Jacob Barthelmeh
|
38bbd41f99
|
add EDH-RSA-AES256-SHA, used in one mysql test
|
2016-05-03 09:22:16 -06:00 |
|
Jacob Barthelmeh
|
bd4e8ac714
|
cipher name string format
|
2016-05-03 09:22:15 -06:00 |
|
Jacob Barthelmeh
|
6613ebb642
|
persistant X509 struct with ssl session
|
2016-05-03 09:22:15 -06:00 |
|
dgarske
|
89f15f9393
|
Merge pull request #400 from ejohnstown/dtls-sanity-check
Fixes DTLS sanity check and bug with DTLS timeout notification deleting the peer's received msg list.
|
2016-04-29 11:55:40 -07:00 |
|
Chris Conlon
|
78e62eddd7
|
fix visual studio code analysis warnings
|
2016-04-28 13:08:50 -06:00 |
|
John Safranek
|
2f05c96004
|
added braces to else clause for compiler warning differences
|
2016-04-28 11:33:29 -07:00 |
|
John Safranek
|
0511c8cac8
|
delay check of DTLS handshake message's RH version until the handshake header check
|
2016-04-28 10:50:51 -07:00 |
|
John Safranek
|
7123b080ed
|
fix issue with missing client key exchange and duplicate change cipher spec messages.
|
2016-04-28 10:50:51 -07:00 |
|
Jacob Barthelmeh
|
77a9343973
|
use short for RSA min key size and check casts
|
2016-04-22 12:56:51 -06:00 |
|
Jacob Barthelmeh
|
1dac3841ca
|
change type to short for comparision and up default min size
|
2016-04-20 15:44:45 -06:00 |
|
Jacob Barthelmeh
|
3129bb22cd
|
minimum ECC key size check at TLS/SSL level
|
2016-04-19 15:50:25 -06:00 |
|
Jacob Barthelmeh
|
789f346c5f
|
follow verifyNone variable when checking key size
|
2016-04-19 10:23:01 -06:00 |
|
Jacob Barthelmeh
|
0eb57ccab0
|
set return error before jumping to end of function
|
2016-04-18 14:27:34 -06:00 |
|
Jacob Barthelmeh
|
c9891567e8
|
add check for min RSA key size at TLS/SSL level
|
2016-04-14 13:35:49 -06:00 |
|
kaleb-himes
|
c6e9021732
|
scan-build warnings related to enable-psk, disable-asn,rsa,ecc
|
2016-04-11 11:13:26 -06:00 |
|
toddouska
|
85505b99b9
|
Merge pull request #380 from cconlon/utasker
uTasker Port
|
2016-04-08 15:08:39 -07:00 |
|
Chris Conlon
|
46f4be357b
|
uTasker: add note about XTIME to settings.h
|
2016-04-08 11:20:58 -06:00 |
|
Chris Conlon
|
8d040ad41f
|
uTasker: add initial port, WOLFSSL_UTASKER
|
2016-04-08 11:12:17 -06:00 |
|
Jacob Barthelmeh
|
5b4f17545b
|
autoconf checks on some builds that break, macro for no server, and user rsa
|
2016-04-06 15:36:50 -06:00 |
|
David Garske
|
2d4aa1bbb5
|
Better fix for scan-build warning regarding possible use of NULL in AddRecordHeader. Scan-build considers paths where output is set to NULL, but ssl->spec.kea is corrupted/changed, which could result in output == NULL (even though it should never happen). So added proper NULL check in SendServerKeyExchange on AddHeader to make sure output isn't NULL.
|
2016-04-01 12:57:33 -07:00 |
|
David Garske
|
19f0769ec4
|
Fix for scan-build warning where async changes make it appear like the output buffer could be NULL (even though its not). Added NULL check on the AddRecordHeader function.
|
2016-04-01 10:55:01 -07:00 |
|
David Garske
|
dd28d53cfb
|
Fix build issues with new async changes. Fixed issue with unused args preSigSz and preSigIdx with PSK enabled and ECC + RSA disabled. Fixed issue with missing qsSz variable in DoClientKeyExchange. Fixed missing DhAgree and DhKeyGen with NO_CERTS and PSK enabled. Fixed a couple scan-build warnings with "Value stored to '' is never read".
|
2016-04-01 09:23:46 -07:00 |
|
toddouska
|
63b1282e67
|
Merge pull request #335 from dgarske/asynccrypt
Asynchronous crypto and wolf event support
|
2016-03-30 20:12:41 -07:00 |
|
Jacob Barthelmeh
|
e60adfc9da
|
better naming of macro and alter misc.c check
|
2016-03-29 13:42:40 -06:00 |
|
Jacob Barthelmeh
|
2665db73a4
|
check for compiling misc.c when not needed
|
2016-03-28 16:03:15 -06:00 |
|
Jacob Barthelmeh
|
67b4d2e2f4
|
case where memory is exhausted before ctx copied to ssl
|
2016-03-25 14:19:51 -06:00 |
|
David Garske
|
71683e23e9
|
Resolve 2nd unused "typeH" warning.
|
2016-03-18 06:27:42 -07:00 |
|
David Garske
|
0e43fca1f3
|
Resolve unused "typeH" warning.
|
2016-03-17 15:56:51 -07:00 |
|
Jacob Barthelmeh
|
e99a5b0483
|
prepare for release v3.9.0
|
2016-03-17 16:02:13 -06:00 |
|
David Garske
|
e1787fe160
|
Added "--enable-asynccrypt" option for enabling asynchronous crypto. This includes a refactor of SendServerKeyExchange and DoClientKeyExchange to support WC_PENDING_E on key generation, signing and verification. Currently uses async simulator (WOLFSSL_ASYNC_CRYPT_TEST) if cavium not enabled. All of the examples have been updated to support WC_PENDING_E on accept and connect. A generic WOLF_EVENT infrastructure has been added to support other types of future events and is enabled using "HAVE_WOLF_EVENT". Refactor the ASN OID type (ex: hashType/sigType) to use a more unique name. The real "async.c" and "async.h" files are in a private repo.
|
2016-03-17 13:31:03 -07:00 |
|
Jacob Barthelmeh
|
db758dc98b
|
update test script, fall back to cert name search, fix der free
|
2016-03-12 09:37:32 -07:00 |
|
Jacob Barthelmeh
|
060e278559
|
Merge branch 'master' of https://github.com/wolfSSL/wolfssl into Certs
|
2016-03-11 23:48:39 -07:00 |
|
JacobBarthelmeh
|
154f027c54
|
Merge pull request #347 from dgarske/ScanBuildFix214
Address scan-build issue on build #214 after DerBuffer refactor part 2
|
2016-03-11 16:53:41 -07:00 |
|
David Garske
|
81b0ccdb1a
|
Address scan-build issue on build #214 after DerBuffer refactor part 2 (ceafb25).
|
2016-03-11 09:39:13 -08:00 |
|
Moisés Guimarães
|
2e1c1ca7f8
|
remove unnecessary condition
|
2016-03-10 23:07:36 -03:00 |
|
David Garske
|
80aa431689
|
Fixes multiple Jenkins warnings/failures. First is PickHashSigAlgo is required for client builds or if certs are enabled. Fixed scan-build warning with OCSP not recognized ForceZero as cleaning memory and using possible garbage value. Also cleaned up the OCSP functions to use struct buffer* instead of void* for clarity with a little forward declaration.
|
2016-03-10 09:38:11 -08:00 |
|
Kaleb Joseph Himes
|
0a1871e77c
|
Merge pull request #337 from dgarske/WarnDoubleFree
Fixes scan-build warning with "--enable-opensslextra --disable-memory"
|
2016-03-09 16:28:18 -08:00 |
|
toddouska
|
ceafb25f49
|
Merge pull request #338 from dgarske/DerBufferRefactor2
Refactor of DerBuffer, so WOLFSSL object doesn't have to grow as a re…
|
2016-03-09 12:36:22 -08:00 |
|
David Garske
|
f17dfa5b03
|
Moved the x509 XFREE to outside the FreeX509 function. Internally FreeX509 is only used in two places. One is for the ssl->peerCert, which is not dynamic anyways. The second is in the ExternalFreeX509 where it calls FreeX509 if its dynamic and will XFREE there.
|
2016-03-09 09:15:00 -08:00 |
|
David Garske
|
0f93b86b61
|
Fixes for PK_CALLBACKS and sniffer after DerBuffer refactor #2.
|
2016-03-08 08:56:14 -08:00 |
|
David Garske
|
ce9f14f713
|
Refactor of DerBuffer, so WOLFSSL object doesn't have to grow as a result of additional functionality. Removed InitDer. Changed all DerBuffers to use pointer and pass pointer to DerBuffer* to AllocDer and FreeDer. Result is more efficient code and reduced WOLFSSL object size. AllocDer uses first part of the allocated buffer for the actual DerBuffer.
|
2016-03-08 08:56:14 -08:00 |
|
David Garske
|
daa1cd634e
|
Fixes scan-build warning with "--enable-opensslextra --disable-memory". Problem was different #if defines on the InitX509 and FreeX509, which caused the static analyzer to think the "x509->dynamicMemory" was always true.
|
2016-03-08 08:38:02 -08:00 |
|
David Garske
|
8e8ee45828
|
LeanTLS: Fixed issue with GetCA, GetCAByName and PickHashSigAlgo with HAVE_ECC, NO_RSA and NO_CERTS defined. Added new "--enable-leantls" option, which enables TLS 1.2 client only with ECC256, AES128 and SHA256 (no RSA, DH, DSA, MD4, MD5, SHA, PSK, PWD, CERTS, DES3, Error Strings, ARC4, Coding, Memory or File System).
|
2016-03-08 08:35:28 -08:00 |
|
dgarske
|
98a72a3f9d
|
Merge pull request #334 from JacobBarthelmeh/master
update wolfssl-ntru vs project and fix warnings
|
2016-03-03 15:53:52 -08:00 |
|
dgarske
|
8ca1c3935d
|
Merge pull request #322 from ejohnstown/dtls-handshake
DTLS Handshake Update
|
2016-03-03 14:33:31 -08:00 |
|
Jacob Barthelmeh
|
c98c457b9b
|
update wolfssl-ntru vs project and fix warnings
|
2016-03-03 14:35:39 -07:00 |
|
dgarske
|
a0f1e1e3ea
|
Merge pull request #331 from kaleb-himes/CID-66006-coverity
Move assignment to after the null check
|
2016-03-02 15:23:58 -08:00 |
|
Jacob Barthelmeh
|
267dc48d95
|
fixs after testing : hash table, using NO_SKID, sanity check, and freeing dCert
|
2016-03-02 15:23:50 -07:00 |
|
Jacob Barthelmeh
|
05d2cec7c1
|
addition to api tests and refactor location of trusted peer cert check
|
2016-03-02 11:35:03 -07:00 |
|
kaleb-himes
|
01cd43c319
|
Seperate declaration and assignment per c99 standards
|
2016-03-02 11:31:08 -07:00 |
|