 Jacob Barthelmeh
|
c9525d9c1d
|
add opensslextra=x509small build option
|
2018-02-19 17:32:39 -07:00 |
|
|
Jacob Barthelmeh
|
2e15842ef2
|
revert verify depth check and increase array size to account for possible cert index
|
2018-02-14 10:01:22 -07:00 |
|
|
Jacob Barthelmeh
|
6f1e5383da
|
check on verify depth for certificates with opensslextra
|
2018-02-13 10:29:23 -07:00 |
|
 toddouska
|
e254f25baf
|
Merge pull request #1359 from SparkiDev/nginx_fixes
Fixes to get Nginx working again.
|
2018-02-09 13:17:38 -08:00 |
|
 Sean Parkinson
|
297fb1a447
|
Fixes to get Nginx working again.
Only use weOwnDH as Nginx can change from client to server.
Allow TLS v1.3 with client method for Nginx.
|
2018-02-08 11:14:31 +10:00 |
|
|
Jacob Barthelmeh
|
a1a1ca9991
|
Fix for build with having opensslextra and IGNORE_NAME_CONSTRAINTS
|
2018-02-07 09:54:24 -07:00 |
|
|
Jacob Barthelmeh
|
580a55ce49
|
fix build for OLD_HELLO_ALLOWED macro
|
2018-01-29 14:55:32 -07:00 |
|
|
toddouska
|
2efe7f6d96
|
Merge pull request #1319 from JacobBarthelmeh/Compatibility-Layer-Part5
Compatibility layer part4
|
2018-01-19 14:49:12 -08:00 |
|
|
Jacob Barthelmeh
|
be98e3e7f3
|
build condition for SendAlerts and fix free of x509 store
|
2018-01-19 09:48:02 -07:00 |
|
|
Jacob Barthelmeh
|
025ba1445e
|
add WOLFSSL_VERIFY_CB_ALL_CERTS macro
|
2018-01-18 18:26:32 -07:00 |
|
|
Jacob Barthelmeh
|
a0f5126076
|
build option fixes
|
2018-01-17 16:40:06 -07:00 |
|
|
toddouska
|
54acc2df51
|
Merge pull request #1318 from SparkiDev/tls13_draft22
Changes for TLS v1.3 Draft 22
|
2018-01-17 11:22:50 -08:00 |
|
|
Jacob Barthelmeh
|
676e2f1f63
|
add comments and remove 2999 bit rsa key test for now
|
2018-01-17 11:19:21 -07:00 |
|
|
Jacob Barthelmeh
|
bf57da1914
|
static analysis fixes, free buffer return in test case, fips build
|
2018-01-17 09:28:25 -07:00 |
|
|
Sean Parkinson
|
5f14de33e7
|
Changes for TLS v1.3 Draft 22
Middlebox compatibility available too.
|
2018-01-17 09:38:11 +10:00 |
|
 Takashi Kojo
|
13325606b7
|
Peer cert ASN PARSE ERROR
|
2018-01-16 14:51:42 -07:00 |
|
|
Takashi Kojo
|
6f44969e23
|
Signature check compatibility
|
2018-01-16 14:48:56 -07:00 |
|
|
Takashi Kojo
|
2fdf98ebd4
|
eliminate redandant pad block, DES3
|
2018-01-16 14:48:56 -07:00 |
|
 Go Hosohara
|
e8d628f61b
|
wrap up no certificate alert related code in OPENSSL_EXTRA directive.
|
2018-01-16 14:48:55 -07:00 |
|
|
Takashi Kojo
|
f690a980bf
|
Avoid duplicated callback when error is overriden
|
2018-01-16 14:48:53 -07:00 |
|
|
Jacob Barthelmeh
|
92c9ff5f48
|
reset cipher suites after call to wolfSSL_set_options
|
2018-01-16 14:45:58 -07:00 |
|
|
Takashi Kojo
|
0a3d6534c7
|
add SanityCheckMsgReceived in ProcessOldClientHello
|
2018-01-16 14:42:17 -07:00 |
|
|
Go Hosohara
|
d6e22346e3
|
Regarding with commit #4899aad884880bb8ef1859ea6b57eded013cd2b4, send no certificate alert only if SSLv3, otherwise proceed with size 0 certificate.
|
2018-01-16 14:42:17 -07:00 |
|
|
Takashi Kojo
|
2a4766198a
|
add SendAlert(ssl, alert_fatal, bad_certificate);
|
2018-01-16 14:42:15 -07:00 |
|
|
Takashi Kojo
|
401db67bcd
|
WOLFSSL_MIN_DOWNGRADE, default: TLSv1_MINOR
|
2018-01-16 14:41:03 -07:00 |
|
|
Takashi Kojo
|
5a40d8b3c2
|
rollingback certErr_ovrdn, VerifyCallback
|
2018-01-16 14:41:01 -07:00 |
|
|
Takashi Kojo
|
a19813eab2
|
CertificateVerify, getting past when the error is overridden by VerifyCallback
|
2018-01-16 14:39:40 -07:00 |
|
|
Takashi Kojo
|
2f1f86d5f2
|
VerifyCallback with any reason
|
2018-01-16 14:35:10 -07:00 |
|
 Go Hosohara
|
8336e02931
|
send no certificate alert on SSLv3 if certificate size is 0.
|
2018-01-16 14:32:52 -07:00 |
|
|
Jacob Barthelmeh
|
b40218f7f4
|
certificate verify callback override
|
2018-01-16 14:32:50 -07:00 |
|
|
Go Hosohara
|
3d0c850e10
|
Change to send certificate message on SSLv3 even though certificate size is 0.
|
2018-01-16 14:27:50 -07:00 |
|
|
Jacob Barthelmeh
|
21a14403c6
|
wolfSSL_set_options behavior with downgrade version
|
2018-01-16 14:27:50 -07:00 |
|
|
Takashi Kojo
|
973bac429c
|
eliminate dupricate callbacks on -188 error
|
2018-01-16 14:27:48 -07:00 |
|
|
Takashi Kojo
|
2cee800127
|
verifyCallback and SendAlert on invalid certificate,
|
2018-01-16 14:24:00 -07:00 |
|
|
Takashi Kojo
|
4ab0934000
|
Merge branch 'Compatibility-Layer-Part5' of https://github.com/JacobBarthelmeh/wolfssl into Compatibility-Layer-Part5
|
2018-01-16 14:16:14 -07:00 |
|
|
Go Hosohara
|
54a006f47d
|
correct wolfSSL_get_state() by code review suggestion.
|
2018-01-16 13:50:00 -07:00 |
|
|
Go Hosohara
|
a32ae3e516
|
Change to kick info callback when state transition occurs.
|
2018-01-16 13:50:00 -07:00 |
|
|
Jacob Barthelmeh
|
a643ae1907
|
return code of sk num, X509 store peer chain, and get text by NID fix
|
2018-01-16 13:49:58 -07:00 |
|
|
Jacob Barthelmeh
|
cc5e9e3dae
|
adjustment for verify callback and certificate error depth
|
2018-01-16 13:44:52 -07:00 |
|
|
Takashi Kojo
|
3af8975a66
|
shadow global value error with cross-compiler
|
2018-01-16 13:34:35 -07:00 |
|
|
Jacob Barthelmeh
|
990e1f3ddf
|
implement wolfSSL set msg callback function
|
2018-01-16 10:39:20 -07:00 |
|
|
Jacob Barthelmeh
|
ede8127569
|
implement function for setting CTX verify depth
|
2018-01-16 02:17:40 -07:00 |
|
|
Jacob Barthelmeh
|
fcb1a10a3c
|
upadte memory bio read and setting bios in ssl struct
|
2018-01-16 01:42:34 -07:00 |
|
|
Jacob Barthelmeh
|
ad6cc6be2e
|
fix clang build warnings and change return type
|
2018-01-16 01:12:11 -07:00 |
|
|
Jacob Barthelmeh
|
db3badb73a
|
add GENERAL NAME stack functions and fix WOLFSSL_BIO free with files
|
2018-01-16 01:12:09 -07:00 |
|
|
Jacob Barthelmeh
|
32bf163633
|
update base64 WOLFSSL_BIO encoding and checking session context ID
|
2018-01-15 17:54:46 -07:00 |
|
|
Jacob Barthelmeh
|
60b21ffa62
|
add compat functions; rand egd, rand file, bio_f_base64, bio pop, bio set flags, crypto set id callback, crypto set locking callback, evp pkey get1 RSA, PEM write bio RSA private key, set info callback and alter ERR GET REASON
|
2018-01-15 16:06:36 -07:00 |
|
 David Garske
|
481f4765eb
|
Cleanup to remove duplicate MAX_DIGEST_SIZE in hmac.h and refactor to use WC_MAX_DIGEST_SIZE. Cleanup for HMAC to include hash.h and refactor HMAC_BLOCK_SIZE to WC_HMAC_BLOCK_SIZE. Fix build warning in benchmark.c with unused variable if features are disabled.
|
2018-01-11 09:52:49 -08:00 |
|
|
Jacob Barthelmeh
|
23b271da84
|
clean up after rebase
|
2018-01-10 09:28:56 -07:00 |
|
|
Jacob Barthelmeh
|
326d889658
|
initialize extra name entries to 0
|
2018-01-10 09:28:56 -07:00 |
|