Commit Graph

676 Commits

Author SHA1 Message Date
toddouska 53bf8ed7cb fix scan-build warnings 2015-06-10 15:24:24 -07:00
toddouska 96a298018d simplify padcheck compare 2015-06-05 09:42:10 -07:00
Moisés Guimarães 3d41595ed4 internal.c: refactoring TimingPadVerify to reduce stack usage:
--- variable dummy replaced with ssl object (~250 bytes saved)

internal.c: refactoring VerifyMac to reduce stack usage:
--- variable dummy replaced with ssl object (~250 bytes saved)
2015-05-30 10:44:14 -03:00
Moisés Guimarães 67a93a5999 fixes trailing white spaces.
adds port mapping in Vagrantfile.
2015-05-22 20:09:01 -03:00
John Safranek 64602d1969 added check for allowed minimum DH key size 2015-05-21 10:11:21 -07:00
Takashi Kojo b5654092ec Added Md5GetHash for BuildCertHashes 2015-05-21 13:42:02 +09:00
toddouska e730aa571c add sanity checks to user session ticket encrypt callback 2015-05-18 09:29:25 -07:00
toddouska cedd41432c fix windows session ticket warnings 2015-05-15 16:10:38 -07:00
toddouska 2212381925 add session ticket key returns for reject and use but create 2015-05-15 14:58:16 -07:00
toddouska f6d12bfc37 initial server side session ticket support 2015-05-15 12:51:44 -07:00
John Safranek 4e482a348e wrapped the min() inline functions with better preprocessor checks 2015-05-13 14:53:11 -07:00
John Safranek 20851c62f9 modify Encrypt and Decrypt switch statements for single return 2015-05-05 14:45:43 -07:00
toddouska 162214924f simplify build verify hashes to one spot 2015-04-30 09:22:25 -07:00
toddouska edd6b91b56 on send dhe server_key_exchange only do hash(es) required 2015-04-09 09:58:16 -07:00
toddouska b59d922d51 on send echde server_key_exchange only do hash(es) required 2015-04-08 11:22:22 -07:00
toddouska cf95bc23bb on process server_key_exchange only do hash(es) required 2015-04-07 14:57:40 -07:00
toddouska 0519085c69 add SOCKET_PEER_CLOSED_E vs general SOCKET_E for case where peer closes underlying transport w/o close notify 2015-04-06 11:40:51 -07:00
toddouska a7d004e47d add sha512 sig_algo processing for server_key_exchange and cert_verify messages 2015-04-04 09:49:34 -07:00
Vikram Adiga ad29c262d4 use Seconds APIs instead of MYTIME APIs for TI-RTOS 2015-04-01 16:51:54 -07:00
John Safranek 50e829ea79 when keeping peer cert, alt names were getting lost for the peer name check 2015-04-01 15:36:55 -07:00
toddouska 5319eb8f38 fix github issue #56, have tls layer use time_overrides for ticks if available and not using explicit user_ticks 2015-03-31 13:41:10 -07:00
toddouska e73b76c8ca fix warning for compilers that don't understand bitfield size 2015-03-29 14:18:52 -07:00
toddouska c9a0c9a797 fix some psk warnings 2015-03-27 19:20:31 -07:00
toddouska 495fbe087e allow dh to be used w/o certs and asn 2015-03-27 14:28:05 -07:00
toddouska ff11df2c14 enable chacha - poly by default 2015-03-27 11:22:42 -07:00
toddouska af1fd4719a enable gcm by default 2015-03-27 11:12:42 -07:00
John Safranek 54b2f423bc clear unused variable build warning for OCSP 2015-03-24 11:16:50 -07:00
John Safranek fe303c97c6 refactor CRL/OCSP lookup for peer cert. add option to allow checking all certs in peer cert chain. 2015-03-23 17:35:56 -07:00
John Safranek 9f2454fc78 Added a noop function wc_FreeRng() for when not using the HashDRBG to keep
the calls to InitRng and FreeRng simple and balanced.
2015-03-20 14:19:35 -07:00
toddouska 8e4b24d6e4 note msvc is complaining compiler 2015-03-18 14:27:07 -07:00
toddouska 64d83c39a0 Merge https://github.com/kaleb-himes/wolfssl into kaleb-master 2015-03-18 14:25:31 -07:00
toddouska f7c99cec3e obey user ecc choices at TLS layer 2015-03-18 14:12:23 -07:00
kaleb-himes fd772bb434 MSVS warning fixes for all solutions 2015-03-18 10:42:10 -06:00
toddouska 4c2bf4ea34 add SetMinVersion at context level 2015-03-13 12:20:39 -07:00
toddouska ab874d70db make suites at context level on demand only 2015-03-10 16:09:16 -07:00
toddouska 7e2931e5fa make sure DHE / client certs freed during handshake free 2015-03-09 22:13:34 -07:00
toddouska e9db5cca74 fix saveArrays check in free handshake resources 2015-03-09 09:54:29 -07:00
toddouska c201239d02 missed 2 now redundant inits on CTX 2015-03-09 09:39:50 -07:00
toddouska e6c369e026 use memset on Init SSL for 0,NULL defaults 2015-03-09 09:34:38 -07:00
toddouska 8e6f8d8693 use memset for 0,NULL defaults on CTX init 2015-03-09 09:21:04 -07:00
toddouska 7d4faf7c90 make handshake hashes dynamic part of ssl, can be freed after handshake 2015-03-09 09:05:06 -07:00
toddouska f48298cbd5 move bio fds to openssl extra 2015-03-07 10:16:26 -08:00
toddouska 450ccea7ee delay peer RSA key alloc/init until needed 2015-03-05 12:38:34 -08:00
toddouska 818d5c4bf3 fix github issue #25, delay ecc key allocs/init until needed 2015-03-05 12:15:10 -08:00
toddouska b7db43a189 make ConstantCompare available outside of internal.c 2015-02-26 17:31:47 -08:00
Jacob Barthelmeh 67e81f534a mac compare in chacha-poly AEAD and remove unneeded null check 2015-02-26 08:04:15 -07:00
toddouska 608da64ece add ForceZero() to force memset(0) 2015-02-20 15:51:21 -08:00
toddouska c3f73018a0 fix scan-build warnings 2015-02-20 12:38:29 -08:00
toddouska d5b249754b make sure poly1305 and chacha defined for chacha-poly aead mode 2015-02-19 14:33:21 -08:00
lchristina26 4c7b076cea updates to shutdown and mymktemp 2015-02-11 09:37:54 -07:00