA256
|
2016-02-03 13:44:13 -07:00 |
|
Jacob Barthelmeh
|
93c54c07ea
|
cipher suite ECDHE-ECDSA-NULL-SHA
|
2016-02-01 14:43:17 -07:00 |
|
John Safranek
|
7fe73c7cbd
|
DTLS server should be able to receive multiple client hellos without advancing state
|
2016-02-01 11:06:24 -08:00 |
|
Jacob Barthelmeh
|
d0f8132cdc
|
forcing sensitive memory to be all zeros when done with it
|
2016-02-01 10:45:09 -07:00 |
|
David Garske
|
f8876854f4
|
Spelling fixes in comments and error strings (ALGO_ID_E, ASN_TIME_E and WOLFSSL_ERROR function).
|
2016-01-29 16:13:09 -08:00 |
|
Jacob Barthelmeh
|
611e37b3e8
|
naming for AEAD macros and TLSX with chacha-poly
|
2016-01-29 09:38:13 -07:00 |
|
Jacob Barthelmeh
|
7d71d756f3
|
update ChaCha20-Poly1305 to most recent RFCs
|
2016-01-27 14:03:05 -07:00 |
|
Jacob Barthelmeh
|
18f1faa13d
|
check error strings and update comment
|
2016-01-27 09:50:20 -07:00 |
|
Chris Conlon
|
0801eeac8d
|
update support for Freescale KSDK 1.3.0
|
2016-01-25 10:41:26 -07:00 |
|
JacobBarthelmeh
|
f84722bbac
|
Merge pull request #267 from moisesguimaraes/fix_ocspstapling_dtls_typo
Fix ocspstapling dtls typo
|
2016-01-19 10:34:15 -07:00 |
|
Moisés Guimarães
|
a6a2214306
|
removes 'end of line' spaces;
|
2016-01-18 20:51:27 -03:00 |
|
Moisés Guimarães
|
08c67e5cdc
|
fixes typo;
|
2016-01-18 20:51:27 -03:00 |
|
Jacob Barthelmeh
|
3a65f55bd3
|
check not CHACHA_BYTE before considering normal suite
|
2016-01-18 15:33:32 -07:00 |
|